kopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000300)=0x5, 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x1fffffe}}}, 0x108) pselect6(0x40, &(0x7f00000013c0)={0x0, 0xfffffffffffffeff, 0x0, 0x9d, 0x5, 0x0, 0x8}, 0x0, &(0x7f0000001440)={0xe5, 0x80000000a, 0x0, 0x2000000000000005, 0x1, 0x401, 0x81, 0x104c0cd1}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x8000007]}, 0x8}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000cc0)={&(0x7f0000000b40), 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0x34, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xd46bfd064b4f5a8b}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68000010", @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000"], 0x268}, 0x1, 0x0, 0x0, 0x200080d5}, 0x24044040) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="42000000007bbb0000002e2f66696c0000000000000000b32f"]) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x2) fstatfs(0xffffffffffffffff, &(0x7f0000000c40)=""/46) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000008c0), 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000280)) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000180), &(0x7f0000000200)=0xc) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000240)=0xffffffffffffffff) unshare(0x48020200) [ 1666.160728] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1666.175451] FAULT_INJECTION: forcing a failure. [ 1666.175451] name failslab, interval 1, probability 0, space 0, times 0 [ 1666.177996] CPU: 1 PID: 10028 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1666.179507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1666.181301] Call Trace: [ 1666.181888] dump_stack+0x107/0x167 [ 1666.182695] should_fail.cold+0x5/0xa [ 1666.183546] ? __alloc_skb+0x6d/0x5b0 [ 1666.184384] should_failslab+0x5/0x20 [ 1666.185192] kmem_cache_alloc_node+0x55/0x330 [ 1666.186159] __alloc_skb+0x6d/0x5b0 [ 1666.186972] alloc_skb_with_frags+0x92/0x570 [ 1666.187924] sock_alloc_send_pskb+0x7af/0x930 [ 1666.188877] ? sk_alloc+0x350/0x350 [ 1666.189651] ? perf_trace_lock+0xac/0x490 [ 1666.190524] ? SOFTIRQ_verbose+0x10/0x10 [ 1666.191426] ? lock_chain_count+0x20/0x20 [ 1666.192355] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 1666.193477] ? ip_frag_init+0x350/0x350 [ 1666.194223] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1666.194368] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 1666.197641] ? ip6_mtu+0x1e9/0x3d0 [ 1666.198436] ? ip6_setup_cork+0xfb7/0x1740 [ 1666.199374] ip6_make_skb+0x2df/0x4e0 [ 1666.200210] ? ip_frag_init+0x350/0x350 [ 1666.201082] ? ip_frag_init+0x350/0x350 [ 1666.201955] ? ip6_push_pending_frames+0xf0/0xf0 [ 1666.203018] ? ip6_dst_hoplimit+0x199/0x440 [ 1666.203988] ? lock_downgrade+0x6d0/0x6d0 [ 1666.204929] udpv6_sendmsg+0x2128/0x2b40 [ 1666.205829] ? ip_frag_init+0x350/0x350 [ 1666.206719] ? udp_v6_push_pending_frames+0x360/0x360 [ 1666.207858] ? SOFTIRQ_verbose+0x10/0x10 [ 1666.208764] ? __lockdep_reset_lock+0x180/0x180 [ 1666.209809] ? lock_acquire+0x197/0x470 [ 1666.210685] ? find_held_lock+0x2c/0x110 [ 1666.211606] ? lock_chain_count+0x20/0x20 [ 1666.212529] ? sock_has_perm+0x1ea/0x280 [ 1666.213459] ? __import_iovec+0x458/0x590 [ 1666.214382] ? udp_v6_push_pending_frames+0x360/0x360 [ 1666.215542] inet6_sendmsg+0x105/0x140 [ 1666.216370] ? inet6_compat_ioctl+0x320/0x320 [ 1666.217355] __sock_sendmsg+0xf2/0x190 [ 1666.218216] ____sys_sendmsg+0x334/0x870 [ 1666.219096] ? sock_write_iter+0x3d0/0x3d0 [ 1666.220030] ? do_recvmmsg+0x6d0/0x6d0 [ 1666.220893] ? __lock_acquire+0x1657/0x5b00 [ 1666.221836] ___sys_sendmsg+0xf3/0x170 [ 1666.222666] ? sendmsg_copy_msghdr+0x160/0x160 [ 1666.223158] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1666.223641] ? __lockdep_reset_lock+0x180/0x180 [ 1666.226820] ? lock_acquire+0x197/0x470 [ 1666.227662] ? find_held_lock+0x2c/0x110 [ 1666.228562] ? __might_fault+0xd3/0x180 [ 1666.229444] ? lock_downgrade+0x6d0/0x6d0 [ 1666.230363] __sys_sendmmsg+0x195/0x470 [ 1666.231212] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1666.232146] ? lock_downgrade+0x6d0/0x6d0 [ 1666.233076] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1666.234097] ? wait_for_completion_io+0x270/0x270 [ 1666.235114] ? rcu_read_lock_any_held+0x75/0xa0 [ 1666.236140] ? vfs_write+0x354/0xb10 [ 1666.236965] ? fput_many+0x2f/0x1a0 [ 1666.237758] ? ksys_write+0x1a9/0x260 [ 1666.238589] ? __ia32_sys_read+0xb0/0xb0 [ 1666.239501] __x64_sys_sendmmsg+0x99/0x100 [ 1666.240429] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1666.241556] do_syscall_64+0x33/0x40 [ 1666.242377] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1666.243521] RIP: 0033:0x7f9688118b19 [ 1666.244339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1666.248279] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1666.249927] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1666.251433] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1666.252961] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1666.254536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1666.255686] tmpfs: Unknown parameter 'ÿÿ01777777777777777777777ÿÿÿÿÿÿÿÿ18446744073709551615' [ 1666.256125] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:23:54 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2f00, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:23:54 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x48000000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:23:54 executing program 2: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a9", 0x1f) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200210e00"/20], 0x14}}, 0x0) r2 = syz_open_dev$vcsu(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0xfffffffffffffd69, 0x0) syz_io_uring_setup(0x4612, &(0x7f0000000400)={0x0, 0x69ec, 0x10, 0x0, 0x3aa, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000004c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_dev$mouse(&(0x7f0000000200), 0x5, 0x21c146) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, {{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000000000a00000000000000ff010000000000000000000000000001000000ed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000ff01000000000000000000000000000100"/199], 0x110) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f00000001c0)=0xd7df, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) unshare(0x48020200) [ 1666.346394] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1666.366060] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1666.371315] tmpfs: Unknown parameter 'ÿÿ01777777777777777777777ÿÿÿÿÿÿÿÿ18446744073709551615' 02:23:54 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6201, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1666.437519] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. 02:23:54 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x4c000000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:23:54 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r0}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:23:54 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [{0x20, '*.)-[@@\\'}, {0x20, '$}{\\*'}, {0x20, '\x00'}], 0xa, "ddb8c8ebaab7a895a9cfde31626bedcefcae23370a7742adf629a4e3fe3ea99a8aaf9e139598d25a63230a4fd08d769f48f58ce9"}, 0x50) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000380)={{'\x00', 0x3}, {0x7}, 0x28, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)="1b9d5d83aa2989314cf7f7161d85e563163c02a5d3e51e2fbd1b3c85a894893802cc2199a06af400148b1d36a2e8f99e6d83bcfaa05141b9e09036ee65e8f14442ea93f78b5fc21adaa58d5ec3e71519920e760f4c30bfc41ccd55ce8508da49e38fb6a0c2dfb9ee9c6b067e5da2037509dd6704a335073cea6fc8ce0199432ff15d08d5fdcfdeada220a381f1", 0x8d, 0x0, &(0x7f0000000200)={0x2, 0x12e, {0x1, 0xc, 0xa4, "ede19e8cc23062b0415a6d9eecfa175c3407d4be53f314582188189320e61f0db5acbb7c294557117f02bcce3aaf89f45f9587685c2287fb8454273984ef92850ed35cab93b3e2291f03293a4efe6dbe371fe7067122ca626bb61c7084237b7191d3286bf2d9217d66bb22bb001d2d60891c0ca56e27bd9f4fbb5d57353744a312a62befaae24703994116de35c5cd03647d932b60d1577593d061ed38d871eac7539ab6", 0x7d, "a7791ae7c6778ff8401359398946a0bbff70017d521b9e81b4d47dc0f313cee7a2ba29c6cecd0367dfca58de1f5ffb0148a26ec33bf888dd266dc213779a5a42c777a1085ba6cbe329f9fa46323c638bf4702dd9eddb2654eaaad2e48f5dd65c05025f80770ee7e08c348559b6e2d47291df7fba5f50dce64d2bfa3585"}, 0x29, "cc89b67dccbe2d3a32885a20a35eafdbf56c91ff79effd98be3f15ffe222841fba765a3f6fca877d36"}, 0x163}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x70) r2 = dup(r1) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x3) 02:23:54 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 45) 02:23:54 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x40001000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) [ 1666.633319] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:23:54 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf000, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1666.676455] FAULT_INJECTION: forcing a failure. [ 1666.676455] name failslab, interval 1, probability 0, space 0, times 0 [ 1666.679539] CPU: 0 PID: 10056 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1666.681374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1666.683605] Call Trace: [ 1666.684294] dump_stack+0x107/0x167 [ 1666.685242] should_fail.cold+0x5/0xa [ 1666.686236] should_failslab+0x5/0x20 [ 1666.687236] __kmalloc_node_track_caller+0x74/0x3b0 [ 1666.688575] ? alloc_skb_with_frags+0x92/0x570 [ 1666.689796] __alloc_skb+0xb1/0x5b0 [ 1666.690751] alloc_skb_with_frags+0x92/0x570 [ 1666.691950] sock_alloc_send_pskb+0x7af/0x930 [ 1666.693140] ? sk_alloc+0x350/0x350 [ 1666.694101] ? perf_trace_lock+0xac/0x490 [ 1666.695189] ? SOFTIRQ_verbose+0x10/0x10 [ 1666.696293] ? lock_chain_count+0x20/0x20 [ 1666.697392] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 1666.698709] ? ip_frag_init+0x350/0x350 [ 1666.699799] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 1666.701042] ? ip6_mtu+0x1e9/0x3d0 [ 1666.701973] ? ip6_setup_cork+0xfb7/0x1740 [ 1666.703085] ip6_make_skb+0x2df/0x4e0 [ 1666.704104] ? ip_frag_init+0x350/0x350 [ 1666.705145] ? ip_frag_init+0x350/0x350 [ 1666.706191] ? ip6_push_pending_frames+0xf0/0xf0 [ 1666.707450] ? ip6_dst_hoplimit+0x199/0x440 [ 1666.708563] ? lock_downgrade+0x6d0/0x6d0 [ 1666.709665] udpv6_sendmsg+0x2128/0x2b40 [ 1666.710729] ? ip_frag_init+0x350/0x350 [ 1666.711802] ? udp_v6_push_pending_frames+0x360/0x360 [ 1666.713147] ? SOFTIRQ_verbose+0x10/0x10 [ 1666.714227] ? __lockdep_reset_lock+0x180/0x180 [ 1666.715470] ? lock_acquire+0x197/0x470 [ 1666.716520] ? find_held_lock+0x2c/0x110 [ 1666.717594] ? sock_has_perm+0x1ea/0x280 [ 1666.718674] ? __import_iovec+0x458/0x590 [ 1666.719754] ? udp_v6_push_pending_frames+0x360/0x360 [ 1666.721054] inet6_sendmsg+0x105/0x140 [ 1666.722032] ? inet6_compat_ioctl+0x320/0x320 [ 1666.723168] __sock_sendmsg+0xf2/0x190 [ 1666.724195] ____sys_sendmsg+0x334/0x870 [ 1666.725225] ? sock_write_iter+0x3d0/0x3d0 [ 1666.726288] ? do_recvmmsg+0x6d0/0x6d0 [ 1666.727273] ? __lock_acquire+0x1657/0x5b00 [ 1666.728407] ___sys_sendmsg+0xf3/0x170 [ 1666.729401] ? sendmsg_copy_msghdr+0x160/0x160 02:23:54 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd21}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x7fff, 0x9, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffa000/0x6000)=nil, 0x6000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)=ANY=[@ANYBLOB="ffc80054be39a9fcbce365a8cdfd020061dbab4fa33cf2", @ANYRES32, @ANYBLOB="090000000000f3002e2f6682968e0b0c"]) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x81, [0x2, 0xffffffffffff0b36, 0x0, 0xedc, 0x1, 0x40]}) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) [ 1666.730561] ? __lockdep_reset_lock+0x180/0x180 [ 1666.731962] ? __fget_files+0x2cf/0x520 [ 1666.732958] ? lock_acquire+0x197/0x470 [ 1666.733945] ? find_held_lock+0x2c/0x110 [ 1666.734984] ? __might_fault+0xd3/0x180 [ 1666.735995] ? lock_downgrade+0x6d0/0x6d0 [ 1666.737054] __sys_sendmmsg+0x195/0x470 [ 1666.738050] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1666.739137] ? lock_downgrade+0x6d0/0x6d0 [ 1666.740212] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1666.741462] ? wait_for_completion_io+0x270/0x270 [ 1666.742695] ? rcu_read_lock_any_held+0x75/0xa0 [ 1666.743911] ? vfs_write+0x354/0xb10 [ 1666.744866] ? fput_many+0x2f/0x1a0 [ 1666.745783] ? ksys_write+0x1a9/0x260 [ 1666.746759] ? __ia32_sys_read+0xb0/0xb0 [ 1666.747834] __x64_sys_sendmmsg+0x99/0x100 [ 1666.748916] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1666.750225] do_syscall_64+0x33/0x40 [ 1666.751165] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1666.752516] RIP: 0033:0x7f9688118b19 [ 1666.753472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1666.758084] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1666.759967] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1666.761706] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1666.763464] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1666.765241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1666.767014] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:23:54 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x68000000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:23:54 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x1b, 0xb31, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:23:54 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1666.881675] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:24:10 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:24:10 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r0}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:24:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000000001c59994138e307ea0000000000f2e157ed4d5c18fd602ffd6bebfac33ee45e9c9ac7c10caa8569a1eeeff992a49b5de850e517cbf6145acc30af052402294fd1869eae30fbe966a75d1ef7e9593a490c697aeac4d969c87b99daa0ae69b5f67ecb5abb93a48c7e5e2632f4279834c55e2bce5309233c7a8ad6918ac7d007a2ab21d5cf46fbffefb95de86ac41df6bd040fe9c71aedeac31d1180ab76cb4d2be795b3985561801ceb82abd25dd63c2b75ac1349d008de99ef10e16a18b9ee", @ANYRES32, @ANYBLOB="a100da1208001b"], 0x28}}, 0x0) 02:24:10 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 46) 02:24:10 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x4, 0x406, 0xff, r3}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x116b, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0000010000800000000000f8ff00ffffffffff000000"]}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r4 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) perf_event_open(&(0x7f0000000980)={0x4, 0x80, 0x3f, 0x81, 0xff, 0x1, 0x0, 0x0, 0x20080, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x493bb495, 0x2, @perf_config_ext={0x8001, 0x9}, 0x4000, 0xca21, 0xb4f, 0x4, 0x10000, 0x1, 0x4, 0x0, 0x9, 0x0, 0xfff}, 0xffffffffffffffff, 0xa, r1, 0x0) syz_io_uring_setup(0x4795, &(0x7f0000000300)={0x0, 0x6c20, 0x2, 0x2, 0x39d, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000680)) syz_io_uring_setup(0x4d4f, &(0x7f0000000380)={0x0, 0x3, 0x0, 0x0, 0x89}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/142, 0x8e}], 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000480)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000b00)=""/221, 0xdd}, {&(0x7f00000007c0)=""/207, 0xcf}, {&(0x7f00000006c0)=""/156, 0x9c}, {&(0x7f0000000400)=""/10, 0xa}, {&(0x7f0000000900)=""/123, 0x7b}, {&(0x7f00000005c0)=""/161, 0xa1}], 0x6, &(0x7f0000000440)=""/8, 0x8}, 0x0, 0x43, 0x1, {0x3}}, 0x8) unshare(0x48020200) 02:24:10 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000002c0)="85c0bd00fe4f08c153636898f01ddb0b", 0x10) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000580)) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000900)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x33, 0x0, "4fb2386f65a856b6930930052d7d4e52fc4032fe98f268baabdf34269819ec36e44c87f906b59567acb1dd5aa5ba7be8ecc7069f172fddc076e97b1bb7ad34493270d4dbba4a2ca52cc13ca18e08c805"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x9) pipe2$9p(&(0x7f0000000500), 0x80000) r1 = syz_open_dev$vcsn(&(0x7f0000000240), 0x8000, 0x402082) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fspick(r1, &(0x7f0000000440)='./file1\x00', 0x0) r3 = openat$incfs(0xffffffffffffffff, &(0x7f00000005c0)='.log\x00', 0x142c2, 0x88) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x64, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x7, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) [ 1682.245370] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 02:24:10 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x6c000000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1682.261422] FAULT_INJECTION: forcing a failure. [ 1682.261422] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.264336] CPU: 0 PID: 10092 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1682.265858] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1682.267595] Call Trace: [ 1682.268166] dump_stack+0x107/0x167 [ 1682.269096] should_fail.cold+0x5/0xa [ 1682.270085] should_failslab+0x5/0x20 [ 1682.271050] __kmalloc_node_track_caller+0x74/0x3b0 [ 1682.272357] ? alloc_skb_with_frags+0x92/0x570 [ 1682.273316] __alloc_skb+0xb1/0x5b0 [ 1682.274101] alloc_skb_with_frags+0x92/0x570 [ 1682.275037] sock_alloc_send_pskb+0x7af/0x930 [ 1682.276199] ? sk_alloc+0x350/0x350 [ 1682.277154] ? perf_trace_lock+0xac/0x490 [ 1682.278117] ? SOFTIRQ_verbose+0x10/0x10 [ 1682.278983] ? lock_chain_count+0x20/0x20 [ 1682.280070] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 1682.281147] ? ip_frag_init+0x350/0x350 [ 1682.282011] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 1682.283014] ? ip6_mtu+0x1e9/0x3d0 [ 1682.283890] ? ip6_setup_cork+0xfb7/0x1740 [ 1682.285002] ip6_make_skb+0x2df/0x4e0 [ 1682.285850] ? ip_frag_init+0x350/0x350 [ 1682.286703] ? ip_frag_init+0x350/0x350 [ 1682.287570] ? ip6_push_pending_frames+0xf0/0xf0 [ 1682.288586] ? ip6_dst_hoplimit+0x199/0x440 [ 1682.289469] ? lock_downgrade+0x6d0/0x6d0 [ 1682.290446] udpv6_sendmsg+0x2128/0x2b40 [ 1682.291386] ? ip_frag_init+0x350/0x350 [ 1682.292431] ? udp_v6_push_pending_frames+0x360/0x360 [ 1682.293513] ? SOFTIRQ_verbose+0x10/0x10 [ 1682.294365] ? __lockdep_reset_lock+0x180/0x180 [ 1682.295349] ? lock_acquire+0x197/0x470 [ 1682.296197] ? find_held_lock+0x2c/0x110 [ 1682.297055] ? lock_chain_count+0x20/0x20 [ 1682.297914] ? sock_has_perm+0x1ea/0x280 [ 1682.298800] ? __import_iovec+0x458/0x590 [ 1682.299862] ? udp_v6_push_pending_frames+0x360/0x360 [ 1682.300951] inet6_sendmsg+0x105/0x140 [ 1682.301858] ? inet6_compat_ioctl+0x320/0x320 [ 1682.303006] __sock_sendmsg+0xf2/0x190 [ 1682.303860] ____sys_sendmsg+0x334/0x870 [ 1682.304713] ? sock_write_iter+0x3d0/0x3d0 [ 1682.305621] ? do_recvmmsg+0x6d0/0x6d0 [ 1682.306479] ? find_held_lock+0x2c/0x110 [ 1682.307333] ___sys_sendmsg+0xf3/0x170 [ 1682.308285] ? sendmsg_copy_msghdr+0x160/0x160 [ 1682.309284] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1682.310573] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1682.311625] ? trace_hardirqs_on+0x5b/0x180 [ 1682.312719] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1682.313692] ? finish_task_switch+0x126/0x5d0 [ 1682.314651] ? finish_task_switch+0xef/0x5d0 [ 1682.315590] ? __switch_to+0x572/0xf70 [ 1682.316416] ? __switch_to_asm+0x3a/0x60 [ 1682.317382] ? __switch_to_asm+0x34/0x60 [ 1682.318348] ? __schedule+0x82c/0x1ea0 [ 1682.319335] ? io_schedule_timeout+0x140/0x140 [ 1682.320372] __sys_sendmmsg+0x195/0x470 [ 1682.321244] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1682.322305] ? lock_downgrade+0x6d0/0x6d0 [ 1682.323362] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1682.324544] ? wait_for_completion_io+0x270/0x270 [ 1682.325768] ? rcu_read_lock_any_held+0x75/0xa0 [ 1682.326898] ? vfs_write+0x354/0xb10 [ 1682.327706] ? fput_many+0x2f/0x1a0 [ 1682.328574] ? ksys_write+0x1a9/0x260 [ 1682.329540] ? __ia32_sys_read+0xb0/0xb0 [ 1682.330413] __x64_sys_sendmmsg+0x99/0x100 [ 1682.331403] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1682.332714] do_syscall_64+0x33/0x40 [ 1682.333505] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1682.334781] RIP: 0033:0x7f9688118b19 [ 1682.335663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1682.339484] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1682.341020] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1682.342657] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1682.344118] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1682.345530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1682.347314] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:24:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB="38010000190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB="180008005200080000004a0081de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09783cf44a80ca63378a5e0300000000bd90dc866e11212215058db08ac5a60bbd962b000008000c000000000008000b0000000000050019000000000008001f00", @ANYRES32=0x0, @ANYBLOB="f6c59a07ce70b5e92bd998101c4437f659cbfa022aa8ffa149bdf452e7cb80971dd5863edd85d25b89660184e2212bb20bd26241eabb4d46ddd3f4c54b7ba8c0f432d1b65084cfd0c2cf6c508df81cc0e95cd953ebce876f5440494b924c7e71c6456d0ebf6228c2eec1e60be1647a7cf52898ac0db330b4f7741e013cb9b5af49ced342a153d156a75effca1d1d3004b0c0db29151566e4290d2139f6a9ce745d9e2e872e875e5c0b83678a763592e768e4e0d5e509453516a9"], 0x138}}, 0x0) dup3(0xffffffffffffffff, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) fcntl$setsig(r1, 0xa, 0x28) copy_file_range(0xffffffffffffffff, &(0x7f00000001c0), r1, &(0x7f0000000680)=0x8000000000000000, 0xae, 0x0) close(r1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1/file0\x00', 0x81, 0xe9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0], 0xb8) r3 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='.\x00', 0x0, 0x4, &(0x7f0000000380)=[{&(0x7f0000000080)="31fa21fdbbc98f128f45d0956df23c2652cdf93d611fc2f98397954b9d7d9b3275a0bcf4", 0x24, 0x80}, {&(0x7f00000000c0)="bc2df5170193", 0x6, 0x8}, {&(0x7f00000002c0)="c7db1346a5e6f99c5b73f54e61ed17bcabd62e2ed480ea89dcba4724b00a3b4d51e5a0b5d00eed1489960b218e9ca6eead84b27af335f1a383d5e53d90d827d47f74c56b321172fc32edd830073d425debb49ad66cb6045f96567b060d8199383da39ec87f21cc5fd287f1e1ca534905e4652eaf7a0d6303e733699ee3f7e6ed66be9762ce1f856274c2584f8ce9f7aff30c8a3b9c26b94a5e7bdeb82d2dbd19762c6ad2a9547863930e769bb57a8193", 0xb0, 0x4}, {&(0x7f0000000140)="a038984a80783e30a8cb52f8", 0xc, 0x8}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="6d706f6c3d6474b186c2147450c95a2b3d72656c00"/41, @ANYRESHEX=0xee01, @ANYBLOB=',huge=advise,nr_inodes=7ee,size=8,mpol=interleave=static:2,huge=advise,huge=never,mode=01777777777777777774653,fowner<', @ANYRESDEC=0xee01, @ANYBLOB=',mask=MAY_WRITE,seclabel,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) openat(r3, &(0x7f0000000180)='./file1\x00', 0x200001, 0x21) setxattr$incfs_metadata(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000700), &(0x7f0000000740)="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", 0xff, 0x2) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 02:24:10 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1682.368861] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1682.374532] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1682.407347] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. 02:24:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x80c0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x4648, 0x0, 0x2, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x82081, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001500)=ANY=[@ANYBLOB="b8000000190001002882b50df3f1a300000000000000050000ffffac1414bbac1e0001000000000d0000000000000000000000000000000a0000002f000000", @ANYRESOCT, @ANYRES32=0x0, @ANYRES16=r1], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) dup(0xffffffffffffffff) write$hidraw(r2, &(0x7f0000000500)="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", 0x1000) read(r2, &(0x7f0000000180)=""/247, 0xf7) clone3(&(0x7f00000008c0)={0x242000400, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000000c0)=0x2) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') write$cgroup_int(r4, &(0x7f0000000040), 0x12) dup3(r3, r3, 0x80000) gettid() r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x82081, 0x0) dup(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) syncfs(r6) 02:24:10 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x74000000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:24:10 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7002) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000004c0)={{}, "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"}) r1 = socket$inet(0x2, 0x2, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x20040, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @private=0xa010100}, {0x1}, 0xac1414fb, {0x2, 0x0, @broadcast}}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x2) lseek(0xffffffffffffffff, 0x7, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x10000400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000180)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x220000a, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@resgid}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x80000001}}]}) [ 1682.534090] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:24:10 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:24:10 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:24:10 executing program 5: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="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", 0xfd}, {&(0x7f0000000640)="88e28b1194902dc8c94bb616fd1e89dffce93f25deb80e1f87cb91a4a59ae8427a20a9a845b9e12cab351e367a947b201eefc2f0259688e3c6239063c74ad973629ff5eb92b96b4812be6ebaf09a3fc88bd8a4246ae4e24bb055b969d12bd00e2806a624c4b358e2cf54c07cdf77b0620448bf86ec02e24440d28518c3d1cb4aad9be87af64f2ff3aed00566372b89966f1cd68231590db691cdeb6b7a012a571fb1b93daaf71d1e56fe7df3648df0b22d680e84fa909f082255a062d06f24635f366c10c159e9fcb89543cec55e3cffdb2b6e80", 0xd4}, {&(0x7f0000000740)="de6d16a1355bf173ab1771316f2c2ca58e2c7acf3b3209c664cbc2a12814a6df064fbf3caa60d6786056cda028f07cf700fde0cb048490b0be3d8fcdeec58cd8fadf751d07cec2627a32651da01cd705a72e31ead29e802e1060d08a35dd5fe8c15032c4ce63fe22764078e9080fc92a4dc8c41a5cae9fd23c935b065b384c8dffebbcfeef9e9198", 0x88}, {&(0x7f0000000280)="9b63e74936eb03905a7f4edfd2d76c4400b90a487fc3666e213644d6896415443814186c21472434e6d68a036b64122b0bbc8b2438ca4462003f0809175519fa32f05c8bbc342646d53c87b7d03e2ebb80b02d448e82a99aebad0e921bfdace364c0ffcbf337", 0x66}], 0x4}, 0x0, 0x58f1, 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0xb, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) io_uring_enter(0xffffffffffffffff, 0x24f6, 0x488, 0x0, &(0x7f0000000100)={[0x3ff]}, 0x8) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x2, 0x2, 0x0, 0x3}, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRES64, @ANYRES16, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 02:24:10 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x7a000000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:24:10 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 47) [ 1682.732102] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:24:10 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:24:10 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x80ffffff, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1682.813612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.815530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.815819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 02:24:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="fb1eba0ca441e900dc4bacb13e725cc856585e21946acde836321a562a43f0c96510695924e32fc3e424469af5f8f552ee5c47d66ca3589d9e73cc8d9978b3f0da6bc91545", 0x45, 0x80000000}], 0x0, &(0x7f0000000100)={[{@sb}], [{@obj_type={'obj_type', 0x3d, 'sb'}}, {@obj_user={'obj_user', 0x3d, 'obj_type'}}]}) mkdir(&(0x7f00000000c0)='./file1\x00', 0x2) [ 1682.854149] FAULT_INJECTION: forcing a failure. [ 1682.854149] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.856813] CPU: 0 PID: 10129 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1682.858411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1682.860364] Call Trace: [ 1682.861016] dump_stack+0x107/0x167 [ 1682.861869] should_fail.cold+0x5/0xa [ 1682.862758] ? dst_alloc+0x9e/0x5d0 [ 1682.863614] should_failslab+0x5/0x20 [ 1682.864488] kmem_cache_alloc+0x5b/0x310 [ 1682.865442] dst_alloc+0x9e/0x5d0 [ 1682.866276] xfrm_lookup_with_ifid+0xb79/0x1b70 [ 1682.867365] ? xfrm_policy_lookup_bytype.constprop.0+0x1a70/0x1a70 [ 1682.868829] ? ip6_dst_lookup_tail+0x63b/0xfc0 [ 1682.869905] icmpv6_route_lookup+0x2b3/0x470 [ 1682.870918] ? icmpv6_err+0x320/0x320 [ 1682.871830] ? dst_release+0x58/0x180 [ 1682.872714] ? icmpv6_xrlim_allow+0xbc/0x450 [ 1682.873738] ? icmpv6_sk_init+0x2a0/0x2a0 [ 1682.874719] ? projid_m_show+0x220/0x220 [ 1682.875685] ? ip6_pol_route_input+0x70/0x70 [ 1682.876722] icmp6_send+0xfdf/0x1f30 [ 1682.877614] ? icmpv6_push_pending_frames+0x470/0x470 [ 1682.878817] ? find_held_lock+0x2c/0x110 [ 1682.879823] ? ip6_dst_hoplimit+0x440/0x440 [ 1682.880845] ip6_pkt_drop+0x3d2/0x7f0 [ 1682.881731] ? ip6_pkt_discard+0x20/0x20 [ 1682.882667] ip6_local_out+0x29f/0x4c0 [ 1682.883566] ip6_send_skb+0x117/0x460 [ 1682.884470] udp_v6_send_skb+0x7b7/0x1620 [ 1682.885447] udpv6_sendmsg+0x216b/0x2b40 [ 1682.886403] ? ip_frag_init+0x350/0x350 [ 1682.887331] ? udp_v6_push_pending_frames+0x360/0x360 [ 1682.888673] ? SOFTIRQ_verbose+0x10/0x10 [ 1682.889651] ? __lockdep_reset_lock+0x180/0x180 [ 1682.890741] ? lock_acquire+0x197/0x470 [ 1682.891679] ? find_held_lock+0x2c/0x110 [ 1682.892643] ? lock_chain_count+0x20/0x20 [ 1682.893608] ? sock_has_perm+0x1ea/0x280 [ 1682.894572] ? __import_iovec+0x458/0x590 [ 1682.895544] ? udp_v6_push_pending_frames+0x360/0x360 [ 1682.896751] inet6_sendmsg+0x105/0x140 [ 1682.897669] ? inet6_compat_ioctl+0x320/0x320 [ 1682.898715] __sock_sendmsg+0xf2/0x190 [ 1682.899632] ____sys_sendmsg+0x334/0x870 [ 1682.900567] ? sock_write_iter+0x3d0/0x3d0 [ 1682.901540] ? do_recvmmsg+0x6d0/0x6d0 [ 1682.902465] ? find_held_lock+0x2c/0x110 [ 1682.903426] ___sys_sendmsg+0xf3/0x170 [ 1682.904361] ? sendmsg_copy_msghdr+0x160/0x160 [ 1682.905433] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1682.906661] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1682.907713] ? trace_hardirqs_on+0x5b/0x180 [ 1682.908721] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1682.909760] ? finish_task_switch+0x126/0x5d0 [ 1682.910808] ? finish_task_switch+0xef/0x5d0 [ 1682.911837] ? __switch_to+0x572/0xf70 [ 1682.912735] ? __switch_to_asm+0x3a/0x60 [ 1682.913671] ? __switch_to_asm+0x34/0x60 [ 1682.914611] ? __schedule+0x82c/0x1ea0 [ 1682.915532] ? io_schedule_timeout+0x140/0x140 [ 1682.916629] __sys_sendmmsg+0x195/0x470 [ 1682.917543] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1682.918543] ? lock_downgrade+0x6d0/0x6d0 [ 1682.919808] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1682.921197] ? wait_for_completion_io+0x270/0x270 [ 1682.922579] ? rcu_read_lock_any_held+0x75/0xa0 [ 1682.923921] ? vfs_write+0x354/0xb10 [ 1682.924995] ? fput_many+0x2f/0x1a0 [ 1682.925907] ? ksys_write+0x1a9/0x260 [ 1682.926786] ? __ia32_sys_read+0xb0/0xb0 [ 1682.927747] __x64_sys_sendmmsg+0x99/0x100 [ 1682.928738] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1682.929928] do_syscall_64+0x33/0x40 [ 1682.930786] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1682.931998] RIP: 0033:0x7f9688118b19 [ 1682.932861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1682.937100] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1682.938881] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1682.940527] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1682.942168] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1682.943844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1682.945476] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 1682.992862] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1700.473109] FAULT_INJECTION: forcing a failure. [ 1700.473109] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.476050] CPU: 1 PID: 10144 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1700.477819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1700.479950] Call Trace: [ 1700.480640] dump_stack+0x107/0x167 [ 1700.481575] should_fail.cold+0x5/0xa [ 1700.482553] ? create_object.isra.0+0x3a/0xa20 [ 1700.483729] should_failslab+0x5/0x20 [ 1700.484703] kmem_cache_alloc+0x5b/0x310 [ 1700.485750] create_object.isra.0+0x3a/0xa20 [ 1700.487101] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1700.488577] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1700.489864] ? alloc_skb_with_frags+0x92/0x570 [ 1700.491028] __alloc_skb+0xb1/0x5b0 [ 1700.491969] alloc_skb_with_frags+0x92/0x570 [ 1700.493098] sock_alloc_send_pskb+0x7af/0x930 [ 1700.494250] ? sk_alloc+0x350/0x350 [ 1700.495181] ? perf_trace_lock+0xac/0x490 [ 1700.496243] ? SOFTIRQ_verbose+0x10/0x10 02:24:28 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 48) 02:24:28 executing program 0: unshare(0x28020600) r0 = semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4317, 0x40, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x48020200) semctl$IPC_RMID(r0, 0x0, 0x0) semget$private(0x0, 0x3, 0x102) unshare(0x40000000) unshare(0x40040600) 02:24:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xe) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x58, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) [ 1700.497470] ? lock_chain_count+0x20/0x20 [ 1700.498677] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 1700.499973] ? ip_frag_init+0x350/0x350 [ 1700.500993] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 1700.502206] ? ip6_mtu+0x1e9/0x3d0 [ 1700.503095] ? ip6_setup_cork+0xfb7/0x1740 [ 1700.504167] ip6_make_skb+0x2df/0x4e0 [ 1700.505311] ? ip_frag_init+0x350/0x350 [ 1700.506310] ? ip_frag_init+0x350/0x350 [ 1700.507308] ? ip6_push_pending_frames+0xf0/0xf0 [ 1700.508512] ? ip6_dst_hoplimit+0x199/0x440 [ 1700.509588] ? lock_downgrade+0x6d0/0x6d0 [ 1700.510842] udpv6_sendmsg+0x2128/0x2b40 [ 1700.511877] ? ip_frag_init+0x350/0x350 [ 1700.512886] ? udp_v6_push_pending_frames+0x360/0x360 sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)={0x23bc, r3, 0x6a599367f932f409, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x95, 0xfc, "ab1c697199ef075fc98216be286f146fce0fe65aac7b7230534fa2dd6037eacd50b534430d509a82ec3b5f06da5a73c4630123633e0b39f2866e620cc00ea17baf2ecef85529b272b2252ea6f8a9c211b7615b9131dfbc4ca2f5d9ceaef18bb6bdb441043f8225ab8f5e8610b9746a8014855f9f800a11fc8e892278895a94fa0a18820abc687256ec67f0958ad68d3151"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "481a1c389e"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "99f64442ce8011"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x400}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "6dff7ad24672ec2a02881728"}], @NL80211_ATTR_IE={0x31, 0x2a, [@mesh_chsw={0x76, 0x6, {0xfc, 0x1, 0x34, 0x6}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0xff, 0x20}}, @ht={0x2d, 0x1a, {0x1000, 0x2, 0x1, 0x0, {0xece, 0x6, 0x0, 0x1f, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x5, 0x6}}]}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x2}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xbd, 0xfa, "4c389c6a79b64bde2539b0042a31839d2da2d92ba02b00c8e8eb29ec2eb91d53d2a4eac5cbf330905f367484d7730409a98273c39f8a733ac45cb95b43fbcfc822f5fdec8e0c240c87a53965f02396118bff6d8b7852824a49261025fed98a914589cda3c84cbf42708743474a4ca4f9b3c78fe12e73d0736eb02794bffb49e5485517ca3bfe022155e1b285fc0d6718cf9c8553a5de037cf6327cfc9605317d8ea607a4ed162376d8214209dace4a86f882f2632075f86aca"}, @NL80211_ATTR_FILS_ERP_RRK={0x46, 0xfc, "8b82bd3cab4a39d92aff543b0335c76276665b814423600a1f4fb9b42b8b5ee399df89abdd679f22ccedc3e03ae0b9df33cd72e6e54ced985a68468e86f646369e82"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "099177644c65fdc35bc8e8ca39710b75"}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "292d603f593a87325de085348d1fc5fd680edf89629f07cf32b3b50ac5d20ae72c78742a96f8233e0b7d4cc0eb427dbb84295d1d00156e99c88c7edd92a05686ad6d9fbc50b1353097e2c7ae6f2a4236780c49ca11f4a83de5b587b255c358dd990493c70f2707dd28966230c0c4d29a6848601a9c8ab665018b397e0f9319c8dbeb21126c43509652389ba2300e85601a29b4d4d95eb9103aef2cb5c3150094de6f6219bf367db6f2bcc8ccf47fd0de0d2fb7eebea6341dd341822ddff164a0fc36e9313bbec9e7b797daae4539e33aa9b5b74eb8e767760071027f04d06be3e14ddce401801420a6944ba183bf93528202086bfa053e873acfa24e58a334e896c7998383d83b69b965613a0c8b915c9b44092ebf9eb0d8adf06d7072689ec2df0da40fa00c2a119df65500a1062e4ff74ed0724bebe0050faa6d42aa43803275d162f9877accba77eec62fe1bcd1d923db0f78e8f1dc36f87fcef19a9de45f8a4ab13490dce7d8cd45ebfb362d365ce64386078aaeb27a17ecf31c8b04c0a1628a3e5d072a96db71893172e300b6afd966eb8e9de496d3e19c5fabc82ee810f25fb28177a1aa7853aa766ffc0d62a58d9236f2faedaa4d2a606df060b37a19c45584cfb8f9a5373f282234b2dcfecbb8ccd36e85e19dcc64aec956abdc3f14b8375cbff2a5fe8bedd9934588de9eb669d9d0ce4822f60d8a716f35a67a11d5de05bf4417453e18b23923de528d6a975efd221ac7a7394689091f156597ea74f57bcdb50c273ed3a59bb34eab52217ef6ad808bf5edf9c36b053de387974d65ee7a338b7190a406f2183be5a6f7a97df5d09a4ac4c0ecd7300886b205138cfb06841a68b26f243a167eb45b10609a4c6e6ad313d397ac1a8b834fb1ce411563d55a6e1d00adedbdf764addf5e08c045cbbfa73e7375c35f67f066c3123a86631c78233b3fd3142db6a94aced60a65601c3b29c4761fdf902dda5ccc3255ebfca9215a451a02cbd2e48d912db4334de361257021596f5fa7c378a732c7cca4d9b7d9de3fb2d577f005ff50f965303c593e6c0c351eabb6387a198f575a88727d25ccf28f05c5d9e8c9533d63b476591e0495f37eeb4c621259356702d0b62e67cd472e5ed9908ff0de63b8644e48d2932aadc9869d749d3f45a81ab81e163503ccd291810c090d9f58b7a7c0a21aead068f6e52d91b018ded595679488dbdf3f458f541d23002aa63d9143923e966f283f10b3da076348d12a84ef26c4ae227a591379741ffea94911e083f1b7fd910cb1a5cdba08e1b3fd6765a65822df3b35162db92fb93f303b4d2e1f477fe413aa3f2cf10b2d1c090cad849ae56bba6aefabcd70baa15ef8acd618d693f968b1d1403029e5f4cc7de3bed8a91d3275d4b06e9f82774cf04ad030f4eb8a337e7b7d40a2687c2349a9598d64ab19284d412eb8f0ee83d6c9240ae3f1898c64bd2e000f5cbfed7daf13034937439d172f8f1d738965ab779083a13a7c691adecf81e733a1b6b33f775df39ea7ba63408e5d8acb876cbc2b9bff8b18d9eda296bccd9fdc9ca1d9a302179710c7ec4d3bb4f0c9d5273bfd72d0c8cb18f974b922f3723e3d67aa1cc45c47b3af5ca6a829280b64a30dc6bf014536ee6cded29a79e62c1927d99f6e6118c1144f4ec40b8805627f86e4313e4bade8a515a34b4d50cb5d3006b0777eefa5176144d4e1255b0cdf1a2e5994a37b5156208b61e0aa450606d9597ee143514d79842f25caa4d50ecb872cae4e2993e28975476cb70826f2baa07016def6ed0f50b2c096b7fec4b9e298f663dea84f37775f02d73282238dae5e69e2b564a3b55a51e540bebbe150b9d8216aa2d9ef4982f890da65f8d06513f142e3abbe1bd637461ae2af31e682a939c012e06889b66763f3efa120947ce79bf6d7bd8b68e2d47aa4a730472b093af26ccf2ca69e7deae1eb4d2ba1c494d2f45ec9a52749d5e222007ffc4470505a3f866bc683ad534c251767c0f5f1fcbc36116d9363339f847c968796f0b1aee9f8ebb85bab786fb819ccf60e672673d6ca766c12c2ef638cbd3b7d38d3282f0ba2c05bce9b7e1a4b54f287661fbbcb341e2be2339c07c42381a47a88a559688160ecd3f30042fa968a64b31681a1661b7c2cf969570b46dff1daeec4dae76128d0cd2a4597361d4b9ee0e0de37e2d86321c4e76f0cc4594424e49dbd9e3d8e7d592cda9c56c39b62306abbd3b8239321f9084a5097a56d2c40d039f8976da5158191c55af7af65a7673b056ce2b06200e9db298e04b13210f4c79f08c96ed5aaa08ce45b94548cecb86c2e3395055a094a4f2cbcaa56b18033182feb42d054b2457ec4741db8cd761d9e6a9ada13f2378ee03c1f05fb0a47ebccd1cb01834f8687bd7e29bfff322a9d55832a2cad7e4ec6958c92fead8f07c8e1b8444a1b163cacf2b26a8593b82fa5b7af375ac69a6e490a6a7793f7c5cdfbb099309048c72fd82cf2a135e13db2905f7615018b8681a8398b425519040fe6d829be9f8704e6a1615d38b404f3ecf594253c14a644922e8145a8353d4d7e8f72c2053944c2f3927a598bea5d1b79d086c44802a54467d7d80d1deea33c1f9255345fa8c7ef1a4ea85774e3792fe273ad88411e8a2745869770bc4806ff1767fef204319b92faf74cbad1de3b289212ccfa222c571c3314834149fe49aeded1f82ae915e5be322bb4f105acf3d8a9110e7d27bca8e345f429298290f3f01490ff4e9b805dbc2bf8a0c1a5a9bb626e3bdb6ef25f7d6beb7d5f7b0991a2d3adcf4585cb5636e771bb95c233307c9770f2160c5908deed0b9b7597d9b45a75da3025b3f4a7ab21daf4b5d0ee24e743eae463718f218c04fd4145bf55d5d466b94817f567c7b0757f6d619537bbc4d11edbdce790e5135dce5c0e7320281890b12773cdf96544b2e6528950e0264f89a27116d9e1c10478e11f75aef592af819c1d4a0e6aa16b26a454aacc0e60e93ac684466cb6000fe26c474811ae7f2a5921bd6271632980b2f813b0dc08f266529df848dc2ae70affb3bfdebcc69638804d76b089995fbad4765fee1f980c9aacde498ccbe20da807b83b760488ab191f197a4b06149561bd64d7ba842031f59b5850966c304be25ea607212fc556dccc5736dbe3386035280b7762ba0f5d1e8e8b19fd781ad0b03f31c0e7516c89e2fccb8821014f2a5d9032895feab49182d193799abf8e0799e3afbb30d4d5e92f2f2fb7b62f721271138cbbc06f7f5508fe040ecc41221445ff3b14faf394e44acb9aff942031abfb4f09c00e78f9b3e0473668d7aa27c000b2fbf0bd01e3d7eb1d85530a4669298834500d1117e3d7d06111fc936010f527eccfdedfed212764f8219ead050c3e04f584cda481c5b273164fb6e29e85096d12e1795858114540e4e110ba4e166ea9fe922e196aa724b2b150d33bf88c3fa322ab4e6c0c0e3c49b93f347dec74aafcc3566192eae801dbfb93c6038d259ebca744fc4776cc27310d0356439b9eccdedd55f3c1f30e017f6edf2330fd108f7c683d8eb9abb8590cfc608443e68eff8fe26be6b1ecfd5f628c0eda0649bef70ea3855cb3e27aa881966292c7363febc4c5db507dd57e914c9d6a0a25a98ef07d5c90eb36ca012128b5ce4994979858fcb7bad1d62d24107cbbbeb10cee290f9806eb7e58e82d5328bb775b1bcb51d2e1daa6b0c1ab25ca1bd602e8c49968f62e867696cd67ecb83e8aaa29f1fa27c16ba65a307317a8e6f982d4fd853eea1f9bd3519341c5a9de43243ec283dc03cabc54656ac9387e61cfe256f8e99c0f1be78a1d07dd0ffc56a54ecf9be2a599f7664876561a7a6cf7770f3e85a034ec838c680a9e72406a125bfcb8f53766b6a551b5bbf4d84f693279cf064b326d82a8cc929d34af87894782cde48facca5dcb63f2c82cae52b85205ea46ed5026f43707481de1ea3a98177e7b0659e01adf20b5737a3fe0d4146f43d9e7f8fef882224a6bccfd80422c5a5da3d346ee5d09c31989d4f2a645281fb0b4cecbc2ae6848982e78a12242b7060c4843dfb35b1986a0cb904b680d79af25bb34111aa9d3ebb59196d785969555f94b8db91837acda09ba4137054cbcf5b64299766b140f6dc0a7bb542407fcf3b19481691eb7e9e56fa594600b3a788925798c166caa9c037cb745226cad106a7e5436603e52c6984f38982f1fc0e6cdb7b74b63fcf29bc1e3352756443ca2d1ef98aeec8bac72f1791136af1f38f3dd29aab29b94bd6f23b7322e134cea95a9175bdfc19a49dc2ba75fc1b79e56ab3bf9d2a02087380a01ed0f413438bc8e010c451ec4d9c4d0f1fa5da9b0ccd33c7312124109e605b99bc8f96fc1b6adfc457d46302a949dc560009f5e8df08f44acc93cc60444feed862c56188e9e5e9e341c103912b250aef82b04142a8e20a219921b224929715227292527432de2b6fb46874efc48599598b091e213ac0428e1f36455b362a6282a3699a67801066de5aa858b2d0e036d0b257a789182481779ae6f468e5847c681ec5a24ec48388ea1459dd4a8e2be7d7ede236706ce92772c40813dfbfaa749f51ec6ce65960b78255762e03d5e23b306673d669b6dec229c53c496342a75cc0ec4cba47774c8163602686d357897872c781d9df84ccb4c648c6d53c85ea964c3b6c4679ec69bac508ac86e82c5202f704a64665cafa5b405114bcbbff8c5485d5a05fb1cf037e5976fcb0779709cab0a5183ed481120e0751584926397164591f29dd40d1479d6c679aecb73cfa1c95179f483c7e056b1a41e62fe8938a787b64048e5ff6426372095997403640891089ba36508184152fad52d804df5ca7ce0037c8e6356d95e8584c7aa43106b6a42b40b8c4cbd29261e9a79514ddc774c05399d1c9bd4394e24c1f14ff9e971ce664d7ca68cfac2e8b35d79afee52b5a9321074faed9d63e77177ce3a5533a78152af60fdd3b153012f67f0d84c516d9174ae23928aa36adfd430d52db4eb135b3bb3582bafb1ec523cb08e7ed9e0149b04e3bd3f09a65d36cbb8c2ce911b2442b4fb4ef4865fac686407d52b6a7560e113a671baaa995277a49ebf37566c6bb7c26e90b41b55e3150f4222669b37e0c0623d80963a33a6caf7d0f4452cac7342ecf0b4557264bfb4cf991ace53acd9a2b760ba29bc846e58beea3d26d74e09988213eaf8b2d2a0994a32d6a35a091ea459010a651bb61487d041055714eaba2a7c7f62097ef29a8528c24bcbee42fdf19699cc992aab5c5d422fd38b049e8b6f770a4ec8aabc7653e13fe43b796b3c99f78c74c0d36fb0be2e3aab76f748e84e5ac4f288a7f1c544dbd6cd819cfc5bd1b8ec56d8feda1f38abb5f31ee74fbe79b6ee26b514d3bbe38d44776385fbb2954796d84574e83f8e97d9853761985d9279274bc30d9b1d89774cf6bec939641a617ac9b38b92d8d2bfc6e8128a8e296749510c0d2896bbeecb6834f361cb387a7b8d120728e46c1a1777b057de33bf0c387fda78e3067f0a566524bda4d61036f8b157521b0e10103f98079d9473dc49ec1bc617d86238746a09b5fd1f9d9666f2880f07e9e9b73809153a5013f7b429f5dcef53773c968a9c54d368ee2a304c1d1a54701ef8c961ffd68dbe9b900c4f6a8b1c9379815d017ca52d5cc4ab2541b0c0ef4d2cd0f497e87ab4e8a081fd44349bf17dd815c2ab935bbaf96cc1c5c852d75255df80504ac8a280109208669d85c379a29627003ed3250640fa5e9bc4b3540bc2894e21e0a57f93704df7ca18e2c33c6540"}, @NL80211_ATTR_FILS_ERP_RRK={0x8d, 0xfc, "7489164190a2ee21386070838f0145864bf170bbb7cac2779d65de930839b09f3464f81f9d156ce497b09376901fa096e8df7527732ed3b8c2b91536a8cba6f68937f3cfc3eff5bfe31e403d4ac31934b5d9c919c53247a6deb2c876751814c37212f555f0ef5ed671b02ad9dc1329410b698b5458d4833c2a5ccdfec67b2b7cd687f3b7176675732a"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "14626c1d3dd26fc6d4ddac98fa19a5e16a7433c3af25b4d817e8da1bebbacc05aacd44a8559bb8a11fcd6a3ecabf1e0ef1be2656453f010d33ed9c93ec98b2cee327ec4148b4e0d1487906780c136e6f5390f9fd36525ca34ef385426da6b10ade86ce13ce021cb57e00a103208abb0ddb8990c1a557840fd5f1f5ff2c978880bd72659c549577c82a25b55e65cec723484c4273a4209b767785173fbd2cce86842371d68c3c21f86a6b7604d496041ce4910a6e0a06192dabf8a3ce8250dd5722958649ea3bb9cc7e3ccab597b9d7feef3ee37a3ffbfb31708b9a363b00274e003c5c9f41fc6bff086c19a445471da2d7a205d0e6e68b640ec8e7163e2b825b0a4600f09640ee573106285df47f4e3ed7259965ce95258ad4e5edec3001b7395446be1fdf763c8d3a505d4425a0b7eba24133373064a2a28bd6067354050f3206a5e71b3335937849ca7739e7c001a1f814730a5c9c24ffc911da064f9ad209005fdf648853e5d625abf502e89a0375b604c87fd3be4f488672988a7ed4725b8fd8cec55d96d55d25979c895ae790f542823ab773a7eb56497a707e00e6df592bafeac8361dc3329e77c3ea64c46dc9e420e7252a97feab478c4b1c8468075113aeaaed32466b59647ceb8ee00cc4676e642529370c741a3d02cccbfb1e05c86faaf5ad3db799610f0393d3e6da358b4620d9710c25941c927efc3845dc30fc18fe1633a49fa8447a4571b2bc35b5ba4fd909f0e656230d976e51ec7628352707f0ebcbac7473d7524b5a0600f473ca2eaa36ae7eb6e7edb8142c706d66ac2177f79a08ba6d8fff6f899d829ed1db9726bdbd4e91a75f1a964f58d2ca82c116046531b0ddcc63f9dc76aad520f57b3c7e33238f8a3d2bfdbeffc7e0bcb49fae43faad1d1a8b606e16f0b162499ce3631ab52f13055fa4094ac12b89220db5741c2fc4826b547833d050f37d916f5632e925ac211a93c0112523ba309115cf4b50b333b627464d7cace98f6ca63f75e2dba4704f44b656404a5a7b1825698d82dad3007abeafd49e40f2603199c2414d15b11e99cdd82e10e627425100b561baaeb8f666ae2d1eff880983d1cf4af8148e236d2039bdcc533d1d14f4039a8dd74fd522f42b9f23a24a6223e8a54e272465eb6b2ac7a7a6e362ed819606284274068b4a78abeab5ef59d1b872b88b0983c47cc780ee45d29dc8579fdcad212ce6dd26ae548e80fe9020bfac4d5219c1983c9dca0045025638deca62dad6d72fd0833c530205c7ca664d1c43ec8174a042f07631de82bd2eeb451d64066859cee90902d1634998d8eed3c2fb134923aeae888f3a201e90534145ab56421864785691c8893574ff69e6bd1a25a2cb948b865018320675778fd3ef44730d40199b04bba96acee619147bd8e7e3d5ffb65ecf04148b7321aa051e18b0706117791c6cfc007955b7900acc88aa11a6166d7f46da96de20fdacd9658bd3250739d69c0cc338109f67a41731cf28acf400c802fb3b75fe5a009fb960a5162d1e06ab1796cf5b98a8e26008b5e7f6c068713cb48894e0fd569e3f06476e560afe4ee8882182daaf6b1f978a4ce339095c1163dc7cbfe71694aab28d96ff72ab23758740c98927697674b9d9a98339d063cf4aa15d7bbaebd1b8edb4827a7a8cb1532d9617398a7fec4b11bc9d75e39f02d743f0f4a7c650620aa8b26e3d2c95c5950a3ab214b94017ec818930b7ef80773893a1f789b4581472a0fd28e585fbe2576a43ce80fd364d92d5e5a5c4a1a7bdaa237cb6baebbd6f2d8a225e3d037005e2b52a7affc897f6c899ded56e0c2d02d16dab0591a92193e878a230f043dba2bce5b9cff90e4d05664a29854e1b40cc47afb977b134875456bde4618b4a41d15d8d4adccf3cefbd09d53df9530547c7e148f92d47edf565811071efdc2947c11dd2f662418b46ab84bd3f8e51f127d94846fc1644effae829ecebc769f72e0df69e3a2c51e2db4134cd55d8f8225a51729daca6b4f452301e1a9d3c9605d0d78b12bfa8e9c53396bb6edd0e5333ec443d5cb15a93010b6d311daf84f415bf4c24042ace1a551adfe30939d32dea79e7de56a37650deb9861943ba68fa1aca574e67642433dcb75ddb3c064a4429727c56f7ac3345b2dbb90ac0c12bc328a80f16780c86b88b4e06070578f6203916b9289164b20a3ae9b5871bdb2381c54f456649c43cce1bde9693525e604b16e6a637476b0ae82c14c37df51e19cac22980e5e2b475211b026d6e6a39bd486f204188bb5d4ff05ab011680ef456aac4675f40fdb4f62dc142acf68bddfa9aeed05d2e9d18d1f91fab43575d23cb6276f961b0e453c04f558f618d401ebbf015ec2fd5f99a76a1503cdce1ee2dfaee264161fc8a337b024c9d349126d08432576d41133f9b5488e61bd2d6c1b64c655e313a2dc57e3334436c2b05bc6992befe71d1b00080e9b531e9c591719f3845d80eef6f1f1f2c9db9552e3ff3ed3da2cb7d9aa2f0c5e0df1fae704b90bf81c4d1dac5aaed0fe6bec49e27cac75e370e622b8053076db44d09ee59afb973b622b5feacc46343786b4a51d537114b9212013c87d908404ef1262f5137907b43e546f83d117b16ec081f79a799639be2ba717fd4a462986e60de8a2ff890c977c0b97403f6b2365d17875178aa46e46362d7c638cdec03469f4f552b2499bccd3d75918d43e86c12df4725128e80e371e6a2424011695c04f4d6a9e61f72a2a90632e749bd20d56ab3910e46b21fe8810036ed23a9f6b77b69f7b21e450316adae79188b140aa2dcdfce919f8f154f073e8d387a8129dcc3232f2c9518f084d38aed0b6870eb2cd2cc91721e92e649975ba02a818c1bc6d421f0ea7449dc2f844372a309ac6198aea513b569de299e12b4b11617225b47a2e7ca32d0447a4b534cceaf4f857dd5870968e8d162e98ca1a19b9ddd0368d9945724d06b19f17946addd588bee3e2d742aa8840b8e3edbbf6c57c34f35bdaf5b9ee4d884675a8e5f0a6281964cb1e851f9aee591347186e9b0d7729d945a644097003dd99485696528b21d2d829128d1627ee6e87e83fa07e4241cc8d5aef2553ef30aa207ac9aad3410222722c5de7d20f6441751582feb1826736f051a6fc6c563a27654a676924568952e205eece53daca4a9aa22fdb09b7ed747282cdb9cfb8a11e9fdb2e0b27d37efe85fd5ea2b18b391b9d636ab74e9761ce1610a61ce22096e540cc0e137bd9d01260bc097c820bf247c9a196061dcb0b4b74848b52094c1e58c2b95750471e6eb43dda08f7ce653f6378cad0d0a51be9f5f5005678ab8f32d7a420122d17ab08b0cfd2395774dad53105e062f1b122a77fa7bb31e0c93d918cf9b4dbfa091471c6d3c44a36d1f3d0ba34bc6919dc135e3d59db965365ae808954ba827a89faf833700d8d3d08be9d675eae0187c676539f735c3df1af892d01d79f9c7df4ddc622d44eb9bfa74b79ba405a38e541fb3e4c789bb333f5caa263da81acfefa48d2969223b78864d16dc4dbc3909d96a0ca0621a23a58c3492d8c94267f03b252c0c1a30943ebae4209ca06ae024c754c0770052bcd9de02c299b02b78e0b1a7d0c0d90136751560314f2073f441e16eabc0ab1dc23b01c0d2de6a7fb1c70edaf53bc8c1eb2494ef266174a17b9cb391a9616d6dba64b3ab12e90e28108197f75d260f4a7dd8341c2b11c0618c997d72a4311728c3f7b66738219ced8d8b728eb533245c1462c41f4942f7f93a607451a75f3fc983e78a38520d4f1d9719de6b7085685372416e9f43b96a7ed74ac9443c8c869fda6c2af45c54ef676327c559c0f0273562380ac37d9d5e5b55b93437102c97ebf3463adf4c3b02ff930298b7a0493178720c2dee413b5aae2e0480c7172abec4867c0f878bf070d3269f318b883923f443f5080b1a7b564c3d6ed46042f5e1c923ea7caeefc2a44c048e58d877e79ac53139f9d447d9ea095b63f9d81a40c5f470fc3a7802a7a3c6ea86864904d9e10a09a778ad647b888d7d61638db13c64f59d88201f01105e27822d1aea8092c04257e67c663ccbc045d4856a0e143e881aac4bfb3d8a801d8042c4561b74cb3cd7bf8c17758cb4bcb64def6723426c7c6c1135f78505d66e8c6e3ed15b3deb3ddf5900cdde2e899afd2ba16a9c0ad0d56ebafdfa62cdbefc6ca0a9c579cf498aaa3551bad8486cb3f6977f39f0d0bb6bdb546fcce3dc4d39ac1af64a7b547e68dc8e616677eaef87c99030c4ce9a76e7ebdda96715f6d78703d6d7a32f4a4e2a96985707f85d01da50eca20796c47f6fe6d35dee9adb37f54f131cbbb1c26f3acc641e5e344993c848da59ad0cbc3e7155f97096a4fb848205d84b0886028463016cf74a51555064ddd0c3f193ea66f405b096dc0b852dbeef7db9879099cb6df933586c40bca17b3f4b4982da6280e57c1c35e93e00ecf73825862d3bceed40bf8fc1ac2c8cabf411c2243202dc20e8ff13c04cea53f7346d7d5cc95c5f0a2e6890a6241de77978e92922d07bbcaa58f7430cabdfc83db2ab7ec299c8c31a1b5246ef1a25738d1f88051e1b69aae7714da1ebb9f3f9e4594181090dee24f417803d188f1626d346740c8f47f2db9347ecc41999b985390c1ee26f9c355302c95a2c4c48abce61555f4e9f1ce0bcd1ee0403c34c634d4d683e77b2fcc787ecb4d21fdd216b383a924a094753ccdd5a5a2d139efdaa704c925c4b73114e56eeb7e462265ed8e05533b00959121fb0c149ea7d7c7fd641c5238a7d024e79cc0d5b38fab8a1f686db7afc5e5219c9867b9590e3b0075b0360ed7fcda321fac2fd4616b6160a3118ebf5529c1e5e477b93e2b1bcc93aaed43071de98496d36dcbd2af2a78c6eb166dc84b1cee1ea7b99c3ffcbf0b0c5252e46a0fa17440d510d7cedb0dec073e8ab88828631e9d1ad064b34c79e412ca5a6910e624c5c3a9035e7bf30dab96146a7b59aa730e82d4f5ba06129b5349e94ec9460b4b2deea85de1872a0ec91f8c843203737c04d0ba6052870845827ae1569cbcdf6081319ec29467b2356be9b94cf0143ffbdb1a2cd83f3c70841ebc1fdb872e7ad4053c3a74a4636e98e7a16e799f716238d0f41abc43dda958dca3b55af67590988ac885c6edb58e1418474ddd71b160f2d849913f83cf42e96e9527d2e7b2b8d181a03db38c048f9ae41e550efcca8c7d97bb0de3834523f874cba05b59af0ce9da5a461ccde954ea8071a8ffe380d42a189dc589dd0c3da888397f4de25cc016a5571844706bc33235cf181c6a985ec44991f6fd1f3f909e6c7ff74d5a2c1a70c5e249f9b470ac4894a6eb8509aa2d0867e5e16b01de6d2f126a3b53ddc221804fa458c5a8909f1cfda52850d647e8ad68359a6303610b6ad9871c005f5ccb6fa5a15cfc1207bb773724d22a38953d315247dc4d39a941d0f10b194782942c509cba0c7c29a730421d001e7d1fee6f33d88469e3a9133fa0328339c21a616f892294494ae8e9706e1d5760ab604c6a8a8a58d442e5ce05ba48de8c22a40598ec2294b20ffad0e130cb7548bb8c1c634d56ce6e13593ed5b98abeb569d8128f33aeac906cdf018b565e5249a5be94bf928afc4552215c812ca28dd5c5522c38b44f003a866f808bd932a7a1ed059212a54841ef7ffdc96a0e42ab8f5e2b32953906693e26c1809af1ff1f8175fcbf55ec56ba69f337ef8c78ec4f942e8c2783b19f4b53ad4da108d5f60d70a92c18df0f9ee76de4f5954f9a295ff80ccae5f95cee3d467231de6ee772080"}], @NL80211_ATTR_IE={0xda, 0x2a, [@cf={0x4, 0x6, {0x4e, 0x1, 0x0, 0x5}}, @mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0x60, "d173ae361bfb6723c42938bf64ed7c32b399d2270e24b7ad32208cfcf076bd59ded7469ed04abd1f12ef2e90ebe0d584facfbbc291b68aa980371a4021b7c36d3f173f65f7cf13c6b64ffecdb40cfd9f6f0788981431286c7d7cd6af93854db3"}, @perr={0x84, 0x62, {0x3, 0x6, [@not_ext={{}, @broadcast, 0x10001, "", 0x3a}, @not_ext={{}, @device_a, 0x40, "", 0x4}, @ext={{}, @broadcast, 0x5d434fdc, @device_b, 0x24}, @ext={{}, @device_b, 0x80000001, @device_b, 0x14}, @ext={{}, @device_a, 0x81, @device_a, 0x2b}, @not_ext={{}, @device_b, 0x4, "", 0x15}]}}]}]}, 0x23bc}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x58, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x24}}, 0x8001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x188, 0x0, 0x329, 0x0, 0x0, {{0x6b}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x5f, 0xc5, "874872128c7d84f34d6054954b42749aa4ca80d2fd1e6ec7c868c40903f4daa8bc0c8846ec055ee5639417cf40ee33a3435bd0bed03de7542943f6978f7cc04697756866145ec3279264ff45785ecfa6d6fdf09729346c8a451b83"}, @NL80211_ATTR_VENDOR_DATA={0xec, 0xc5, "4a56e7cdc8437468d071aae413abf09fc8127f9197c4b06b15e25bedeb6db25243ca0950b51bd3d3f82f17faf91d8931bda9f663f9c947c5b7dead820347702c5f675182d26b5510b0b759a11ef660d77624ba76e030490304a3a47ff41b5d12e80e356c25328b502440eff9a1f8008c87def70bd459199ef3e81c7988a380f814f3c655da55adab8abfbb1c33c03c1baa4f653c00e4de8335e5d21bfadbf434b5dc8b50e7255e24fc89a4c1a3c52c1ef4d1c3440f0de2f048f80e6d5600b3e4c81240290a8938a1854e263ea102e3d1a0ac1bc0519addd6d7144331164ae61400d2395cb0afecf1"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xabd}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x188}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)={0x70, r3, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}]}, 0x70}, 0x1, 0x0, 0x0, 0x8094}, 0x20000880) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) fallocate(r5, 0x0, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x6, &(0x7f0000000740)=[{0x6, 0x0, 0x0, 0x7ffc0000}, {0x1, 0x9, 0x8, 0x7}, {0x400, 0x5, 0x1, 0x10e}, {0x8, 0x0, 0x10, 0x4988f8df}, {0x99, 0x20, 0x2}, {0x9766, 0x9, 0x26, 0x203}]}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x58, 0x69844ea0a6ddcd11}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x0, 0x7fffffff, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1d}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) 02:24:28 executing program 1: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) flock(r1, 0x0) flock(r1, 0x2) flock(r0, 0x6) flock(r0, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0xb0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x200200, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000c8}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="a9d91a01fff0d9", @ANYRES16=r5, @ANYBLOB="000c25bd7000ffdbdf5cb1f994c985fbc319", @ANYRES32=0x0, @ANYBLOB="0c009900070000001200000018007a8008000400090000000c0003007a3ba5b4a9860fff34007a80140002007dd4874752c76a3c2775f44d33f86af41c0002009f268d8a5fb32a2f55dcad7db0e3dd6bcfa5672e6d2feac7"], 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x50) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x9}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x201010, &(0x7f00000014c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@afid={'afid', 0x3d, 0x48}}], [{@smackfstransmute={'smackfstransmute', 0x3d, ')'}}, {@appraise_type}, {@uid_lt={'uid<', r6}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}}) [ 1700.514287] ? SOFTIRQ_verbose+0x10/0x10 [ 1700.515546] ? __lockdep_reset_lock+0x180/0x180 [ 1700.516756] ? lock_acquire+0x197/0x470 [ 1700.517621] ? find_held_lock+0x2c/0x110 [ 1700.518516] ? sock_has_perm+0x1ea/0x280 [ 1700.519430] ? __import_iovec+0x458/0x590 [ 1700.520534] ? udp_v6_push_pending_frames+0x360/0x360 [ 1700.521648] inet6_sendmsg+0x105/0x140 ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000440)={{}, "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"}) 02:24:28 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:24:28 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x9effffff, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:24:28 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) signalfd4(r3, &(0x7f00000001c0)={[0x7f]}, 0x8, 0x80000) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6407d06239ec7e59eeff32", @ANYRES16, @ANYBLOB='\t'], 0x24}}, 0x0) splice(r4, 0x0, r3, 0x0, 0x8, 0x0) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f00000014c0)=""/260, 0x104}], 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000180)) 02:24:28 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1700.522494] ? inet6_compat_ioctl+0x320/0x320 [ 1700.523600] __sock_sendmsg+0xf2/0x190 [ 1700.524459] ____sys_sendmsg+0x334/0x870 [ 1700.525348] ? sock_write_iter+0x3d0/0x3d0 [ 1700.526271] ? do_recvmmsg+0x6d0/0x6d0 [ 1700.527123] ? __lock_acquire+0x1657/0x5b00 [ 1700.528097] ___sys_sendmsg+0xf3/0x170 [ 1700.528948] ? sendmsg_copy_msghdr+0x160/0x160 [ 1700.529958] ? __lockdep_reset_lock+0x180/0x180 [ 1700.530978] ? __fget_files+0x2cf/0x520 [ 1700.531862] ? lock_acquire+0x197/0x470 [ 1700.532724] ? find_held_lock+0x2c/0x110 [ 1700.533629] ? __might_fault+0xd3/0x180 [ 1700.534497] ? lock_downgrade+0x6d0/0x6d0 [ 1700.535424] __sys_sendmmsg+0x195/0x470 [ 1700.536311] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1700.537255] ? lock_downgrade+0x6d0/0x6d0 [ 1700.538179] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1700.539238] ? wait_for_completion_io+0x270/0x270 [ 1700.540298] ? rcu_read_lock_any_held+0x75/0xa0 [ 1700.541321] ? vfs_write+0x354/0xb10 [ 1700.542133] ? fput_many+0x2f/0x1a0 [ 1700.542925] ? ksys_write+0x1a9/0x260 [ 1700.543767] ? __ia32_sys_read+0xb0/0xb0 [ 1700.544674] __x64_sys_sendmmsg+0x99/0x100 [ 1700.545597] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1700.546718] do_syscall_64+0x33/0x40 [ 1700.547528] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1700.548662] RIP: 0033:0x7f9688118b19 [ 1700.549472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1700.553507] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1700.555172] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1700.556734] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1700.558295] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1700.559858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1700.561415] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 1700.570744] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1700.627802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10159 comm=syz-executor.5 [ 1700.633311] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 02:24:28 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xf, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:24:28 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xe7010000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1700.657321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10159 comm=syz-executor.5 [ 1700.706609] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:24:28 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2f, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1700.730357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10170 comm=syz-executor.5 [ 1700.733518] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1700.733638] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1700.742998] blktrace: Concurrent blktraces are not allowed on loop2 02:24:28 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xf0ffffff, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:24:28 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[]) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180)={0x125480, 0xc8, 0x2}, 0x18) r2 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000001c0)=ANY=[@ANYBLOB="f01c9e5a973af2bdbb00c26d", @ANYRES32=r2, @ANYBLOB="02000000000000002e2f66696c653100"]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x88001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup3(r0, r2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000200)={0x2012}) pivot_root(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file1\x00') unlinkat(r3, &(0x7f00000000c0)='./file1\x00', 0x200) 02:24:29 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1700.881364] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1700.930457] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1700.989979] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1701.409092] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. 02:24:45 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 49) [ 1717.234564] audit: type=1400 audit(1755915885.373:232): avc: denied { create } for pid=10194 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dmesg_exec_t:s0 tclass=netlink_generic_socket permissive=1 [ 1717.251628] audit: type=1400 audit(1755915885.390:233): avc: denied { write } for pid=10194 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dmesg_exec_t:s0 tclass=netlink_generic_socket permissive=1 [ 1717.268311] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:24:45 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:systemd_tmpfiles_exec_t:s0\x00', 0x2d) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000023bd0000000001000000"], 0x14}}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/198, 0xc6, 0x0, &(0x7f0000000240)=""/6, 0x6}, &(0x7f0000000280)=0x1e) 02:24:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68d073c4108371ba93b32f3b1eecbd8eb2f4c976d8aaf8cf985d75d8c4001b47835b", @ANYRES16=r2, @ANYBLOB="000826bd7000fedbdf2520000000"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x68, r2, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x19}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1b}]}, 0x68}, 0x1, 0x0, 0x0, 0x100}, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x4, 0x8, 0x98, 0x0, 0x0, 0x9, 0x40000, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x1, 0x31c}, 0x8100, 0xff, 0x1ff, 0x1, 0x6, 0x1ff, 0xfff9, 0x0, 0x2, 0x0, 0x7}, r5, 0x2, r4, 0x8) r6 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x88080, 0x23456}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) syz_io_uring_submit(r9, r8, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x242e2, 0x0) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) 02:24:45 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xffffe000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:24:45 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xf0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:24:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010007000000000000000000000b0000000000000000000000000000000000000000b29bcd75da3e2b4d4afc4bb12000dfced848e06c8b0f018c8f1d54e1dabce71d1ae452e7ef9150509c197fddbd61f4b5cbb4d253a1240aa078aa08eeeaaa5bd7be1db7222d22b4ccf4570ac43b12c8c63c56bb0b376e317aa2ea9f8daa07c5a578774fa8041af2412c85ba45d18289a15da5cc2fb3c976f11c85403c461bd5fe41f09279e55b912508c8fa2ee5c6fd6f089031eb85ccdb4c3b120986dd51b110146d01f7b932656abdf54c34a73167305ff2fefb8d92b4ec361b464fc473b918aba5e8898f890215ae85b5f7d1a0d4"], 0x28}}, 0x20000040) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x48000) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') getdents64(r2, 0x0, 0x0) getdents64(r2, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0}, 0x1) r3 = syz_genetlink_get_family_id$ipvs(0x0, r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) lseek(0xffffffffffffffff, 0x2, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)=ANY=[@ANYBLOB="2fdb37649ce6de56f1a66de348a417046c0069aa0e0efadc0f97298b035b3be1c5d095708560c432cbd0a799a9c94aa07ca0242933c3799d374b17d979131fb67add1380b3ff0deb06bf947f3d81039dbe009d98baeb6089e9cae74920699e14aad9f26f83f4d50ecc110500000000000000a73a83e4e16e8f7d3472208b8e76a96eea28f6fed55c671e9900b0153cf63c1945d1ffe3", @ANYRESDEC]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 02:24:45 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)=""/203, 0xcb}, {0x0}], 0x2, 0x1000, 0x0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000400)="31d56dad8a828f7420896611aae246777aa037cac76a32d0f37322c544e34bfbafb5f9a76164149cc72f0c9e64e5ddffbf42eb43ca68b9bfbbb7a5b8a1a07148760e17afb38f8527614e8db330caae8729a47ca3476e8e05a6b5a938565ec13986a2c53a800699c95002c67c41f778e9260b4e963107bbf3aff2196b0f") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0xffffffffffffffcd) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r1, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r1, 0x21, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10200, &(0x7f0000000b00)={0x77359400}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xd649, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x1001000, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d00000000000000006865266c6f6f736c2c613aecb9d913cead2aa15069b3f4b73d2b2c6605000000656673002c7066a210680d8403c45030303435827569643e000000000000a9a8142492812b665fc827946b0000f0fceb005b7027805d2f1557e82f8c9528d7727a82699515b24dfa1322c8425193c6b8ec9703a6210d1635b92c7296680f13cc35d5995d34bca5d42205cc859ce9b3b752defb4729829f5b2068dfabf4dbd3d9834207fe58a16a6a960c50354c63a83c976efb24561c56739409f15084a74b131148f13bcb05e0f0770ca8ee88e8fd3b31a31a62404465857946da9a0b44c4589294ca26ab86b5861e07abf3adc31da5d6d3278fb1000000000000000000000000000000000000006cf5c7ec80e2950800dcc8a596715c184898f13fc9d004b4bf980df8aae663f5cd9aff6adbb1c59a677efb709cc3fe7bd320d69ebe47e67c1c3cda19fc6b1a3626eb2136759f96ea1e1ebb01297bbd7cfcdc737ab4695d512ecf54a53f77317ccbcb7ef124b801ba757e7bb71906ef7532eb7d84d03a7a96a27accab311abfac583c2a6d0225ba05f09692a0c359ccc6dd0503297b3a20ce478124f4ee23effd9c0b31f148aa264a4e6d7a4471566ccf7ef468e8e09cd16d94", @ANYRESOCT=r2, @ANYRESDEC]) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000480), 0x4) getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = signalfd4(r2, &(0x7f00000000c0)={[0x52]}, 0x8, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000200)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x7f, 0x0, 0x96f, 0x2, 0x7}) mount$bind(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x20, 0x0) 02:24:45 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1717.290014] audit: type=1400 audit(1755915885.428:234): avc: denied { create } for pid=10194 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:systemd_tmpfiles_exec_t:s0 tclass=netlink_generic_socket permissive=1 [ 1717.300217] FAULT_INJECTION: forcing a failure. [ 1717.300217] name failslab, interval 1, probability 0, space 0, times 0 [ 1717.300648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1717.302637] CPU: 1 PID: 10210 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1717.302648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1717.302655] Call Trace: [ 1717.302685] dump_stack+0x107/0x167 [ 1717.302710] should_fail.cold+0x5/0xa [ 1717.309883] ? dst_alloc+0x9e/0x5d0 [ 1717.310656] should_failslab+0x5/0x20 [ 1717.311461] kmem_cache_alloc+0x5b/0x310 [ 1717.312350] dst_alloc+0x9e/0x5d0 [ 1717.313098] xfrm_lookup_with_ifid+0xb79/0x1b70 [ 1717.314094] ? xfrm_policy_lookup_bytype.constprop.0+0x1a70/0x1a70 [ 1717.315414] ? ip6_route_output_flags+0xf0/0x370 [ 1717.316428] ? ip6_dst_lookup_tail+0x63b/0xfc0 [ 1717.317407] icmpv6_route_lookup+0x385/0x470 [ 1717.318340] ? icmpv6_err+0x320/0x320 [ 1717.319153] ? dst_release+0x58/0x180 [ 1717.319993] icmp6_send+0xfdf/0x1f30 [ 1717.320801] ? icmpv6_push_pending_frames+0x470/0x470 [ 1717.321896] ? find_held_lock+0x2c/0x110 [ 1717.322809] ? ip6_dst_hoplimit+0x440/0x440 [ 1717.323742] ip6_pkt_drop+0x3d2/0x7f0 [ 1717.324560] ? ip6_pkt_discard+0x20/0x20 [ 1717.325423] ip6_local_out+0x29f/0x4c0 [ 1717.326250] ip6_send_skb+0x117/0x460 [ 1717.327068] udp_v6_send_skb+0x7b7/0x1620 [ 1717.327978] udpv6_sendmsg+0x216b/0x2b40 [ 1717.328853] ? ip_frag_init+0x350/0x350 [ 1717.329723] ? udp_v6_push_pending_frames+0x360/0x360 [ 1717.330808] ? SOFTIRQ_verbose+0x10/0x10 [ 1717.331699] ? __lockdep_reset_lock+0x180/0x180 [ 1717.332695] ? lock_acquire+0x197/0x470 [ 1717.333554] ? find_held_lock+0x2c/0x110 [ 1717.334457] ? lock_chain_count+0x20/0x20 [ 1717.335351] ? sock_has_perm+0x1ea/0x280 [ 1717.336281] ? __import_iovec+0x458/0x590 [ 1717.337180] ? udp_v6_push_pending_frames+0x360/0x360 [ 1717.338303] inet6_sendmsg+0x105/0x140 [ 1717.339146] ? inet6_compat_ioctl+0x320/0x320 [ 1717.340120] __sock_sendmsg+0xf2/0x190 [ 1717.340972] ____sys_sendmsg+0x334/0x870 [ 1717.341860] ? sock_write_iter+0x3d0/0x3d0 [ 1717.342774] ? do_recvmmsg+0x6d0/0x6d0 [ 1717.343624] ? __lock_acquire+0x1657/0x5b00 [ 1717.344583] ___sys_sendmsg+0xf3/0x170 [ 1717.345429] ? sendmsg_copy_msghdr+0x160/0x160 [ 1717.346426] ? __lockdep_reset_lock+0x180/0x180 [ 1717.347432] ? lock_acquire+0x197/0x470 [ 1717.348289] ? find_held_lock+0x2c/0x110 [ 1717.349172] ? __might_fault+0xd3/0x180 [ 1717.350028] ? lock_downgrade+0x6d0/0x6d0 [ 1717.350947] __sys_sendmmsg+0x195/0x470 [ 1717.351829] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1717.352761] ? lock_downgrade+0x6d0/0x6d0 [ 1717.353676] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1717.354718] ? wait_for_completion_io+0x270/0x270 [ 1717.355771] ? rcu_read_lock_any_held+0x75/0xa0 [ 1717.356753] ? vfs_write+0x354/0xb10 [ 1717.357561] ? fput_many+0x2f/0x1a0 [ 1717.358354] ? ksys_write+0x1a9/0x260 [ 1717.359183] ? __ia32_sys_read+0xb0/0xb0 [ 1717.360079] __x64_sys_sendmmsg+0x99/0x100 [ 1717.361003] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1717.362115] do_syscall_64+0x33/0x40 [ 1717.362926] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1717.364046] RIP: 0033:0x7f9688118b19 [ 1717.364849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1717.368817] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1717.370466] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1717.372018] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1717.373562] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1717.375116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1717.376665] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 1717.385581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10208 comm=syz-executor.5 [ 1717.415481] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:24:45 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xfffff000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:24:45 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) r0 = gettid() capget(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000100)) timer_create(0x3, &(0x7f00000003c0)={0x0, 0x1000002e, 0x2, @thr={&(0x7f0000000380)="046d91aabe8b59babf80879a918c2766328ef52030c386efa3c0656393ae2ee7a4b47e9bdde8e8b7c1a281b4dedccef9736d11a8c1303a6714e9969009d05b", &(0x7f00000004c0)="7ae662e921d48f4f924675059336348f18fd2b1bfb69dbe80402f0dd936eb90d84d6c60c1942ceb8a9813193e6941b55cfffa85565946e85b2904d2f4b55bbfa173209483d68863c55ac8834944119f1c1fe23b58d6dae0562abdf5b482d3f97a3c6ed0825b36a39424721099792a397536b185819b1d66895469d69bef92d75d35087540aea5bfa5b6688b47aa974ecc3922ab460f3de4900000000"}}, &(0x7f0000000340)=0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000400)={0x80000000, 0x80, 0xfffffffc, 0x2, 0x96b, 0x20}) clock_gettime(0x0, &(0x7f0000000100)) semtimedop(0x0, &(0x7f0000000140)=[{0x1, 0x54}, {0x4, 0xab9, 0x1000}, {0x4, 0x2}], 0x3, &(0x7f0000000440)) clock_gettime(0x0, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000200)={{0x0, 0x3938700}, {r3, r4+10000000}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400005e6f00010d000000000479ab0112e771690c2d4170e66f9e11f13475d9095e9957acde34389fdbd32aeb4714c1fc51288770d4d9edc67bc0cb27f8850900000099794b77f35767d87d186e00800ebdba5ac2d3adaa4a30505d1ab49f33277a377a311d5e076013a3e0dd01f73079605dcc7f2c960c3f20a007d7ac7376ca6ccca0d89ac3964fb07d68cd0d6ac799cf15ebcd835d85d11aec110276758cf4014436e6640cf05b00"/181], 0x14}}, 0x0) lseek(r2, 0xffffffff, 0x902f90f22c7c3cf) capget(&(0x7f0000000040)={0x39900612}, &(0x7f00000000c0)={0x8, 0xd99, 0x765e, 0x5, 0x7, 0x1}) 02:24:45 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x162, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:24:45 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xffffff7f, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:24:45 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x300, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1717.543061] EXT4-fs (sda): re-mounted. Opts: (null) [ 1717.562237] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:24:45 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:24:45 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x900, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:24:45 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xffffff80, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1717.728942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10232 comm=syz-executor.5 [ 1717.743544] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:24:46 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 50) 02:24:46 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xf00, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1717.993727] FAULT_INJECTION: forcing a failure. [ 1717.993727] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1717.995841] CPU: 0 PID: 10240 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1717.997067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1717.998516] Call Trace: [ 1717.998974] dump_stack+0x107/0x167 [ 1717.999601] should_fail.cold+0x5/0xa [ 1718.000267] ? __lockdep_reset_lock+0x180/0x180 [ 1718.001072] __alloc_pages_nodemask+0x182/0x600 [ 1718.001868] ? mark_held_locks+0x9e/0xe0 [ 1718.002569] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1718.003628] alloc_pages_current+0x187/0x280 [ 1718.004416] allocate_slab+0x26f/0x380 [ 1718.005089] ___slab_alloc+0x470/0x700 [ 1718.005760] ? dst_alloc+0x9e/0x5d0 [ 1718.006415] ? xfrm_policy_get_afinfo+0x21/0x2b0 [ 1718.007265] ? lock_release+0x680/0x680 [ 1718.007978] ? dst_alloc+0x9e/0x5d0 [ 1718.008618] ? kmem_cache_alloc+0x301/0x310 [ 1718.009379] kmem_cache_alloc+0x301/0x310 [ 1718.010107] dst_alloc+0x9e/0x5d0 [ 1718.010718] xfrm_lookup_with_ifid+0xb79/0x1b70 [ 1718.011540] ? xfrm_policy_lookup_bytype.constprop.0+0x1a70/0x1a70 [ 1718.012638] ? ip6_route_output_flags+0xf0/0x370 [ 1718.013473] ? ip6_dst_lookup_tail+0x63b/0xfc0 [ 1718.014278] icmpv6_route_lookup+0x385/0x470 [ 1718.015051] ? icmpv6_err+0x320/0x320 [ 1718.015726] ? dst_release+0x58/0x180 [ 1718.016432] icmp6_send+0xfdf/0x1f30 [ 1718.017100] ? icmpv6_push_pending_frames+0x470/0x470 [ 1718.018003] ? find_held_lock+0x2c/0x110 [ 1718.018748] ? ip6_dst_hoplimit+0x440/0x440 [ 1718.019520] ip6_pkt_drop+0x3d2/0x7f0 [ 1718.020206] ? ip6_pkt_discard+0x20/0x20 [ 1718.020928] ip6_local_out+0x29f/0x4c0 [ 1718.021623] ip6_send_skb+0x117/0x460 [ 1718.022290] udp_v6_send_skb+0x7b7/0x1620 [ 1718.023037] udpv6_sendmsg+0x216b/0x2b40 [ 1718.023758] ? ip_frag_init+0x350/0x350 [ 1718.024465] ? udp_v6_push_pending_frames+0x360/0x360 [ 1718.025359] ? SOFTIRQ_verbose+0x10/0x10 [ 1718.026076] ? __lockdep_reset_lock+0x180/0x180 [ 1718.026904] ? lock_acquire+0x197/0x470 [ 1718.027602] ? find_held_lock+0x2c/0x110 [ 1718.028328] ? lock_chain_count+0x20/0x20 [ 1718.029049] ? sock_has_perm+0x1ea/0x280 [ 1718.029777] ? __import_iovec+0x458/0x590 [ 1718.030507] ? udp_v6_push_pending_frames+0x360/0x360 [ 1718.031408] inet6_sendmsg+0x105/0x140 [ 1718.032088] ? inet6_compat_ioctl+0x320/0x320 [ 1718.032866] __sock_sendmsg+0xf2/0x190 [ 1718.033546] ____sys_sendmsg+0x334/0x870 [ 1718.034254] ? sock_write_iter+0x3d0/0x3d0 [ 1718.034982] ? do_recvmmsg+0x6d0/0x6d0 [ 1718.035659] ? __lock_acquire+0x1657/0x5b00 [ 1718.036430] ___sys_sendmsg+0xf3/0x170 [ 1718.037109] ? sendmsg_copy_msghdr+0x160/0x160 [ 1718.037905] ? __lockdep_reset_lock+0x180/0x180 [ 1718.038710] ? lock_acquire+0x197/0x470 [ 1718.039397] ? find_held_lock+0x2c/0x110 [ 1718.040121] ? __might_fault+0xd3/0x180 [ 1718.040799] ? lock_downgrade+0x6d0/0x6d0 [ 1718.041528] __sys_sendmmsg+0x195/0x470 [ 1718.042224] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1718.042977] ? lock_downgrade+0x6d0/0x6d0 [ 1718.043711] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1718.044557] ? wait_for_completion_io+0x270/0x270 [ 1718.045398] ? rcu_read_lock_any_held+0x75/0xa0 [ 1718.046197] ? vfs_write+0x354/0xb10 [ 1718.046835] ? fput_many+0x2f/0x1a0 [ 1718.047462] ? ksys_write+0x1a9/0x260 [ 1718.048129] ? __ia32_sys_read+0xb0/0xb0 [ 1718.048838] __x64_sys_sendmmsg+0x99/0x100 [ 1718.049591] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1718.050479] do_syscall_64+0x33/0x40 [ 1718.051122] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1718.052006] RIP: 0033:0x7f9688118b19 [ 1718.052639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1718.055790] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1718.057092] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1718.058308] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1718.059520] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1718.060754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1718.061965] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:25:03 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 51) 02:25:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) open(0x0, 0x2, 0xc2) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000001400)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xfffb, r0, &(0x7f0000000000)="1319dd87188b7fd362cf9c32100d484d503c7fd24c63498a1782a7918303fe41103e8847910b57abcaf07d2910cfb3", 0x2f, 0xfffffffffffff801, 0x0, 0x2}, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) dup(r1) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 02:25:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xffffff9e, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:25:03 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1735.328989] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1735.345397] FAULT_INJECTION: forcing a failure. [ 1735.345397] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.348340] CPU: 1 PID: 10247 Comm: syz-executor.3 Not tainted 5.10.240 #1 02:25:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000035c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{&(0x7f0000001140)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000015c0)=[@ip_pktinfo={{0x1c, 0x0, 0x2, {0x0, @multicast1, @local}}}], 0x20}}], 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/159, 0x9f}, {&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f00000002c0)=""/51, 0x33}], 0x4, &(0x7f0000000600)=""/170, 0xaa}, 0x9}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/156, 0x9c}, {&(0x7f0000000440)=""/60, 0x3c}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000000480)=""/48, 0x30}], 0x4}, 0x8}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000007c0)=""/190, 0xbe}, {&(0x7f0000000c00)=""/243, 0xf3}, {&(0x7f0000000d00)=""/60, 0x3c}, {&(0x7f0000000d40)=""/117, 0x75}, {&(0x7f0000000dc0)=""/105, 0x69}, {&(0x7f0000000e40)=""/242, 0xf2}, {&(0x7f0000000f40)}], 0x7, &(0x7f0000001000)=""/57, 0x39}, 0x4}, {{&(0x7f0000001040)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001180)=[{&(0x7f00000010c0)=""/104, 0x68}], 0x1}, 0x200}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/7, 0x7}, {&(0x7f0000001200)=""/126, 0x7e}, {&(0x7f0000001280)=""/23, 0x17}], 0x4, &(0x7f0000001300)=""/211, 0xd3}, 0x5}], 0x5, 0x2023, &(0x7f0000001540)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2130420, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x0, 0x989680}, 0x1, 0x0, 0x0, {0x0, r3}}, 0x2) r4 = accept(r2, &(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x80) syz_io_uring_setup(0x57ea, &(0x7f0000000880)={0x0, 0x1742, 0x0, 0x3, 0x1ec, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000b80)=@IORING_OP_WRITEV={0x2, 0x5, 0x2004, @fd=r1, 0x9, &(0x7f0000000b40)=[{&(0x7f0000000980)="0dbb08a8fdba3403d2c850633396673be077bbfeb6293d8daf70f63cac968a6286cf5b6893193311bc1e2249eea802a4ece4b2e227b543daa72e7bfa8e85eaf471cf5a36029ebb6c14de46ce3e5960743d19663ba195e4d754a233f48f131d26d39f4b7fcda4928aca05b9a070cf47f5bd4d57839ae1bd91e7af8fb0e209a7dfd77c1de4077600e1d4f4796c6d6a3ea8692437e0ca47caca8aa86573387654cc24e1", 0xa2}, {&(0x7f0000000a40)="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", 0xfd}], 0x2, 0x1, 0x1, {0x2, r3}}, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0xff, 0x4}}, './file0\x00'}) 02:25:03 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2f00, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1735.350101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1735.352456] Call Trace: [ 1735.353131] dump_stack+0x107/0x167 [ 1735.354056] should_fail.cold+0x5/0xa [ 1735.355020] ? ___slab_alloc+0x155/0x700 [ 1735.356067] ? create_object.isra.0+0x3a/0xa20 02:25:03 executing program 5: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"/267], 0x14}}, 0x0) 02:25:03 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x1, 0x0, 0x1}, 0x7) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {0x0, 0x0, 0x1000000000c00}, {0x0, 0x0, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 1735.357224] should_failslab+0x5/0x20 [ 1735.358301] kmem_cache_alloc+0x5b/0x310 [ 1735.359340] create_object.isra.0+0x3a/0xa20 [ 1735.360469] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1735.361770] kmem_cache_alloc+0x159/0x310 [ 1735.362836] dst_alloc+0x9e/0x5d0 [ 1735.363723] xfrm_lookup_with_ifid+0xb79/0x1b70 [ 1735.364921] ? xfrm_policy_lookup_bytype.constprop.0+0x1a70/0x1a70 [ 1735.366507] ? ip6_route_output_flags+0xf0/0x370 [ 1735.367703] ? ip6_dst_lookup_tail+0x63b/0xfc0 [ 1735.368889] icmpv6_route_lookup+0x385/0x470 [ 1735.370010] ? icmpv6_err+0x320/0x320 [ 1735.370975] ? dst_release+0x58/0x180 [ 1735.371989] icmp6_send+0xfdf/0x1f30 [ 1735.372959] ? icmpv6_push_pending_frames+0x470/0x470 [ 1735.374274] ? find_held_lock+0x2c/0x110 [ 1735.375368] ? ip6_dst_hoplimit+0x440/0x440 [ 1735.376486] ip6_pkt_drop+0x3d2/0x7f0 [ 1735.377453] ? ip6_pkt_discard+0x20/0x20 [ 1735.378485] ip6_local_out+0x29f/0x4c0 [ 1735.379466] ip6_send_skb+0x117/0x460 [ 1735.380453] udp_v6_send_skb+0x7b7/0x1620 [ 1735.381452] udpv6_sendmsg+0x216b/0x2b40 [ 1735.382413] ? ip_frag_init+0x350/0x350 [ 1735.383342] ? udp_v6_push_pending_frames+0x360/0x360 [ 1735.384514] ? SOFTIRQ_verbose+0x10/0x10 [ 1735.385475] ? __lockdep_reset_lock+0x180/0x180 [ 1735.386552] ? lock_acquire+0x197/0x470 [ 1735.387465] ? find_held_lock+0x2c/0x110 [ 1735.388421] ? lock_chain_count+0x20/0x20 [ 1735.389380] ? sock_has_perm+0x1ea/0x280 [ 1735.390339] ? __import_iovec+0x458/0x590 [ 1735.391282] ? udp_v6_push_pending_frames+0x360/0x360 [ 1735.392456] inet6_sendmsg+0x105/0x140 [ 1735.393366] ? inet6_compat_ioctl+0x320/0x320 [ 1735.394403] __sock_sendmsg+0xf2/0x190 [ 1735.395297] ____sys_sendmsg+0x334/0x870 [ 1735.396214] ? sock_write_iter+0x3d0/0x3d0 [ 1735.397161] ? do_recvmmsg+0x6d0/0x6d0 [ 1735.398033] ? __lock_acquire+0x1657/0x5b00 [ 1735.399020] ___sys_sendmsg+0xf3/0x170 [ 1735.399901] ? sendmsg_copy_msghdr+0x160/0x160 [ 1735.400929] ? __lockdep_reset_lock+0x180/0x180 [ 1735.401981] ? lock_acquire+0x197/0x470 [ 1735.402865] ? find_held_lock+0x2c/0x110 [ 1735.403779] ? __might_fault+0xd3/0x180 [ 1735.404671] ? lock_downgrade+0x6d0/0x6d0 [ 1735.405623] __sys_sendmmsg+0x195/0x470 [ 1735.406521] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1735.407480] ? lock_downgrade+0x6d0/0x6d0 [ 1735.408437] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1735.409509] ? wait_for_completion_io+0x270/0x270 [ 1735.410585] ? rcu_read_lock_any_held+0x75/0xa0 [ 1735.411615] ? vfs_write+0x354/0xb10 [ 1735.412449] ? fput_many+0x2f/0x1a0 [ 1735.413257] ? ksys_write+0x1a9/0x260 [ 1735.414101] ? __ia32_sys_read+0xb0/0xb0 [ 1735.415011] __x64_sys_sendmmsg+0x99/0x100 [ 1735.415956] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1735.417094] do_syscall_64+0x33/0x40 [ 1735.417925] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1735.419057] RIP: 0033:0x7f9688118b19 [ 1735.419897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1735.423961] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1735.425651] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1735.427222] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1735.428808] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1735.430380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1735.431963] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 1735.485808] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. 02:25:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xfffffff0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:25:03 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002780)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@typed={0x4}]}, 0x18}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000300), 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, r0, r0, r0, r1, r0, r0, r0], 0x8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fcdbdf253700000008000300", @ANYRES32=0x0, @ANYBLOB="08005700030000000800a000810000000800a0000700000005001801020000000800a1000100010008002700030000000800a0000000000008002201ab5c384efb020000050019010d00000008005700ffffff7f080057008100000008009f000600000008009f0006000000080026006c0900000800a1000000000005001801"], 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) setsockopt$inet6_buf(r5, 0x29, 0xca, &(0x7f0000000680)="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", 0x1000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r5) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1735.529633] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1735.532375] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:25:03 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6201, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:25:03 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1735.645256] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. 02:25:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xffffffff, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1735.716533] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:25:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x400, 0x1) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') chmod(&(0x7f0000000140)='./file0\x00', 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00'}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000400)=ANY=[@ANYBLOB="05e104101703c7b963d79a6178a8a48d003425c2f1d75c7ee7003c00000000"]) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xac]}, 0x8, 0x80800) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x88) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@remote, 0x7}) 02:25:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38010000190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB="180008005200080000004a00816849e6ac67347b75f2f96704e2f4ba3ff34ee6f303f88ffba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b000008000c000000000008000b0000000000050019000000000008001f004f68f77e3478c472ebb126870e03", @ANYRES32=0x0, @ANYBLOB], 0x138}}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0xa616d000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x6}]}) 02:25:03 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xf000, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1735.809667] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1735.867098] audit: type=1326 audit(1755915904.006:235): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10281 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9857502b19 code=0x0 [ 1735.940110] audit: type=1326 audit(1755915904.079:236): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10281 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9857502b19 code=0x0 02:25:18 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 52) 02:25:18 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/bus/machinecheck', 0x40, 0x82) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x131000, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0xc, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) 02:25:18 executing program 0: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x98a42, 0x40) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x105142, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{r2, 0x18180}, {r1, 0x508}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x104ad}], 0x4, 0x0, &(0x7f0000000440)={[0x6]}, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="200025bd7000ffdbdf256d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900d600000042000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@private, @in=@private}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000100)=0xe8) sendfile(r0, r3, &(0x7f0000000140)=0x3fd, 0x0) lseek(r1, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 02:25:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xf, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:25:18 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffff, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:25:18 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1750.790832] FAULT_INJECTION: forcing a failure. [ 1750.790832] name failslab, interval 1, probability 0, space 0, times 0 [ 1750.793258] CPU: 1 PID: 10295 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1750.794725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1750.796495] Call Trace: [ 1750.797059] dump_stack+0x107/0x167 [ 1750.797838] should_fail.cold+0x5/0xa [ 1750.798649] ? create_object.isra.0+0x3a/0xa20 [ 1750.799615] should_failslab+0x5/0x20 [ 1750.800428] kmem_cache_alloc+0x5b/0x310 [ 1750.801299] create_object.isra.0+0x3a/0xa20 [ 1750.802235] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1750.803316] kmem_cache_alloc_node+0x169/0x330 [ 1750.804295] ? mark_lock+0xf5/0x2df0 [ 1750.805096] __alloc_skb+0x6d/0x5b0 [ 1750.805869] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1750.807001] alloc_skb_with_frags+0x92/0x570 [ 1750.807938] ? mark_lock+0xf5/0x2df0 [ 1750.808741] ? mark_lock+0xf5/0x2df0 [ 1750.809533] sock_alloc_send_pskb+0x7af/0x930 [ 1750.810497] ? sk_alloc+0x350/0x350 [ 1750.811278] ? perf_trace_lock+0xac/0x490 [ 1750.812163] ? SOFTIRQ_verbose+0x10/0x10 [ 1750.813045] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 1750.814116] ? rawv6_exit+0x20/0x20 [ 1750.814882] ? SOFTIRQ_verbose+0x10/0x10 [ 1750.815757] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 1750.816781] ? ip6_mtu+0x1e9/0x3d0 [ 1750.817539] ? ip6_setup_cork+0xfb7/0x1740 02:25:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000009680), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000009780)={&(0x7f0000009640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000009740)={&(0x7f00000096c0)={0x24, r3, 0x1b71f49caa405a6b, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4001) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000300)={0x3, {{0xa, 0x0, 0x0, @mcast1}}}, 0x5000) 02:25:18 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:25:18 executing program 2: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x5}, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @void, @val, @void, @void, @void, @void, @void, @void}, 0x26) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f00000000c0)=ANY=[@ANYBLOB="d40000ad0abdb44417c5d466c28000080211000001a98c5a1545f3774488edc28d320f15070e17e18bdbd1e643d57425950e5758a1a473a6b348fadfb7bfa5e2b9810c3515ad94e08bc13b9bbc13ba6a8882c2b49cf5b7ecefcb4b1ed56b70727955f41e20e0953f159e7259045e870e92559ee6de93d8e18bc8e091"], 0xa) [ 1750.818439] ip6_append_data+0x1e6/0x330 [ 1750.819521] ? rawv6_exit+0x20/0x20 [ 1750.820461] ? rawv6_exit+0x20/0x20 [ 1750.821244] icmp6_send+0x1250/0x1f30 [ 1750.822072] ? icmpv6_push_pending_frames+0x470/0x470 [ 1750.823163] ? find_held_lock+0x2c/0x110 [ 1750.824087] ? ip6_dst_hoplimit+0x440/0x440 [ 1750.825022] ip6_pkt_drop+0x3d2/0x7f0 [ 1750.825830] ? ip6_pkt_discard+0x20/0x20 [ 1750.826692] ip6_local_out+0x29f/0x4c0 [ 1750.827520] ip6_send_skb+0x117/0x460 [ 1750.828342] udp_v6_send_skb+0x7b7/0x1620 [ 1750.829234] udpv6_sendmsg+0x216b/0x2b40 [ 1750.830092] ? ip_frag_init+0x350/0x350 [ 1750.830945] ? udp_v6_push_pending_frames+0x360/0x360 [ 1750.832045] ? SOFTIRQ_verbose+0x10/0x10 [ 1750.832925] ? __lockdep_reset_lock+0x180/0x180 [ 1750.833916] ? lock_acquire+0x197/0x470 [ 1750.834766] ? find_held_lock+0x2c/0x110 [ 1750.835643] ? sock_has_perm+0x1ea/0x280 [ 1750.836547] ? __import_iovec+0x458/0x590 [ 1750.837423] ? udp_v6_push_pending_frames+0x360/0x360 [ 1750.838515] inet6_sendmsg+0x105/0x140 [ 1750.839340] ? inet6_compat_ioctl+0x320/0x320 [ 1750.840294] __sock_sendmsg+0xf2/0x190 [ 1750.841123] ____sys_sendmsg+0x334/0x870 [ 1750.841998] ? sock_write_iter+0x3d0/0x3d0 [ 1750.842889] ? do_recvmmsg+0x6d0/0x6d0 [ 1750.843720] ? __lock_acquire+0x1657/0x5b00 [ 1750.844660] ___sys_sendmsg+0xf3/0x170 [ 1750.845487] ? sendmsg_copy_msghdr+0x160/0x160 [ 1750.846456] ? __lockdep_reset_lock+0x180/0x180 [ 1750.847441] ? __fget_files+0x2cf/0x520 [ 1750.848307] ? lock_acquire+0x197/0x470 [ 1750.849146] ? find_held_lock+0x2c/0x110 [ 1750.850013] ? __might_fault+0xd3/0x180 [ 1750.850855] ? lock_downgrade+0x6d0/0x6d0 [ 1750.851771] __sys_sendmmsg+0x195/0x470 [ 1750.852635] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1750.853548] ? lock_downgrade+0x6d0/0x6d0 [ 1750.854452] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1750.855485] ? wait_for_completion_io+0x270/0x270 [ 1750.856516] ? rcu_read_lock_any_held+0x75/0xa0 [ 1750.857499] ? vfs_write+0x354/0xb10 [ 1750.858298] ? fput_many+0x2f/0x1a0 [ 1750.859070] ? ksys_write+0x1a9/0x260 [ 1750.859874] ? __ia32_sys_read+0xb0/0xb0 [ 1750.860754] __x64_sys_sendmmsg+0x99/0x100 [ 1750.861652] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1750.862741] do_syscall_64+0x33/0x40 [ 1750.863525] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1750.864627] RIP: 0033:0x7f9688118b19 [ 1750.865412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1750.868451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1750.869303] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1750.869326] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1750.869337] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1750.869353] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1750.875883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1750.876607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1750.876619] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:25:19 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:25:19 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:25:19 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x50, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:25:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={@mcast1, 0x5b}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001d00210c00000000fbdbdf250100020058e1f427ac228a56bc008ab966c0f8ac7a2a330419306c10c4dbc57d0b91172a7daabca0a8905625bcfd9b5dcd52004b5ee527907eebc7c9c532e97f7b594367d09aae8eaf5bcacea5b107f6db51a7ddcfe39e42a36bda4a8692badc4f48b0754e2a90b79127f7fffffffffffff10019f7cc3a0799020000000001000062644cad137c4642a7ab9b06000000e5de342e073f13b7487e7f38441e3171a400804cfdf4e57246f8b4b4f500000000000000000000000020108754beb4034790ba0ea35370792634e28c4f326285ddc480889f99688a3500b636886bfd6a0ab0c7d400126f8375aecc37b080fdfcaa75e7d018096a35ffff0f05a250c8fc8531136307ac161dbf8b624f86e131f9cda562991c2aa52d212bbcd5a1363e15966b06a252e3240a76aa769500010000857ed4dd712d64974a4a75326b47b26c4a36df983513fa940a863fd456eb0000000000000000000000000000000046cdbc9f7679441a94fc000000000000001f570a010d6da0b3320c412f0afd87e7d7195dd65414341114e867d99ffb115d95d9ac342dc539773f7cba1b5165cce225270000000000"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000001400)) lseek(0xffffffffffffffff, 0x0, 0x3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 02:25:19 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:25:19 executing program 1: r0 = fsopen(&(0x7f0000001300)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x0) fsmount(r2, 0x0, 0x76) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = fsmount(r0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='ro\x00', &(0x7f00000000c0)='./file0\x00', r3) 02:25:19 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1751.182623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1751.532256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 02:25:35 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 53) 02:25:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={@mcast1, 0x5b}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000001400)) lseek(0xffffffffffffffff, 0x0, 0x3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 02:25:35 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') clock_gettime(0x0, &(0x7f0000001d40)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001e00)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000000c0), 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000000240), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000000400), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000500)=""/243, 0xf3}, {&(0x7f0000000600)=""/205, 0xcd}], 0x3}}, {{&(0x7f0000000740), 0x6e, &(0x7f00000009c0)=[{&(0x7f00000007c0)=""/165, 0xa5}, {&(0x7f0000000880)=""/148, 0x94}, {&(0x7f0000000940)=""/66, 0x42}], 0x3, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000001c00)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/151, 0x97}, {&(0x7f0000001b80)=""/80, 0x50}], 0x3, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x5, 0x0, &(0x7f0000001f40)={r0, r1+10000000}) openat(r2, &(0x7f0000001f80)='./file0\x00', 0x10800, 0x40) 02:25:35 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:25:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:25:35 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xc0, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:25:35 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:25:35 executing program 2: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x8001, 0x2, 0x2, 0x20, 0x7f, 0x8001, 0x80000000, 0x6bf4, 0x4, 0x7f, 0xffffffffffffffff, 0x0, 0x1000, 0x6}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000000c0)={0x0, 0x0, "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", "6f6b8311e86e9490d6a71df98ba45f2bafc5d1c9cd5c9bb0243e0cf007c1904fb05d7a9303d66f13894af09ff84cb25fe3b6ecccb3e844ffab612b0d24e3982d145869d06d05d282e5d02477e121687c9410a351deb75e9831f6b8db812f2f768cb796b3b93f41aebfeaef81026e2093271368fe928805e690b40462a0fa7295a571397430aabb4eed70383dae2c366ccc659654b9c748e60d0503ed825cde4d2a11b32b1335ec9bd139f5c69abbb12344542bbcebf7e6a28c2a6aa74f6508222b5948a0ebafbc308fa787c8cea11451586324b06dcb8e6b4d2a17706e2cd0ea9f3c7dbc01632afeda2a82de43e9f2d44d1c6fc45eed818f7f428afa095bc26bbe43377b279914ef48c60a76deb335d212596fe6b910ac8265270029f21289ba62639ce37f8d7915d312e0502c990832d510e3259200064bbe6eda274adf68ce18d46359e0ecf61c385b9b328b11a366090a4dccc1106e4236f5da64dc59f8c146cb86f68fd2d3ca9301f115169213d2da058623ed8aa8384e2c16f457cfe62a9fa5b6f948d14f0a7a0b62524054f16bf645513b1b66fbc7303a75ab9b6c0d02f8576fe7f0d19bbd66e7dda6c2e3a3a36c994105aa34c2c7754b2c4b04a203f3a6fe12409c3c79434f4e25f17232c26b7ce8c94d79801b2033b8a81f1eafac3e4cd209318eca56d1ba9eb7bc62cb8b957ff5e4433522de6fd581e4a851518fd3a705a9df9c6e240d1248fd1621a0be3b3a8b1b11194fa21502b07f76a6ad8a69c3e9f9c2a0454baf11848d07966b0ee19810b3ed8a174cc83919924816e905445a8b68ff4acb9e69906adbbea13b89c9a6254cc95175ef91d570955ed0eec412d28c1c353a56a144ea54ef65083c84a787189554532a83f708a0f2f8d6a7e2c43055988af95d9e32833ecb0e41092ec9e18c716ae18dd0fb6ca6198635d88105c45f16be41eee9e09854b257cd03e9a1129ba94e9e4e69ccb31ec25fd5f259305a024dfb45ece282b165cc2fb924352b060efca4c9a2230af853b1c5ebe4c868ddb65dfaf835cf09916bf5564c541c78a4e226c2f9d6b164d7bd8b3a184118b5a63321f77921bdb0a8ca477e630374d328d3c295d68211b1377cf04d7b2ac2ea94832c07c0d57f32bc89794e18baffe2cce79a668d2fb199da28f5fb336755ad1d16ccb450b51527f3bcf8d53109be5360ca50c7edcb5a1eac1a65e41a63a6480ddda1746265643857dfe7741205c0d66b4173d545e7d9066cea7de27792f7e60b23fc15e1cd40560ae8f01e92dfd9b7d5147a2b8a00a95ca05e6516eeaad8469e44e65256d7aa095707d8a498d83f8b10112bd8cfb0311fd672b88eb0c5c42f6d999138207218fdcea433d8f2e9c53435e0263b85ee2531aec85923fea04fd5d1bc07457618ac9e155ba5f11add50bead2ff17960f3fcff44061790c3595614d013c916939493174bb5644d1dbce4844fe839cc2b3ce933fbd5154c2067f61ad23a135ed250c660ff5c6d627f3e963fd25dd1a588dcf5b3ea64a997fec5f84bb5d5192831e4016b3792e458c7befcd5a2015902d62f24eba8d7654a26c0dc65590aa9ec3511d86d66a9318684d89ee1d428eebac3057b66e9d7558d219c6f83c06503141b9196ea8bfaf1144d85738ff7be11872c2e9679709c300708982334433d13c5f6286a3ac77b1d075178737e6bea0e37c746697f7aec66a8925ceb11172d47662e70f51b73c6d7c1cb356d4b4802ede563a369219dc19d0a7fd4aef58ace6b20992320a86f7ad79a2d2c6930614327e9d2461418442ee2dbc99ce3141ec3ed336749d49554f65ee494acfb69af79616865fd6147360d153a4077ec3f879de37fb80ebe9b98c704cf715693fc29cfdfdd00f55abfb4b022594747a673f53057cada57e6861ee0bbf6ec1a3d9d2ddc9812ffe248d829c2ccfd9ae074a309c4f9d32494dfcdb5f055c94d9b9304391b9f806f47c30fe956f6adb147c232650030af90433737f062256e47217f3b6b5acc9143cd2a711381f5257ba33391a6c472613c4255893669726210c7eb84fe93040090514616552c60376af8c0805b0d5f719d2c7fc15e616178ae533357528b038d4e07776106f1a84f53c21c786f4417cfb2a3fa730a8ee030e9598b830904f9f5204380c007d490c5450572087548967ec17c506b201cd37ab40827f426499bbde39869ab070d850ea958dc690241b282db7efa30ec69e6072305ac2220aed9696dde3f6d63f2eb036fc02b65b9311455f5ad93701b5aa23d36980554a3e7a9b8bed7572a8d36707e50422e0eb1f7f32ca793fa938d8d10eab97e65c38b4390250f0ec7daa2ca3d763043b6653f4d7971d136a8c36c57b976eb4786959037a5b88c86f6219c9afa2433406c34118483fe7544396103f7dabde47879d59200c64990602dfe609bb39822ed2d448ea7803a1269beadc086b3e41009da94a94ac8227619936898b4ee83151dd6f3bd559f1f1ee4f2025bf805f5d5c751133780cb44fd481d6a103a95e8c80d8dcec11dc9ef1e8b7d483c24dce23db884def3837f5ec42bfbca5886c565d7a0193f216db0ca2dd8b4dd71dfcf504416a4246cf0261526449f98f1897466dbd1fa36f08bce728c8d86afe73a8d182fd8f08da8e11be79c0ac5d89ffd366bd91aad2317901a1102936cac21eb1a042a4bacde881260582908db30a1a2c75161a6bdec616fc24933cea960a2a79aaecdc440e0351e2a7a672cf65d748fb001bd91bb7bc6e8018010720d15015791e63e71dd9a10aa9783e1be1d6224cff5749d581b829a8cd3ebdd702de3efb6640034b6f2665f2e27f082d679a804b633652bd33c3f94d9f95866ad5084cbbe2236a49459424e89e6e3ec49560584511d81980858f8d7a9e2078753d154d3829ca6afb3918c62c51e5a4065a1d2749c5c47dafd38dfec52f41d8a43ec5a2bb9ff74b80af76ccb24fafed2a439bace192f2312618f136884bfd9b920b8a926d1ba5ec06655043be981efb60d4e8e847700d21ea2e166d53f5fdd63ec75e6f47277ea74010ed36db34efdaa6b3e74b9a6fac45d07b5ae203b953bd62438c79a87aaeb560ec8dd9a3ad83027733c0c528daa096ef929fa1149732027fb9c11b816cce79ac3e55e6370a0bf57679d9a4b72d5e1296d7f8e9203d63e16db52abf035b9aff3021ca7c62bb1e3f9a54bd0ae2c2d9544ea1c31b3d9a0f9262b99e6ffbd2d1eacb269cc773a9286df5dcfed1fc5e2557710c86bc6d1885c2825aa59fd5e0e01f911deebf89ef37268b55232f0861bbf94dcf82033e20030c3ff13615928816c50b592e22ab4756b361eac850e1a3c14928ffeb4c16b4319e3c4a795b2d40f05ea6474c69434c8bd21d78bc9e4bcb9826b4e35162205d9a07a33558bb3605a3d8aa280d4e9559d23085fb7ce6cbad84e8b8d412f411e7e7bd65e49b05388f63edb012b219f4650bb8076bc29510eed85bd5144b96969ad65bdae222347dfa6dae25f86d2db2d300f2aecd43b0eee81a60147e7fdef7d81a253c413be866677002dd54c08a1f35cff46f10bf34eb8861b55b0ef7d168975e4b1a206ed7748dafa5984ca5150de5307251d880d75b0beeab0682d2fb578baa2f9ec72d144b0ab21c654abd9155d54691a4587cf28f2d2ac5914947977cb8ad1e3959842e955874f758643574e5bd383063da717188d8dad408cf526bc230ddb1987a377433051e0a9ecd24c3ea84e2f6239ca2be7d055a70d435c4c70763b5011f32b5f4b81636936fdda97dc405f1a051c06c9280fa7343bc3826d26de732867f4bae3886c2e915982f90c533b1c50200f1917ca82ac09a06a1594a55f200adc391fe3fb0b6cadeb12557fa2ea5963720c3da69b47b2c57cc3c55c113a0a94fca0d3c9ae86d9f6a80f1b55b13d7b2b0e9138cd65802ad408e2846c43372e32247fb9a57af8a3dc291e8e8ab8efb99d58edaf587a225148f3827edc9ac3fe7a03c12e4023429759ae96c790a05638120a9686be441a91d48f46e33ddcec9c6b446cf07804e1a1c5ae76bb5ba428ae83772e65466e16eacb3991b8f731ee54faaea023a7d445ab3a5fa9596c604ea9ec39e875c23c2686c8f17157981ec60477540c92c78af6d14eb9ec2e54ea64e9a30564251be56640f7462e1d0d7add712319187d60f2a97cf7eacda6ac219b49aa471379c8fdc480c1215836bb779755ff14c8a5ccecd988976e1431a9c86e1d41e1670203a0b48dd7fb212978847b8ad396c797f006f6853d67fd97aeb2ae5e12f4b36e408386d46483e93e5c732fb9518a57428c565cbf06d6330323b394f2afa8e0a90ab4687d612d6dd7f7f36554774b7a11f73821fc33a87a555909cbd32867d7fd3d2fa5e999a09594b70e22f88bd71d550d25bb1bbea9db4f843038ece35d505f3e308bfdf7769df3d2e4190d60267d1bdd8e4811444f04e208d584f6791737ad995893305ca38dd90fe41bf1a3d8acbaba72e7484c1d9c4b6df6732f1fbcdcdcbaba5ca22b634e65a6207435cc399da60f706db6b57d89866c694e607860c13096ed7f56bc84dff462d02f776232ea8bbdf94fa52aadf3a57564c6c6b739dff38c9c418195daca60a11f04be2f340cc64d85031ec3d5d5b905b9e49590f09d91bfffad2ac100ea6abd8d26d7c607ae96f7acb2172ee67df592988f80da61a46f0c0f02655f70ebc7a883d39ecfe8c8c4a4162015697483ed79e24dc8c6838921ad3eebe678f66dd76694145fcfc93aa0abc3089b91a8bbeb45f58a4e071c0feabb8d4f9023a02e4893bb5f6b106216f6da37d46826150528acc29db6664ed6d596ffdf9105c7cee07dcbd3fefa3b4578d1dbf0ecdef36a1d7a651c2efb395f6affd504bcd79300da275992de738bad55e19c5c2251a11fa90acecef8acfa9fe314265b38f0473580b75bbd480f18836904db99bab566de4b55b17a1bb04ba7acc7e47f17979b058bc33b693d1bc4cba67d836d903b82091f4b0508a8c3935a28acb4c5fa65f2f3e334e32a07afa96dfd83697ca5148fa6978c59d7d01eda817794bb2d7338861d396d2aed8f95a207705be59799d374a1949017a0158036ebcc6459a3f8118a9dfc71f56d215f8e1b7928a3c4284e768d1c8a14f2265383387a2432986c1f7ae7185e75afdbd95e5f9c41174d556657a451fc27ae0f14f10c21aa42b4369693ecfd1c11161402e060cd0eb8fb1239801c28ea489ffc65d23883a777c4898d7487222c9c5ea805198f6c8fbaf0c366b3e2850a6045763bc4ebec856c995399ef95f28d23dc2f1f29167c725d37a087f4293e563b52375f46c61dc1980bf55d4340ed2f71a21df45c06611faf2dcc3533e77282376a88f9f8a08660da2599f489e8af3fc03bd5e1613a6999196a7b77ee785f4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000012c0)={{0x0, 0x0, 0x40, 0x8001, 0x2, 0x1f, 0xfffffffffffffff7, 0x1, 0x8, 0x1, 0x9, 0x9, 0x0, 0xe000000000000000, 0x9}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001380)={0x11e407e3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "eeb6c0ba22d54c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002380)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002580)={0x0, 0x0, "a2223c05f32c62fca899a0f4f35f4c654425936de41b2ecef372c53cec28839710b61f0c10857ff374dc80d46f619824c7831c8b6e67110014c29f9e1bec501ef77315a2e6ff8b2253388e17179e9908f2a123241bd02ab919a5476c6dc88b72f967c034a70676bb5b6cdbace0c0f22d85fab4a68b4f4e922c0638e6845f25fbdddb95d787e9a319b801860af066d24ad3f56bf40fcfeb340f6b4871709d315ca82a7fc4171ed595df3e3018675c563e7ac3b9982ff50d91a2063f8ddd17003568d61f28d569f112431bbd0edabc6fd12246614c49ee42a7ec72ec785d809449bbb223ac6390efce21aefefc4037cfafdfd64ee341a4b892e64f3f0f317c1f35", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003580)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003780)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004780)={0x3f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xfb, "8b5823bad21cd2"}) [ 1767.712443] FAULT_INJECTION: forcing a failure. [ 1767.712443] name failslab, interval 1, probability 0, space 0, times 0 [ 1767.714224] CPU: 0 PID: 10342 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1767.715268] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1767.716551] Call Trace: [ 1767.716960] dump_stack+0x107/0x167 [ 1767.717519] should_fail.cold+0x5/0xa [ 1767.718111] ? __alloc_skb+0x6d/0x5b0 [ 1767.718681] should_failslab+0x5/0x20 [ 1767.719467] kmem_cache_alloc_node+0x55/0x330 [ 1767.720134] ? mark_lock+0xf5/0x2df0 [ 1767.720707] __alloc_skb+0x6d/0x5b0 [ 1767.721247] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1767.722058] alloc_skb_with_frags+0x92/0x570 [ 1767.722711] ? mark_lock+0xf5/0x2df0 [ 1767.723284] ? mark_lock+0xf5/0x2df0 [ 1767.723836] sock_alloc_send_pskb+0x7af/0x930 [ 1767.724524] ? sk_alloc+0x350/0x350 [ 1767.725094] ? perf_trace_lock+0xac/0x490 [ 1767.725709] ? SOFTIRQ_verbose+0x10/0x10 [ 1767.726334] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 1767.727107] ? rawv6_exit+0x20/0x20 [ 1767.727640] ? SOFTIRQ_verbose+0x10/0x10 [ 1767.728270] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 1767.729025] ? ip6_mtu+0x1e9/0x3d0 [ 1767.729568] ? ip6_setup_cork+0xfb7/0x1740 [ 1767.730193] ip6_append_data+0x1e6/0x330 [ 1767.730802] ? rawv6_exit+0x20/0x20 [ 1767.731342] ? rawv6_exit+0x20/0x20 [ 1767.731882] icmp6_send+0x1250/0x1f30 [ 1767.732477] ? icmpv6_push_pending_frames+0x470/0x470 [ 1767.733262] ? find_held_lock+0x2c/0x110 [ 1767.733929] ? ip6_dst_hoplimit+0x440/0x440 [ 1767.734574] ip6_pkt_drop+0x3d2/0x7f0 [ 1767.735161] ? ip6_pkt_discard+0x20/0x20 [ 1767.735761] ip6_local_out+0x29f/0x4c0 [ 1767.736352] ip6_send_skb+0x117/0x460 [ 1767.736925] udp_v6_send_skb+0x7b7/0x1620 [ 1767.737561] udpv6_sendmsg+0x216b/0x2b40 [ 1767.738187] ? ip_frag_init+0x350/0x350 [ 1767.738780] ? udp_v6_push_pending_frames+0x360/0x360 [ 1767.739536] ? SOFTIRQ_verbose+0x10/0x10 [ 1767.740185] ? __lockdep_reset_lock+0x180/0x180 [ 1767.740872] ? lock_acquire+0x197/0x470 [ 1767.741460] ? find_held_lock+0x2c/0x110 [ 1767.742063] ? lock_chain_count+0x20/0x20 [ 1767.742673] ? sock_has_perm+0x1ea/0x280 [ 1767.743302] ? __import_iovec+0x458/0x590 [ 1767.743926] ? udp_v6_push_pending_frames+0x360/0x360 [ 1767.744687] inet6_sendmsg+0x105/0x140 [ 1767.745256] ? inet6_compat_ioctl+0x320/0x320 [ 1767.745914] __sock_sendmsg+0xf2/0x190 [ 1767.746499] ____sys_sendmsg+0x334/0x870 [ 1767.747099] ? sock_write_iter+0x3d0/0x3d0 [ 1767.747720] ? do_recvmmsg+0x6d0/0x6d0 [ 1767.748303] ? find_held_lock+0x2c/0x110 [ 1767.748925] ___sys_sendmsg+0xf3/0x170 [ 1767.749497] ? sendmsg_copy_msghdr+0x160/0x160 [ 1767.750185] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1767.750950] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1767.751605] ? trace_hardirqs_on+0x5b/0x180 [ 1767.752249] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1767.752903] ? finish_task_switch+0x126/0x5d0 [ 1767.753565] ? finish_task_switch+0xef/0x5d0 [ 1767.754214] ? __switch_to+0x572/0xf70 [ 1767.754779] ? __switch_to_asm+0x3a/0x60 [ 1767.755378] ? __switch_to_asm+0x34/0x60 [ 1767.755975] ? __schedule+0x82c/0x1ea0 [ 1767.756592] ? io_schedule_timeout+0x140/0x140 [ 1767.757278] __sys_sendmmsg+0x195/0x470 [ 1767.757867] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1767.758524] ? lock_downgrade+0x6d0/0x6d0 [ 1767.759166] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1767.759894] ? wait_for_completion_io+0x270/0x270 [ 1767.760613] ? rcu_read_lock_any_held+0x75/0xa0 [ 1767.761317] ? vfs_write+0x354/0xb10 [ 1767.761860] ? fput_many+0x2f/0x1a0 [ 1767.762388] ? ksys_write+0x1a9/0x260 [ 1767.762940] ? __ia32_sys_read+0xb0/0xb0 [ 1767.763534] __x64_sys_sendmmsg+0x99/0x100 [ 1767.764158] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1767.764912] do_syscall_64+0x33/0x40 [ 1767.765453] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1767.766199] RIP: 0033:0x7f9688118b19 [ 1767.766740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1767.769401] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1767.770504] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1767.771533] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1767.772567] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1767.773596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1767.774689] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005780)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000005980)={{0x0, 0x6, 0x3e45, 0x7, 0x1, 0x8, 0xbb4, 0x9, 0x6, 0x7, 0x6, 0x5db, 0x7, 0x101, 0x7fff}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005a40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "2ab817eebddbe7"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000006a40)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006c40)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3f, "cb73a1dfe04670"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000007c40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000008c40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000009c40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000ac40)={0x5, [{0x0}], 0x1, "0d4e7970131c37"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000068880)={0x3, [{}, {r0}, {0x0, r1}, {0x0, r2}, {r3}, {r4}, {}, {}, {r5}, {0x0, r6}, {}, {}, {r7, r8}, {}, {}, {}, {}, {r9}, {}, {}, {0x0, r10}, {r11, r12}, {}, {}, {r13}, {}, {r14}, {0x0, r15}, {}, {0x0, r16}, {}, {0x0, r17}, {}, {}, {}, {}, {r18}], 0x40, "bb11552b7b6f1f"}) 02:25:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:25:35 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:25:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:25:36 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x8, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:25:36 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xec0, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:25:36 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:25:36 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x33fe0, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:25:36 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r1 = fork() r2 = getpgrp(0x0) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) fcntl$getownex(r3, 0x10, &(0x7f0000001600)={0x0, 0x0}) r5 = gettid() setresgid(0x0, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={r1, 0xee01}, 0xc) ptrace(0xffffffffffffffff, r5) r6 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x0) clone3(&(0x7f0000001680)={0x20210080, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000140), {0x27}, &(0x7f0000000400)=""/120, 0x78, &(0x7f0000001540)=""/181, &(0x7f0000001640)=[r4, r2, r5, r2], 0x4, {r6}}, 0x58) tkill(r4, 0x2d) getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) msgget(0x2, 0x200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000680)) ptrace$cont(0x18, r1, 0x8, 0x8) [ 1768.537717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 02:25:53 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 54) 02:25:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30}, &(0x7f0000000300)) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x5, 0x9, 0x6a, 0x0, 0x0, 0xfff, 0x40100, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x5040, 0x3f9, 0x0, 0x7, 0xe88, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfc7a}, 0x0, 0x5, 0xffffffffffffffff, 0xa) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f00000003c0)=""/115, 0x73}, {&(0x7f0000000300)=""/62, 0x3e}, {&(0x7f00000014c0)=""/148, 0x94}, {&(0x7f0000001740)=""/251, 0xfb}, {&(0x7f0000003640)=""/128, 0x80}, {&(0x7f0000000100)=""/51, 0x33}, {&(0x7f00000001c0)=""/36, 0x24}], 0x8) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) lseek(0xffffffffffffffff, 0x27b, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x0, 0x2, [0x9, 0x6, 0x0, 0x101]}) pipe(&(0x7f0000000180)) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x2}, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) getpeername$unix(r1, &(0x7f0000000380), &(0x7f0000000400)=0x6e) r2 = signalfd4(r1, &(0x7f0000000140)={[0x5]}, 0x8, 0x800) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$netlink(0x10, 0x3, 0xc) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x40086607, 0xfffffffffffffffd) fadvise64(r3, 0x1, 0x1, 0x4) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000000c0), &(0x7f0000000340)={'L+', 0x2}, 0x16, 0x1) 02:25:53 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1785.311844] FAULT_INJECTION: forcing a failure. [ 1785.311844] name failslab, interval 1, probability 0, space 0, times 0 02:25:53 executing program 4: timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1785.314808] CPU: 1 PID: 10386 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1785.316734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1785.318944] Call Trace: [ 1785.319665] dump_stack+0x107/0x167 [ 1785.320623] should_fail.cold+0x5/0xa [ 1785.321626] ? create_object.isra.0+0x3a/0xa20 [ 1785.322837] should_failslab+0x5/0x20 [ 1785.323849] kmem_cache_alloc+0x5b/0x310 02:25:53 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2201, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x2, 0x140, 0x31713}, 0x1f7) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40086607, &(0x7f0000000080)) r4 = syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x2, &(0x7f00000000c0), 0x1, 0x1, 0x1, {0x0, r6}}, 0x9) [ 1785.324940] create_object.isra.0+0x3a/0xa20 [ 1785.326205] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1785.327512] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1785.328808] ? alloc_skb_with_frags+0x92/0x570 [ 1785.329971] ? mark_lock+0xf5/0x2df0 [ 1785.330920] __alloc_skb+0xb1/0x5b0 02:25:53 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x9, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1785.331831] alloc_skb_with_frags+0x92/0x570 02:25:53 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x200005f8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1785.333114] ? mark_lock+0xf5/0x2df0 [ 1785.334197] ? mark_lock+0xf5/0x2df0 [ 1785.335150] sock_alloc_send_pskb+0x7af/0x930 [ 1785.336299] ? sk_alloc+0x350/0x350 [ 1785.337214] ? call_rcu+0x3e7/0x9e0 [ 1785.338119] ? perf_trace_lock+0xac/0x490 [ 1785.339165] ? SOFTIRQ_verbose+0x10/0x10 [ 1785.340211] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 1785.341469] ? rawv6_exit+0x20/0x20 02:25:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000940)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff9ce06ade8d8ec1f37a4ec8cd3b638c830d91ba23ef044ea1253fa066b95c13797ccd50829a02381ba1b454ae006243e64d40e06f70ecb3cb3cc5ac4cf0986b9543c077314ce708d4280295994f7da78d87f7452877733f9af61852f8fcb5549d4cfbe2311cf5eb537b86aaf7a34216c56b648a01d2a12898adbbc2a32789ff4e18d2960c8a8bdcfb590cfdd249e6f6f17fdccac2cce02ce71eeda11f4c73fa429414efdc6651ef8e4dd3b0e4b7e7", 0x4b0, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4ce60d7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x82, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0) clock_gettime(0x0, &(0x7f0000000180)) [ 1785.342396] ? SOFTIRQ_verbose+0x10/0x10 [ 1785.343710] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 1785.344997] ? ip6_mtu+0x1e9/0x3d0 [ 1785.345917] ? ip6_setup_cork+0xfb7/0x1740 [ 1785.346981] ip6_append_data+0x1e6/0x330 [ 1785.348008] ? rawv6_exit+0x20/0x20 [ 1785.348917] ? rawv6_exit+0x20/0x20 [ 1785.349828] icmp6_send+0x1250/0x1f30 [ 1785.350820] ? icmpv6_push_pending_frames+0x470/0x470 [ 1785.352095] ? find_held_lock+0x2c/0x110 [ 1785.353166] ? ip6_dst_hoplimit+0x440/0x440 [ 1785.354251] ip6_pkt_drop+0x3d2/0x7f0 [ 1785.355209] ? ip6_pkt_discard+0x20/0x20 [ 1785.356219] ip6_local_out+0x29f/0x4c0 [ 1785.357164] ip6_send_skb+0x117/0x460 [ 1785.358102] udp_v6_send_skb+0x7b7/0x1620 [ 1785.359159] udpv6_sendmsg+0x216b/0x2b40 [ 1785.360203] ? ip_frag_init+0x350/0x350 [ 1785.361220] ? udp_v6_push_pending_frames+0x360/0x360 [ 1785.362489] ? SOFTIRQ_verbose+0x10/0x10 [ 1785.363506] ? __lockdep_reset_lock+0x180/0x180 [ 1785.364654] ? lock_acquire+0x197/0x470 [ 1785.365656] ? find_held_lock+0x2c/0x110 [ 1785.366648] ? lock_chain_count+0x20/0x20 [ 1785.367702] ? sock_has_perm+0x1ea/0x280 [ 1785.368769] ? __import_iovec+0x458/0x590 [ 1785.369819] ? udp_v6_push_pending_frames+0x360/0x360 [ 1785.371137] inet6_sendmsg+0x105/0x140 [ 1785.372090] ? inet6_compat_ioctl+0x320/0x320 [ 1785.373256] __sock_sendmsg+0xf2/0x190 [ 1785.374224] ____sys_sendmsg+0x334/0x870 [ 1785.375234] ? sock_write_iter+0x3d0/0x3d0 [ 1785.376288] ? do_recvmmsg+0x6d0/0x6d0 [ 1785.377235] ? __lock_acquire+0x1657/0x5b00 [ 1785.378319] ___sys_sendmsg+0xf3/0x170 [ 1785.379281] ? sendmsg_copy_msghdr+0x160/0x160 [ 1785.380435] ? __lockdep_reset_lock+0x180/0x180 [ 1785.381645] ? lock_acquire+0x197/0x470 [ 1785.382661] ? find_held_lock+0x2c/0x110 [ 1785.383702] ? __might_fault+0xd3/0x180 [ 1785.384713] ? lock_downgrade+0x6d0/0x6d0 [ 1785.385828] __sys_sendmmsg+0x195/0x470 [ 1785.386860] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1785.387965] ? lock_downgrade+0x6d0/0x6d0 [ 1785.389049] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1785.390290] ? wait_for_completion_io+0x270/0x270 [ 1785.391540] ? rcu_read_lock_any_held+0x75/0xa0 [ 1785.392706] ? vfs_write+0x354/0xb10 [ 1785.393595] ? fput_many+0x2f/0x1a0 [ 1785.394496] ? ksys_write+0x1a9/0x260 [ 1785.395417] ? __ia32_sys_read+0xb0/0xb0 [ 1785.396415] __x64_sys_sendmmsg+0x99/0x100 [ 1785.397467] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1785.398712] do_syscall_64+0x33/0x40 [ 1785.399623] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1785.400916] RIP: 0033:0x7f9688118b19 [ 1785.401853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1785.406399] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1785.408263] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1785.410019] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1785.411735] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1785.413486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1785.415214] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 1785.439265] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1785.458463] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1785.491169] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. 02:25:53 executing program 4: timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:25:53 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x7ffff000, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1785.514432] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. 02:25:53 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:25:53 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0xf, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:25:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000600)="8994608f6102ea066f641411aef3746fecd9ecd7c1286c3a07cddd13fba802f3597a539ac9c713938e30fb7e165f1f8e4dae31b4ba230173195ac196e82eabea310b3a93db185f2570d4ff09a389bba2ce966e652a9cbed53d91cad626d27a900a30fff76b35a2ae4a5eae517d5fb7d102094ae65afe8d5e22615290e6374f2db8ab27e91b3fe0a582c6720a362c5e", 0x8f, 0x0, &(0x7f0000000440)={0x0, 0x3938700}) r3 = pidfd_open(0x0, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) close_range(r4, r1, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000002e00210c000008400000007b76ffffff3800008008000e00", @ANYRES32=r0, @ANYBLOB="04000b00200050002f70726f632f227379737670761245cf6dfa0cf45e1c342f7463", @ANYRES32, @ANYRESDEC=r2], 0x4c}, 0x1, 0x0, 0x0, 0x20048007}, 0x0) open$dir(&(0x7f0000000180)='.\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x80000, 0x45, 0x8}, 0x45) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x0, 0x53f, 0x10000000, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="770000003d17f22702000000a82470d0b0ec3f34a652b2be30bdfdb367f65ba45b10a21724c3b27ee0915466e62b8a47650ff20c05ab3f1c22f48b0a365a8e8087d95d9538c9dfc97da1040000000000001b9aa98ae34fe542e6f372f4f16ecc2c70bf09ef84eef66ab53bce129d1603d548a4ec4755e09ab55ea3b9316980e99ddb40"]) fallocate(r5, 0x3, 0x4077, 0x8000) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x3) 02:25:53 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xfffffdef, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:25:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev\x00') pread64(r0, &(0x7f0000000040)=""/136, 0x88, 0x7fff) 02:25:53 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x2f, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:26:11 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 55) 02:26:11 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:26:11 executing program 5: ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000000c0)={0x1, [0x0]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000000080)='\b', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}], 0x0, &(0x7f0000000040)={[{@noblock_validity}]}) 02:26:11 executing program 4: timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:26:11 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0xf, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:26:11 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x48000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2004c0c0}, 0x4c040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x39}, @val={0x8, 0x3, r4}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x4884) 02:26:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000ead, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x8, 0xcd, 0x1, 0xb0, 0x0, 0xfffffffffffffff8, 0x21108, 0xf, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xe05, 0x0, @perf_config_ext={0x9, 0x8}, 0x892c, 0x0, 0x1, 0x6, 0x6, 0x3, 0x7ff, 0x0, 0xc3a, 0x0, 0x5bf}, 0xffffffffffffffff, 0x9, r1, 0xa) ioctl$KDFONTOP_GET(r0, 0x4b4d, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:26:11 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0xf0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1802.918676] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=10440 comm=syz-executor.7 02:26:11 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cgroups\x00', 0x0, 0x0) inotify_init1(0x800) syz_io_uring_setup(0x3137, &(0x7f00000002c0)={0x0, 0xad04, 0x28, 0x1, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002041, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60ee7c63000800002001000000000000000000000000ef0000000000414e00000000000000000000000000006700000062a7c3166a643d06fcc84ef91fbb7fe8da5c62"], 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1802.942561] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1802.947026] FAULT_INJECTION: forcing a failure. [ 1802.947026] name failslab, interval 1, probability 0, space 0, times 0 [ 1802.950211] CPU: 0 PID: 10436 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1802.952145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1802.954208] Call Trace: [ 1802.954815] dump_stack+0x107/0x167 [ 1802.955657] should_fail.cold+0x5/0xa [ 1802.956573] ? create_object.isra.0+0x3a/0xa20 [ 1802.957631] should_failslab+0x5/0x20 [ 1802.958508] kmem_cache_alloc+0x5b/0x310 02:26:11 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1802.959450] create_object.isra.0+0x3a/0xa20 [ 1802.960583] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1802.961762] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1802.962925] ? alloc_skb_with_frags+0x92/0x570 [ 1802.963982] ? mark_lock+0xf5/0x2df0 [ 1802.964871] __alloc_skb+0xb1/0x5b0 [ 1802.965721] alloc_skb_with_frags+0x92/0x570 [ 1802.966752] ? mark_lock+0xf5/0x2df0 [ 1802.967690] ? mark_lock+0xf5/0x2df0 [ 1802.968581] sock_alloc_send_pskb+0x7af/0x930 [ 1802.969631] ? sk_alloc+0x350/0x350 [ 1802.970493] ? perf_trace_lock+0xac/0x490 [ 1802.971547] ? SOFTIRQ_verbose+0x10/0x10 [ 1802.972514] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 1802.973684] ? rawv6_exit+0x20/0x20 [ 1802.974521] ? SOFTIRQ_verbose+0x10/0x10 [ 1802.975483] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 1802.976609] ? ip6_mtu+0x1e9/0x3d0 [ 1802.977430] ? ip6_setup_cork+0xfb7/0x1740 [ 1802.978406] ip6_append_data+0x1e6/0x330 [ 1802.979346] ? rawv6_exit+0x20/0x20 [ 1802.980194] ? rawv6_exit+0x20/0x20 [ 1802.981054] icmp6_send+0x1250/0x1f30 [ 1802.981941] ? icmpv6_push_pending_frames+0x470/0x470 [ 1802.983147] ? find_held_lock+0x2c/0x110 [ 1802.984135] ? ip6_dst_hoplimit+0x440/0x440 [ 1802.985149] ip6_pkt_drop+0x3d2/0x7f0 [ 1802.986033] ? ip6_pkt_discard+0x20/0x20 [ 1802.986969] ip6_local_out+0x29f/0x4c0 [ 1802.987885] ip6_send_skb+0x117/0x460 [ 1802.988790] udp_v6_send_skb+0x7b7/0x1620 [ 1802.989767] udpv6_sendmsg+0x216b/0x2b40 [ 1802.990706] ? ip_frag_init+0x350/0x350 [ 1802.991654] ? udp_v6_push_pending_frames+0x360/0x360 [ 1802.992859] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1802.994093] ? __lockdep_reset_lock+0x180/0x180 [ 1802.995176] ? lock_acquire+0x197/0x470 [ 1802.996104] ? find_held_lock+0x2c/0x110 [ 1802.997065] ? lock_chain_count+0x20/0x20 [ 1802.998021] ? sock_has_perm+0x1ea/0x280 [ 1802.998994] ? __import_iovec+0x458/0x590 [ 1802.999948] ? udp_v6_push_pending_frames+0x360/0x360 [ 1803.001171] inet6_sendmsg+0x105/0x140 [ 1803.002062] ? inet6_compat_ioctl+0x320/0x320 [ 1803.003095] __sock_sendmsg+0xf2/0x190 [ 1803.003993] ____sys_sendmsg+0x334/0x870 [ 1803.004942] ? sock_write_iter+0x3d0/0x3d0 [ 1803.005951] ? do_recvmmsg+0x6d0/0x6d0 [ 1803.006850] ? __lock_acquire+0x1657/0x5b00 [ 1803.007857] ___sys_sendmsg+0xf3/0x170 [ 1803.008772] ? sendmsg_copy_msghdr+0x160/0x160 [ 1803.009840] ? __lockdep_reset_lock+0x180/0x180 [ 1803.010945] ? lock_acquire+0x197/0x470 [ 1803.011885] ? find_held_lock+0x2c/0x110 [ 1803.012889] ? __might_fault+0xd3/0x180 [ 1803.013805] ? lock_downgrade+0x6d0/0x6d0 [ 1803.014790] __sys_sendmmsg+0x195/0x470 [ 1803.015724] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1803.016731] ? lock_downgrade+0x6d0/0x6d0 [ 1803.017716] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1803.018821] ? wait_for_completion_io+0x270/0x270 [ 1803.019925] ? rcu_read_lock_any_held+0x75/0xa0 [ 1803.021030] ? vfs_write+0x354/0xb10 [ 1803.021877] ? fput_many+0x2f/0x1a0 [ 1803.022714] ? ksys_write+0x1a9/0x260 [ 1803.023597] ? __ia32_sys_read+0xb0/0xb0 [ 1803.024568] __x64_sys_sendmmsg+0x99/0x100 [ 1803.025541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1803.026729] do_syscall_64+0x33/0x40 [ 1803.027582] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1803.028781] RIP: 0033:0x7f9688118b19 [ 1803.029635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1803.033867] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1803.035614] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1803.037278] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1803.038898] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1803.040552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1803.042199] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:26:11 executing program 5: r0 = syz_io_uring_setup(0x68d2, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x331, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x34, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x56, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2007, @fd=r3, 0x10000, 0x0, 0x0, 0x6, 0x1, {0x1}}, 0x0) syz_io_uring_setup(0x1008, &(0x7f0000000740), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r5, 0x0, 0x8001) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd=r8, 0x0, 0x0, 0x4, 0x3, 0x1}, 0x8001) r9 = syz_io_uring_setup(0x8ac, &(0x7f0000000080)={0x0, 0x81d4, 0x0, 0x1, 0x163, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x82ebc, &(0x7f0000002100)={0x0, 0xae0f, 0x20, 0x0, 0x2b9}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000002180), &(0x7f00000021c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r9, {0x1}}, './file0\x00'}) recvmmsg$unix(r4, &(0x7f0000001ec0)=[{{&(0x7f0000000340), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000680)=""/144, 0x90}, {&(0x7f00000007c0)=""/251, 0xfb}, {&(0x7f00000003c0)=""/94, 0x5e}], 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="68060030"], 0x28}}, {{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000a40)=""/238, 0xee}, {&(0x7f0000000b40)=""/70, 0x46}, {&(0x7f00000004c0)=""/34, 0x22}, {&(0x7f0000000bc0)=""/92, 0x5c}], 0x5}}, {{&(0x7f0000000cc0), 0x6e, &(0x7f0000001d40)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1, &(0x7f0000001e00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}}], 0x3, 0x400020a2, &(0x7f0000001f80)) sendmsg$nl_xfrm(r10, &(0x7f0000002080)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002040)={&(0x7f0000002340)=@delpolicy={0x0, 0x14, 0x200, 0x70bd2b, 0x25dfdbfd, {{@in=@remote, @in6=@local, 0x4e20, 0x400, 0x4e23, 0x6, 0xa, 0x80, 0x20, 0x3c, 0x0, 0xee01}, 0x6e6bb9, 0x1}, [@algo_comp={0x0, 0x3, {{'lzs\x00'}, 0x0, "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"}}, @coaddr={0x0, 0xe, @in6=@loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) 02:26:11 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1803.070238] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 02:26:11 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x11, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:26:11 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x162, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:26:11 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:26:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) r1 = getpgrp(0x0) sched_getparam(r1, &(0x7f0000000200)) [ 1803.134934] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1803.210613] audit: type=1326 audit(1755915971.349:237): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10463 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e3052b19 code=0x7ffc0000 [ 1803.219492] audit: type=1326 audit(1755915971.358:238): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10463 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4e3052b19 code=0x7ffc0000 [ 1803.247981] audit: type=1326 audit(1755915971.364:239): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10463 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e3052b19 code=0x7ffc0000 [ 1803.264897] audit: type=1326 audit(1755915971.364:240): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10463 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e3052b19 code=0x7ffc0000 [ 1803.280966] audit: type=1326 audit(1755915971.380:241): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10463 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4e3052b19 code=0x7ffc0000 [ 1803.296265] audit: type=1326 audit(1755915971.380:242): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10463 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e3052b19 code=0x7ffc0000 [ 1803.325202] audit: type=1326 audit(1755915971.380:243): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10463 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e3052b19 code=0x7ffc0000 [ 1803.346080] audit: type=1326 audit(1755915971.383:244): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10463 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fb4e3052b19 code=0x7ffc0000 [ 1803.357116] audit: type=1326 audit(1755915971.384:245): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10463 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e3052b19 code=0x7ffc0000 [ 1803.368058] audit: type=1326 audit(1755915971.384:246): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10463 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e3052b19 code=0x7ffc0000 02:26:28 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:26:28 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) 02:26:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x18, 0x1, 0x0, 0x0, {0xa}, [@typed={0xa, 0x0, 0x0, 0x0, @str='\'..\\]\x00'}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x2c}}, 0x4000000) 02:26:28 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 56) [ 1820.213812] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1820.227434] FAULT_INJECTION: forcing a failure. [ 1820.227434] name failslab, interval 1, probability 0, space 0, times 0 [ 1820.229122] CPU: 1 PID: 10480 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1820.230100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1820.231268] Call Trace: [ 1820.231650] dump_stack+0x107/0x167 [ 1820.232166] should_fail.cold+0x5/0xa [ 1820.232712] ? __alloc_skb+0x6d/0x5b0 [ 1820.233257] should_failslab+0x5/0x20 [ 1820.233803] kmem_cache_alloc_node+0x55/0x330 [ 1820.234440] __alloc_skb+0x6d/0x5b0 [ 1820.234963] alloc_skb_with_frags+0x92/0x570 [ 1820.235590] sock_alloc_send_pskb+0x7af/0x930 [ 1820.236232] ? sk_alloc+0x350/0x350 [ 1820.236771] ? perf_trace_lock+0xac/0x490 [ 1820.237353] ? SOFTIRQ_verbose+0x10/0x10 [ 1820.237927] ? lock_chain_count+0x20/0x20 [ 1820.238519] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 1820.239236] ? ip_frag_init+0x350/0x350 [ 1820.239819] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 1820.240511] ? ip6_mtu+0x1e9/0x3d0 [ 1820.241011] ? ip6_setup_cork+0xfb7/0x1740 [ 1820.241617] ip6_make_skb+0x2df/0x4e0 [ 1820.242151] ? ip_frag_init+0x350/0x350 [ 1820.242716] ? ip_frag_init+0x350/0x350 [ 1820.243280] ? ip6_push_pending_frames+0xf0/0xf0 [ 1820.243955] ? ip6_dst_hoplimit+0x199/0x440 [ 1820.244571] ? lock_downgrade+0x6d0/0x6d0 [ 1820.245169] udpv6_sendmsg+0x2128/0x2b40 [ 1820.245750] ? ip_frag_init+0x350/0x350 [ 1820.246314] ? udp_v6_push_pending_frames+0x360/0x360 [ 1820.247038] ? SOFTIRQ_verbose+0x10/0x10 [ 1820.247613] ? __lockdep_reset_lock+0x180/0x180 [ 1820.248271] ? lock_acquire+0x197/0x470 [ 1820.248834] ? find_held_lock+0x2c/0x110 [ 1820.249407] ? lock_chain_count+0x20/0x20 [ 1820.249991] ? sock_has_perm+0x1ea/0x280 [ 1820.250580] ? __import_iovec+0x458/0x590 [ 1820.251169] ? udp_v6_push_pending_frames+0x360/0x360 [ 1820.251888] inet6_sendmsg+0x105/0x140 [ 1820.252440] ? inet6_compat_ioctl+0x320/0x320 [ 1820.253081] __sock_sendmsg+0xf2/0x190 [ 1820.253625] ____sys_sendmsg+0x334/0x870 [ 1820.254198] ? sock_write_iter+0x3d0/0x3d0 [ 1820.254794] ? do_recvmmsg+0x6d0/0x6d0 [ 1820.255348] ? __lock_acquire+0x1657/0x5b00 02:26:28 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000d40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="40212f0000002f0fbc356d66dfc70cc9f2db0c5ce8749ce4bd6f9bb3f58716ee6a23a27e198ddfcfb91e0e0acc58b2731b6dee53ec0c2cf8d1745bcaa63a34b29b9231b63669595c5d2dfac7eb3fff44248d559aafe92f3f9f959b9d78961cda2cb5fcbbeb5c13df921fde27a590d86c5cd85b55852aed5c6a09b94aafd52f8209076941b35010d3b9778c2927368dd311d6820a3b0c573f8dc3528c20f0bf0de2e8f3b328f0fc79f854acc46bd362"], &(0x7f00000000c0)={0x0, 0x3, 0x34, @string={0x34, 0x3, "96bce5abcb8d72da0426d79e1617685783d456f67a0129bc7c34dba4b35babc58695006cbc5af5c82ebfac9787f4b5a935dd"}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x4, 0x3f, 0x0, "bf02271b", "007f3d9d"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc, 0x60, 0x6, 0x4, 0x2, 0xb8, 0x400}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x6, 0xc2, "88d07b0df0d2ae66b1fbb96540b1603bd01ce91a089fcecaf8ba7a10a5c227dd61958377d547370bc402dc0ebfb1eeade943b0ebf5bf749d043068cdbd5439e61d06b07a4dd166b7c45adf52a0418ead544e1c8d78415e25d0b7d87f9598d54409a854d7f6314585ba161b0b9ea5d57210785b6eb79d4525bb822570021b5827f655e3074c1f3e7c70e3f2b97f50c07b55a0df9543e01b6bba8e13188d9ffb78f8553f223360f8761897437cc54c20885986e7ff832a532b6bbb940e67099f918250"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x2, 0x80, [0xfe10]}}, &(0x7f0000000480)={0x40, 0x7, 0x2}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000500)={0x40, 0xb, 0x2, "d382"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x13, 0x6}, &(0x7f00000005c0)={0x40, 0x17, 0x6}, &(0x7f0000000600)={0x40, 0x19, 0x2, 'e='}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x7b}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x7}}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000e00)={0x20, 0x10, 0xd0, {0xd0, 0x6, "8a65badda5ca9a2fe4a1f81458f8d34a00e042a29643c52ca6707fcda27a3f36fa6135b7edc64fae76d83851489c15fc8eb6ed7c1b6fad31a2a6e246331fc563f19a4b644d4405f378f07c2d1ab6b814cfc3226c4ac0e0eae5127bdc7950b4199262eee21016903fe75bccb22c75fb1f23538bfa13beeaf472b522e9e870f3d69dac903316a207e23e5052bd691fea052c845b0a2168235ddec2125bb77334dbd7cb787bfa21ba49e82f1dd568fa123c30935aff8e1cb9e93df718aaed4bfcf9207ee002b0f0f53e45462c073029"}}, &(0x7f0000000f00)={0x0, 0x3, 0x45, @string={0x45, 0x3, "fcda55926f49b7d1f5e86d9fea15b6ddb3e0305c0ee8f5640962fd3c6c28ea4c8dba5cc1eca5f9496c02675b107e19a10079252c91a485c9da8179cacbf6bd5b2d2a09"}}}, &(0x7f0000001180)={0x44, &(0x7f0000000f80)={0x40, 0x15, 0x5, "1c62525672"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x6a}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001040)={0x20, 0x81, 0x2, 'Lk'}, &(0x7f0000001080)={0x20, 0x82, 0x2, "29ed"}, &(0x7f00000010c0)={0x20, 0x83, 0x1, "f3"}, &(0x7f0000001100)={0x20, 0x84, 0x1, "c1"}, &(0x7f0000001140)={0x20, 0x85, 0x3, "e8a108"}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000cc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000840)={0x14, &(0x7f0000000080)={0x20, 0x2, 0x14, {0x14, 0xe, "f03f5bf3b5abaf1b4578ba74505e995cf4d6"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000980)={0x0, 0x15, 0x50, "57f2223e1758aa12d55dbaf8912ea4a8df444c333b8ca434a955697806548468021863a6125aba6694a46b82738a2568647ab1d8c6bea2e94079bfc8cb90874eea60d6a1bd344140c31581841dc26621"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0xa7}, &(0x7f0000000a80)={0x20, 0x81, 0x3, "104182"}, &(0x7f0000000ac0)={0x20, 0x82, 0x2, "16d2"}, &(0x7f0000000b00)={0x20, 0x83, 0x3, "4e70f1"}, &(0x7f0000000b40)={0x20, 0x84, 0x3, "61b024"}, &(0x7f0000000b80)={0x20, 0x85, 0x3, 'uem'}}) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000880)={[{@sb}]}) 02:26:28 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x300, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:26:28 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:26:28 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x12, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1820.256240] ___sys_sendmsg+0xf3/0x170 [ 1820.256958] ? sendmsg_copy_msghdr+0x160/0x160 [ 1820.257596] ? __lockdep_reset_lock+0x180/0x180 [ 1820.258251] ? lock_acquire+0x197/0x470 [ 1820.258803] ? find_held_lock+0x2c/0x110 [ 1820.259377] ? __might_fault+0xd3/0x180 [ 1820.259931] ? lock_downgrade+0x6d0/0x6d0 [ 1820.260534] __sys_sendmmsg+0x195/0x470 [ 1820.261097] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1820.261703] ? lock_downgrade+0x6d0/0x6d0 [ 1820.262296] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1820.262980] ? wait_for_completion_io+0x270/0x270 [ 1820.263654] ? rcu_read_lock_any_held+0x75/0xa0 [ 1820.264303] ? vfs_write+0x354/0xb10 [ 1820.264839] ? fput_many+0x2f/0x1a0 [ 1820.265351] ? ksys_write+0x1a9/0x260 [ 1820.265891] ? __ia32_sys_read+0xb0/0xb0 [ 1820.266467] __x64_sys_sendmmsg+0x99/0x100 [ 1820.267070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1820.267797] do_syscall_64+0x33/0x40 [ 1820.268314] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1820.269033] RIP: 0033:0x7f9688118b19 [ 1820.269548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1820.272090] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1820.273149] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1820.274129] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1820.275118] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1820.276100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1820.277095] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 1820.291056] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.7'. 02:26:28 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x900, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:26:28 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 02:26:28 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x1000) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f00000006c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x6, 0x0, 0x0, 0xffffffffffffffff) openat$cgroup_ro(r2, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0xfffffffffffffffd, 0x2, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000000)={&(0x7f00000002c0)=""/228, 0xe4, 0x0, 0x66}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r4) 02:26:28 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 57) [ 1820.407338] FAULT_INJECTION: forcing a failure. [ 1820.407338] name failslab, interval 1, probability 0, space 0, times 0 [ 1820.408902] CPU: 1 PID: 10497 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1820.409807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1820.410896] Call Trace: [ 1820.411260] dump_stack+0x107/0x167 [ 1820.411742] should_fail.cold+0x5/0xa [ 1820.412242] ? create_object.isra.0+0x3a/0xa20 [ 1820.412861] should_failslab+0x5/0x20 [ 1820.413361] kmem_cache_alloc+0x5b/0x310 [ 1820.413912] ? __is_insn_slot_addr+0x14c/0x290 [ 1820.414514] create_object.isra.0+0x3a/0xa20 [ 1820.415095] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1820.415757] kmem_cache_alloc_node+0x169/0x330 [ 1820.416367] __alloc_skb+0x6d/0x5b0 [ 1820.416862] alloc_skb_with_frags+0x92/0x570 [ 1820.417447] sock_alloc_send_pskb+0x7af/0x930 [ 1820.418043] ? sk_alloc+0x350/0x350 [ 1820.418525] ? perf_trace_lock+0xac/0x490 [ 1820.419069] ? SOFTIRQ_verbose+0x10/0x10 [ 1820.419608] ? lock_chain_count+0x20/0x20 [ 1820.420161] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 1820.420840] ? ip_frag_init+0x350/0x350 [ 1820.421370] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 1820.421998] ? ip6_mtu+0x1e9/0x3d0 [ 1820.422463] ? ip6_setup_cork+0xfb7/0x1740 [ 1820.423018] ip6_make_skb+0x2df/0x4e0 [ 1820.423516] ? ip_frag_init+0x350/0x350 [ 1820.424040] ? ip_frag_init+0x350/0x350 [ 1820.424567] ? ip6_push_pending_frames+0xf0/0xf0 [ 1820.425192] ? ip6_dst_hoplimit+0x199/0x440 [ 1820.425755] ? lock_downgrade+0x6d0/0x6d0 [ 1820.426310] udpv6_sendmsg+0x2128/0x2b40 [ 1820.426851] ? ip_frag_init+0x350/0x350 [ 1820.427379] ? udp_v6_push_pending_frames+0x360/0x360 [ 1820.428064] ? SOFTIRQ_verbose+0x10/0x10 [ 1820.428609] ? __lockdep_reset_lock+0x180/0x180 [ 1820.429222] ? lock_acquire+0x197/0x470 [ 1820.429735] ? find_held_lock+0x2c/0x110 [ 1820.430275] ? lock_chain_count+0x20/0x20 [ 1820.430810] ? sock_has_perm+0x1ea/0x280 [ 1820.431357] ? __import_iovec+0x458/0x590 [ 1820.431897] ? udp_v6_push_pending_frames+0x360/0x360 [ 1820.432589] inet6_sendmsg+0x105/0x140 [ 1820.433098] ? inet6_compat_ioctl+0x320/0x320 [ 1820.433677] __sock_sendmsg+0xf2/0x190 [ 1820.434202] ____sys_sendmsg+0x334/0x870 [ 1820.434736] ? sock_write_iter+0x3d0/0x3d0 [ 1820.435288] ? do_recvmmsg+0x6d0/0x6d0 [ 1820.435792] ? __lock_acquire+0x1657/0x5b00 [ 1820.436366] ___sys_sendmsg+0xf3/0x170 [ 1820.436875] ? sendmsg_copy_msghdr+0x160/0x160 [ 1820.437472] ? __lockdep_reset_lock+0x180/0x180 [ 1820.438079] ? lock_acquire+0x197/0x470 [ 1820.438594] ? find_held_lock+0x2c/0x110 [ 1820.439117] ? __might_fault+0xd3/0x180 [ 1820.439629] ? lock_downgrade+0x6d0/0x6d0 [ 1820.440185] __sys_sendmmsg+0x195/0x470 [ 1820.440710] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1820.441270] ? lock_downgrade+0x6d0/0x6d0 [ 1820.441842] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1820.442473] ? wait_for_completion_io+0x270/0x270 [ 1820.443096] ? rcu_read_lock_any_held+0x75/0xa0 [ 1820.443698] ? vfs_write+0x354/0xb10 [ 1820.444186] ? fput_many+0x2f/0x1a0 [ 1820.444662] ? ksys_write+0x1a9/0x260 [ 1820.445155] ? __ia32_sys_read+0xb0/0xb0 [ 1820.445696] __x64_sys_sendmmsg+0x99/0x100 [ 1820.446241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1820.446906] do_syscall_64+0x33/0x40 [ 1820.447397] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1820.448071] RIP: 0033:0x7f9688118b19 [ 1820.448564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1820.450955] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1820.451948] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1820.452871] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1820.453785] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1820.454704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1820.455622] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:26:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000005a000100"/19], 0x20}}, 0x0) 02:26:44 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 58) 02:26:44 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:26:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 02:26:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="04", 0x1, 0x0) lseek(r1, 0x0, 0x0) 02:26:44 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:26:44 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0xf00, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:26:44 executing program 5: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x3, 0x1, 0x20, 0x401, 0x2, 0xfff}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006640)=[{{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000540)=""/132, 0x84}, {&(0x7f0000000600)=""/157, 0x9d}, {&(0x7f00000006c0)=""/165, 0xa5}, {&(0x7f0000000780)=""/187, 0xbb}, {&(0x7f0000000840)=""/84, 0x54}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001940)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000001a40)=@abs, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000000080)=""/51, 0x33}, {&(0x7f0000001ac0)=""/68, 0x44}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/163, 0xa3}, {&(0x7f0000002c00)=""/54, 0x36}], 0x5}}, {{&(0x7f0000002cc0)=@abs, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002d40)=""/100, 0x64}, {&(0x7f0000002dc0)=""/78, 0x4e}], 0x2, &(0x7f0000002e80)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002ec0), 0x6e, &(0x7f0000003040)=[{&(0x7f0000002f40)}, {&(0x7f0000002f80)=""/156, 0x9c}], 0x2, &(0x7f0000003080)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f00000031c0), 0x6e, &(0x7f00000033c0)=[{&(0x7f0000003240)=""/29, 0x1d}, {&(0x7f0000003280)=""/137, 0x89}, {&(0x7f0000003340)=""/51, 0x33}, {&(0x7f0000003380)=""/28, 0x1c}], 0x4}}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003400)=""/163, 0xa3}, {&(0x7f00000034c0)=""/105, 0x69}, {&(0x7f0000003540)=""/239, 0xef}], 0x3, &(0x7f0000003680)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x160}}, {{&(0x7f0000003800)=@abs, 0x6e, &(0x7f0000004c00)=[{&(0x7f0000003880)=""/226, 0xe2}, {&(0x7f0000003980)=""/131, 0x83}, {&(0x7f0000003a40)=""/203, 0xcb}, {&(0x7f0000003b40)=""/182, 0xb6}, {&(0x7f0000003c00)=""/4096, 0x1000}], 0x5, &(0x7f0000004c80)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000004d40)=@abs, 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004dc0)=""/71, 0x47}, {&(0x7f0000004e40)=""/8, 0x8}, {&(0x7f0000004e80)=""/118, 0x76}], 0x3, &(0x7f0000004f40)=[@rights={{0x10}}], 0x10}}, {{&(0x7f0000004f80), 0x6e, &(0x7f0000006540)=[{&(0x7f0000005000)=""/145, 0x91}, {&(0x7f00000050c0)=""/169, 0xa9}, {&(0x7f0000005180)=""/144, 0x90}, {&(0x7f0000005240)=""/125, 0x7d}, {&(0x7f00000052c0)=""/104, 0x68}, {&(0x7f0000005340)=""/161, 0xa1}, {&(0x7f0000005400)=""/73, 0x49}, {&(0x7f0000005480)=""/157, 0x9d}, {&(0x7f0000005540)=""/4096, 0x1000}], 0x9, &(0x7f0000006600)=[@cred={{0x1c}}], 0x20}}], 0x9, 0x2, &(0x7f0000006880)={0x77359400}) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x7, 0x94, 0x7, 0x20, 0x0, 0xfffffffffffffffc, 0x400, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7f, 0x10001}, 0x1000, 0x6, 0xffffffff, 0x5, 0x3f, 0x7, 0xc9, 0x0, 0x2, 0x0, 0x40}, r0, 0x3, r2, 0x3) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r4 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r4, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat(r4, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f0000000040)={0xa, 0x4e23, 0x8, @loopback, 0x9}, 0x1c, &(0x7f0000000080), 0x0, &(0x7f00000001c0)=[@tclass={{0x14, 0x29, 0x43, 0x20400}}, @dontfrag={{0x14}}, @dstopts={{0x30, 0x29, 0x37, {0x2c, 0x2, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x4000008}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @rthdr={{0x28, 0x29, 0x39, {0x32, 0x2, 0x1, 0x3, 0x0, [@empty]}}}, @rthdr={{0x78, 0x29, 0x39, {0x5e, 0xc, 0x0, 0x82, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x87}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @empty]}}}], 0x130}, 0x41) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) [ 1836.788212] FAULT_INJECTION: forcing a failure. [ 1836.788212] name failslab, interval 1, probability 0, space 0, times 0 [ 1836.790655] CPU: 1 PID: 10507 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1836.792116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1836.793882] Call Trace: [ 1836.794445] dump_stack+0x107/0x167 [ 1836.795211] should_fail.cold+0x5/0xa [ 1836.796016] should_failslab+0x5/0x20 [ 1836.796842] __kmalloc_node_track_caller+0x74/0x3b0 [ 1836.797883] ? alloc_skb_with_frags+0x92/0x570 [ 1836.798854] __alloc_skb+0xb1/0x5b0 [ 1836.799621] alloc_skb_with_frags+0x92/0x570 [ 1836.800561] sock_alloc_send_pskb+0x7af/0x930 [ 1836.801521] ? sk_alloc+0x350/0x350 [ 1836.802300] ? perf_trace_lock+0xac/0x490 [ 1836.803175] ? SOFTIRQ_verbose+0x10/0x10 [ 1836.804017] ? lock_chain_count+0x20/0x20 [ 1836.804901] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 1836.805953] ? ip_frag_init+0x350/0x350 [ 1836.806798] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 1836.807802] ? ip6_mtu+0x1e9/0x3d0 [ 1836.808541] ? ip6_setup_cork+0xfb7/0x1740 [ 1836.809447] ip6_make_skb+0x2df/0x4e0 [ 1836.810251] ? ip_frag_init+0x350/0x350 [ 1836.811108] ? ip_frag_init+0x350/0x350 [ 1836.811955] ? ip6_push_pending_frames+0xf0/0xf0 [ 1836.812975] ? ip6_dst_hoplimit+0x199/0x440 [ 1836.813891] ? lock_downgrade+0x6d0/0x6d0 [ 1836.814795] udpv6_sendmsg+0x2128/0x2b40 [ 1836.815653] ? ip_frag_init+0x350/0x350 [ 1836.816500] ? udp_v6_push_pending_frames+0x360/0x360 [ 1836.817592] ? SOFTIRQ_verbose+0x10/0x10 [ 1836.818458] ? __lockdep_reset_lock+0x180/0x180 [ 1836.819451] ? lock_acquire+0x197/0x470 [ 1836.820291] ? find_held_lock+0x2c/0x110 [ 1836.821168] ? lock_chain_count+0x20/0x20 [ 1836.822033] ? sock_has_perm+0x1ea/0x280 [ 1836.822904] ? __import_iovec+0x458/0x590 [ 1836.823774] ? udp_v6_push_pending_frames+0x360/0x360 [ 1836.824862] inet6_sendmsg+0x105/0x140 [ 1836.825672] ? inet6_compat_ioctl+0x320/0x320 [ 1836.826621] __sock_sendmsg+0xf2/0x190 [ 1836.827445] ____sys_sendmsg+0x334/0x870 [ 1836.828298] ? sock_write_iter+0x3d0/0x3d0 [ 1836.829202] ? do_recvmmsg+0x6d0/0x6d0 [ 1836.830033] ? find_held_lock+0x2c/0x110 [ 1836.830912] ___sys_sendmsg+0xf3/0x170 [ 1836.831738] ? sendmsg_copy_msghdr+0x160/0x160 [ 1836.832703] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1836.833805] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1836.834748] ? trace_hardirqs_on+0x5b/0x180 [ 1836.835644] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1836.836738] ? finish_task_switch+0x126/0x5d0 [ 1836.837785] ? finish_task_switch+0xef/0x5d0 [ 1836.838723] ? __switch_to+0x572/0xf70 [ 1836.839534] ? __switch_to_asm+0x3a/0x60 [ 1836.840384] ? __switch_to_asm+0x34/0x60 [ 1836.841252] ? __schedule+0x82c/0x1ea0 [ 1836.842072] ? io_schedule_timeout+0x140/0x140 [ 1836.843046] __sys_sendmmsg+0x195/0x470 [ 1836.843899] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1836.844807] ? lock_downgrade+0x6d0/0x6d0 [ 1836.845709] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1836.846722] ? wait_for_completion_io+0x270/0x270 [ 1836.847738] ? rcu_read_lock_any_held+0x75/0xa0 [ 1836.848724] ? vfs_write+0x354/0xb10 [ 1836.849509] ? fput_many+0x2f/0x1a0 [ 1836.850278] ? ksys_write+0x1a9/0x260 [ 1836.851083] ? __ia32_sys_read+0xb0/0xb0 [ 1836.851941] __x64_sys_sendmmsg+0x99/0x100 [ 1836.852836] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1836.853919] do_syscall_64+0x33/0x40 [ 1836.854698] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1836.855769] RIP: 0033:0x7f9688118b19 [ 1836.856574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1836.860427] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1836.862047] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1836.863543] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1836.865037] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1836.866516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1836.867998] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 1836.896447] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:27:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 02:27:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000340), 0x0, 0x810) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="4bbc687c6a25dfd2009ae82c66dfb26279f55caa6f975331d4fa6c00040080f54b09c050c360c6af213ec4fbfa9c4d5ce5", 0x31}, {&(0x7f0000000200)="fbc25be6f21a90f0adf7e9122ee45338aabd3d45aa38d2d0ca775ae1d274dab788675b13b8dff4e8fe7b7d78417d7310e80537bcc816a516777919f2568c3ba452b0341e34a85d02a8a57e034bff6087744bed1c91a46d40715e8d3881bcad30b2674df5e19c1449fd161b8db95592f91fd00adc12738cdb1106348405a63fd98ce699d00981ef45a08788e2cda92b039c29233197ad102ac612edabb4ce12db99514fde962baf31be1b898ef774e97d62dc99ee0b6e5b28c2c2", 0xba}], 0x2}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x20002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000980)={0x3a, 0xb, '\x00', [@pad1, @calipso={0x7, 0x50, {0x1, 0x12, 0x20, 0xffff, [0x0, 0xa6, 0x1d, 0x2, 0xff, 0x20, 0x8000, 0x7, 0xffffffffffffff59]}}, @pad1]}, 0x60) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x1, 0x4) r2 = openat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x600, 0x82, 0x4}, 0x18) sendmsg$inet6(r2, &(0x7f0000000740)={&(0x7f0000000400)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x58af}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000440)="8595f3fab3a3233161f60e9eab7c389c1fe1ccd0d53bbaccb339f6da381795073dd1f4382c86d171d75f2db0d3718c241b68d97d74ac09d676b86ed55ff32209ce78302d80dbfc462729d2f5c00363531f4c72fca528ef18383d878472a0c38981a81a8983b250853de8c9c6c94578718fd8150da8c5d70a8734b7c426b552e94de27ae8a0fef920fc7c998375649f03f823e7315df6583c1edd5213cdfceec06147ab3fba7f36f76b2b22e51e2c2ff403ab70f0fd00e1e43bf21445503be5fe783433aff17847a4419c9f57101f086c6581db70f86df2d6d463a5996afcdb65e35c72aa4181dbfb58ec", 0xea}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="200000000000000029000000360000000000000000000000010000000000000014000000000000002900000034000000ff000000000000001400000000000000290000003e000000000000000000000024000000000000002900000032000000fe8000000000000000000000000000aa", @ANYRES32=0x0, @ANYBLOB="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"], 0x1b8}, 0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000007c0)={0x3, &(0x7f0000000780)=[{0x1000, 0x5, 0x3, 0xff}, {0x9, 0xfc, 0x20, 0xa20}, {0x1000, 0x2c, 0x4, 0xffffffff}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r4 = syz_open_dev$vcsu(&(0x7f0000001d80), 0x100000001, 0xa041) sendmsg$inet6(r2, &(0x7f0000000940)={&(0x7f0000000140)={0xa, 0x4e23, 0x6, @local, 0x4}, 0x1c, &(0x7f0000000800), 0x0, &(0x7f0000000840)=[@dstopts_2292={{0xb0, 0x29, 0x4, {0x3a, 0x12, '\x00', [@generic={0x9, 0x91, "e92fd1618f743a5b0f3b1e78e8ccb5452983236e132c3e344f9b96dbf3597ce597dcf2fd4ea03d90bf6bf9f8752263e356b06eaf0273dafa7e8156246c3fe9e2439a1886076b3e647728544c7da99e2cba294c4c06b51377bc93626e58ad610c419a52329718ec7ddd14313d0a3f6883e5a796a6bcc0f25ecb384d66d146319b6bdaeea52e3d27c52155eb6176e90a6191"}]}}}, @hopopts={{0x48, 0x29, 0x36, {0x5e, 0x5, '\x00', [@generic={0x3, 0x29, "f07ff3dfec9e85b72ca4a270035594bed8354fb1ed0db49bc1aab06c34bfaf3fbd5ea7a12db9552939"}]}}}], 0xf8}, 0x20000000) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000001dc0)) getdents64(r3, &(0x7f00000002c0)=""/173, 0xad) 02:27:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0x0) faccessat2(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x3000) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)) syz_io_uring_setup(0x404c, &(0x7f0000000280)={0x0, 0x9b21, 0x8, 0x2, 0x1d9, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r3 = syz_io_uring_setup(0x13b7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x83}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r8 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r8, 0x10000000) syz_io_uring_submit(r2, r9, &(0x7f0000000340)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0xa, &(0x7f0000000240)={0x0, 0x3938700}, 0x1, 0x0, 0x1, {0x0, r7}}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) fallocate(r8, 0x0, 0x0, 0x1000002) 02:27:03 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x2f00, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:27:03 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 59) 02:27:03 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:27:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x28, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:27:03 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}, {0x2, 0x32}, {0x2}], 0x3) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000001c0)=[0x6]) [ 1855.708320] FAULT_INJECTION: forcing a failure. [ 1855.708320] name failslab, interval 1, probability 0, space 0, times 0 [ 1855.710371] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1855.710922] CPU: 1 PID: 10533 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1855.714245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1855.715998] Call Trace: [ 1855.716562] dump_stack+0x107/0x167 [ 1855.717353] should_fail.cold+0x5/0xa [ 1855.718173] should_failslab+0x5/0x20 [ 1855.718986] __kmalloc_node_track_caller+0x74/0x3b0 [ 1855.720045] ? alloc_skb_with_frags+0x92/0x570 [ 1855.721026] __alloc_skb+0xb1/0x5b0 [ 1855.721807] alloc_skb_with_frags+0x92/0x570 [ 1855.722807] sock_alloc_send_pskb+0x7af/0x930 [ 1855.723766] ? sk_alloc+0x350/0x350 [ 1855.724541] ? perf_trace_lock+0xac/0x490 [ 1855.725471] ? SOFTIRQ_verbose+0x10/0x10 [ 1855.726316] ? lock_chain_count+0x20/0x20 [ 1855.727198] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 1855.728278] ? ip_frag_init+0x350/0x350 [ 1855.729137] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 1855.730156] ? ip6_mtu+0x1e9/0x3d0 [ 1855.730915] ? ip6_setup_cork+0xfb7/0x1740 [ 1855.731828] ip6_make_skb+0x2df/0x4e0 [ 1855.732632] ? ip_frag_init+0x350/0x350 [ 1855.733511] ? ip_frag_init+0x350/0x350 [ 1855.734359] ? ip6_push_pending_frames+0xf0/0xf0 [ 1855.735368] ? ip6_dst_hoplimit+0x199/0x440 [ 1855.736294] ? lock_downgrade+0x6d0/0x6d0 [ 1855.737198] udpv6_sendmsg+0x2128/0x2b40 [ 1855.738062] ? ip_frag_init+0x350/0x350 [ 1855.738929] ? udp_v6_push_pending_frames+0x360/0x360 [ 1855.740025] ? SOFTIRQ_verbose+0x10/0x10 [ 1855.740901] ? __lockdep_reset_lock+0x180/0x180 [ 1855.741900] ? lock_acquire+0x197/0x470 [ 1855.742747] ? find_held_lock+0x2c/0x110 [ 1855.743638] ? lock_chain_count+0x20/0x20 [ 1855.744541] ? sock_has_perm+0x1ea/0x280 [ 1855.745459] ? __import_iovec+0x458/0x590 [ 1855.746362] ? udp_v6_push_pending_frames+0x360/0x360 [ 1855.747486] inet6_sendmsg+0x105/0x140 [ 1855.748330] ? inet6_compat_ioctl+0x320/0x320 [ 1855.749313] __sock_sendmsg+0xf2/0x190 [ 1855.750167] ____sys_sendmsg+0x334/0x870 [ 1855.751061] ? sock_write_iter+0x3d0/0x3d0 [ 1855.751984] ? do_recvmmsg+0x6d0/0x6d0 [ 1855.752841] ? find_held_lock+0x2c/0x110 [ 1855.753743] ___sys_sendmsg+0xf3/0x170 [ 1855.754582] ? sendmsg_copy_msghdr+0x160/0x160 [ 1855.755542] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1855.756644] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1855.757587] ? trace_hardirqs_on+0x5b/0x180 [ 1855.758507] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1855.759463] ? finish_task_switch+0x126/0x5d0 [ 1855.760405] ? finish_task_switch+0xef/0x5d0 [ 1855.761336] ? __switch_to+0x572/0xf70 [ 1855.762163] ? __switch_to_asm+0x3a/0x60 [ 1855.763018] ? __switch_to_asm+0x34/0x60 [ 1855.763881] ? __schedule+0x82c/0x1ea0 [ 1855.764719] ? io_schedule_timeout+0x140/0x140 [ 1855.765727] __sys_sendmmsg+0x195/0x470 [ 1855.766587] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1855.767503] ? lock_downgrade+0x6d0/0x6d0 [ 1855.768408] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1855.769447] ? wait_for_completion_io+0x270/0x270 [ 1855.770482] ? rcu_read_lock_any_held+0x75/0xa0 [ 1855.771467] ? vfs_write+0x354/0xb10 [ 1855.772256] ? fput_many+0x2f/0x1a0 [ 1855.773038] ? ksys_write+0x1a9/0x260 [ 1855.773850] ? __ia32_sys_read+0xb0/0xb0 [ 1855.774726] __x64_sys_sendmmsg+0x99/0x100 [ 1855.775617] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1855.776726] do_syscall_64+0x33/0x40 [ 1855.777523] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1855.778626] RIP: 0033:0x7f9688118b19 [ 1855.779424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1855.783332] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1855.784967] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1855.786469] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1855.787999] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1855.789528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1855.791037] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:27:03 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x6201, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:27:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x3c, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:27:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 02:27:04 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x149, &(0x7f0000000080)={@local, @broadcast, @val={@void, {0x8100, 0x0, 0x1, 0x3f3}}, {@ipv4={0x800, @igmp={{0xd, 0x4, 0x2, 0x1, 0x137, 0x66, 0x0, 0xcc, 0x2, 0x0, @empty, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x86, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9be}, {@local, 0x6}, {@remote, 0x3e6}]}, @noop]}}, {0x22, 0x5, 0x0, @multicast2, "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"}}}}}, 0x0) 02:27:04 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:27:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) [ 1855.912091] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=60 sclass=netlink_xfrm_socket pid=10557 comm=syz-executor.7 02:27:04 executing program 0: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)={0x1288, 0x14, 0x2, 0x70bd28, 0x25dfdbff, {0x1d, 0x36}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "45ced8e27bc356bd02f57c6b41aa8938df5a27f61db93f"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "25af4f6baf979bd5566f5fde034966e016d85c506d295cb319c7329100701a671f79d1cca923ccafe8d911b901"}, @INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "7fa3148a9374e3bb0fe24a800ed390662db5ebebb6abbcf316328013ed169ab88a5e412db5d01247b4f18ceb58f15b90f99ebc7f42cdec8e010d52edce5b1d32311cc6ddd76dd29174ac27a1d68e9e93e7cf8b00604e4cc5768fcf1bc6cce0512e8c2177b3f7326e338d9309ce9b42e81fbcc3977eb7e27d236daaafa90e54c07f12219ccbe1913f228c3c8de94595927ca40534f01c68a1e42e983cec"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "a2b6343502e62e922f8955db8e3ab08b09fa8fc9c69db09c73479b36dbf0b4e22f4a5a75cd6b7c14c5f5399bb81f3a8cc69a89cca5cfa9f7287300e6ccd54b7f1b59b437dff35a67f5669b9d1726f008d75d86f6c9a1b949e3068268fe9e917cfa95c4d0b73e36d933ef11e5e17dd7311f5e7fd6e3ce5181c9f00fe2a0a6a2a18f05fe57ad0f"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "3e81305f2a4b347f8093ecdf196f378f4381d743be33ea8f54dfe1ae233ead5c8075201f54713ab35e3a14607ffd60b9ebcbf49035707861f9013c9fef2c7758baf1276332942f4af48a73b40631fe9c8d075a69e8ea2b0d25c687009721ea1c7ac88f2c7ab21828494d35bed673833b07df88c010e7d2101f5cbcf143b98e69c425acbf84401bcd73f92bcdce5055c04eb1891e5563de76a3b5fdc039a00c44a357cb887fd759a5351f8d3055815bd2f712bd04779009eb714574c346364f073f44c8c2345da61b082880811ebb"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "724180966088528ab050809aadcd7773f7beeb82d2acbb"}]}, 0x1288}, 0x1, 0x0, 0x0, 0x4040081}, 0x4040014) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x46000, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0xfffffffffffffd86, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x0, 0xfff]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000580011cd0000000000000e0000000000f306b42817cb1e03c668d374dfb8e39fef19041a526aa0aa0c9f2264702782f510cd814878"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x108, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x6, 0x1, 0x17, 0x3f, 0x0, 0x6, 0x4120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x1, @perf_bp={&(0x7f00000003c0), 0x3}, 0x10000, 0x80000000000, 0x8000, 0x6, 0x7f, 0x4b74, 0x0, 0x0, 0x7ff, 0x0, 0x1}, 0xffffffffffffffff, 0x6, r4, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000000c0)={0x1ff, 0x6, 0xffff, 0xfffffffa}, 0x10) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x7ffffff7) 02:27:04 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0xf000, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:27:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 02:27:04 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x61, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:27:04 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() wait4(r2, &(0x7f00000003c0), 0x2, &(0x7f0000000000)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r4, r3, 0x0, 0xffffffff000) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) [ 1856.021584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10567 comm=syz-executor.0 [ 1856.112442] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=97 sclass=netlink_xfrm_socket pid=10576 comm=syz-executor.7 [ 1856.119924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10564 comm=syz-executor.0 02:27:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 02:27:20 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10240, 0x2) stat(&(0x7f00000000c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1872.427906] FAULT_INJECTION: forcing a failure. [ 1872.427906] name failslab, interval 1, probability 0, space 0, times 0 [ 1872.429591] CPU: 1 PID: 10597 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1872.430576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1872.431753] Call Trace: [ 1872.432134] dump_stack+0x107/0x167 [ 1872.432657] should_fail.cold+0x5/0xa [ 1872.433212] ? dst_alloc+0x9e/0x5d0 [ 1872.433731] should_failslab+0x5/0x20 [ 1872.434274] kmem_cache_alloc+0x5b/0x310 [ 1872.434860] dst_alloc+0x9e/0x5d0 [ 1872.435362] xfrm_lookup_with_ifid+0xb79/0x1b70 [ 1872.436032] ? xfrm_policy_lookup_bytype.constprop.0+0x1a70/0x1a70 [ 1872.436963] ? ip6_dst_lookup_tail+0x63b/0xfc0 [ 1872.437628] icmpv6_route_lookup+0x2b3/0x470 [ 1872.438282] ? icmpv6_err+0x320/0x320 [ 1872.438834] ? dst_release+0x58/0x180 [ 1872.439373] ? icmpv6_xrlim_allow+0xbc/0x450 [ 1872.439995] ? icmpv6_sk_init+0x2a0/0x2a0 [ 1872.440588] ? projid_m_show+0x220/0x220 [ 1872.441175] ? ip6_pol_route_input+0x70/0x70 [ 1872.441805] icmp6_send+0xfdf/0x1f30 [ 1872.442347] ? icmpv6_push_pending_frames+0x470/0x470 [ 1872.443078] ? find_held_lock+0x2c/0x110 [ 1872.443682] ? ip6_dst_hoplimit+0x440/0x440 [ 1872.444279] ip6_pkt_drop+0x3d2/0x7f0 [ 1872.444825] ? ip6_pkt_discard+0x20/0x20 [ 1872.445403] ip6_local_out+0x29f/0x4c0 02:27:20 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0xffff, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:27:20 executing program 0: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_1\x00'}) statx(r1, &(0x7f0000000180)='./file1\x00', 0x0, 0x10, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x40040) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(r1, 0x0) sendfile(r1, r3, 0x0, 0x100000001) 02:27:20 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:27:20 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x2, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:27:20 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 60) 02:27:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5831c2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1/file0\x00', 0x101c40, 0x157) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"b72b441af394fbd98d55e37606599f48", 0x0, 0x0, {0x20, 0x7}, {0x4, 0xba27}, 0x66, [0x9, 0x7ff, 0x1, 0x1, 0x4, 0x0, 0x9, 0x0, 0x400, 0x0, 0x9, 0x9, 0x9, 0x5, 0x7, 0x40]}) sendmsg$nl_xfrm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x80000001, 0x2, 0x4, 0x365abb48}) [ 1872.446193] ip6_send_skb+0x117/0x460 [ 1872.446857] udp_v6_send_skb+0x7b7/0x1620 [ 1872.447439] udpv6_sendmsg+0x216b/0x2b40 [ 1872.447991] ? ip_frag_init+0x350/0x350 [ 1872.448535] ? udp_v6_push_pending_frames+0x360/0x360 [ 1872.449241] ? SOFTIRQ_verbose+0x10/0x10 [ 1872.449943] ? __lockdep_reset_lock+0x180/0x180 [ 1872.450662] ? lock_acquire+0x197/0x470 [ 1872.451215] ? find_held_lock+0x2c/0x110 [ 1872.451772] ? lock_chain_count+0x20/0x20 [ 1872.452336] ? sock_has_perm+0x1ea/0x280 [ 1872.452919] ? __import_iovec+0x458/0x590 [ 1872.453492] ? udp_v6_push_pending_frames+0x360/0x360 [ 1872.454216] inet6_sendmsg+0x105/0x140 [ 1872.454761] ? inet6_compat_ioctl+0x320/0x320 [ 1872.455375] __sock_sendmsg+0xf2/0x190 [ 1872.455901] ____sys_sendmsg+0x334/0x870 [ 1872.456463] ? sock_write_iter+0x3d0/0x3d0 [ 1872.457040] ? do_recvmmsg+0x6d0/0x6d0 [ 1872.457566] ? __lock_acquire+0x1657/0x5b00 [ 1872.458171] ___sys_sendmsg+0xf3/0x170 [ 1872.458706] ? sendmsg_copy_msghdr+0x160/0x160 [ 1872.459356] ? __lockdep_reset_lock+0x180/0x180 [ 1872.459991] ? lock_acquire+0x197/0x470 [ 1872.460530] ? find_held_lock+0x2c/0x110 [ 1872.461093] ? __might_fault+0xd3/0x180 [ 1872.461639] ? lock_downgrade+0x6d0/0x6d0 [ 1872.462225] __sys_sendmmsg+0x195/0x470 [ 1872.462772] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1872.463355] ? lock_downgrade+0x6d0/0x6d0 [ 1872.463943] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1872.464598] ? wait_for_completion_io+0x270/0x270 [ 1872.465268] ? rcu_read_lock_any_held+0x75/0xa0 [ 1872.465890] ? vfs_write+0x354/0xb10 [ 1872.466399] ? fput_many+0x2f/0x1a0 [ 1872.466899] ? ksys_write+0x1a9/0x260 [ 1872.467420] ? __ia32_sys_read+0xb0/0xb0 [ 1872.467993] __x64_sys_sendmmsg+0x99/0x100 [ 1872.468568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1872.469278] do_syscall_64+0x33/0x40 [ 1872.469779] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1872.470480] RIP: 0033:0x7f9688118b19 [ 1872.470993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1872.473501] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1872.474517] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1872.475481] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1872.476438] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1872.477410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1872.478370] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 1872.495717] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1872.501315] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 02:27:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 02:27:20 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:27:20 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x3, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1872.537703] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1872.560521] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1872.562490] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1872.567965] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 02:27:20 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x7, r0, 0x3) syz_io_uring_setup(0xfffffffc, &(0x7f0000000080)={0x0, 0x7d13, 0x8, 0x3, 0x5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2160}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r2, 0x0, r4}, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev2(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)="028792d00352ce646f48ee7323f453716d88bf914426680dd1162e776670c57049bfe8f4f3e92c6230cb51f65d9edafd4a60e347ea27a60b45b3d21f80823e29610a214b629e4ceb935c46079719c103224d9c399efaee16a2f0fc29c761b4b35638b9387da31956e5dc475cb964b521c5e7af26c0cc83ea3b66f32539aad210562d072a03e3e17ff306db32897d18", 0x8f}], 0x1, 0x0, 0x9, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x2010, r2, 0x0) sendfile(r3, r5, 0x0, 0x20d315) 02:27:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 02:27:20 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000780)='\x00', 0x1) syz_io_uring_setup(0x1c24, &(0x7f0000000040)={0x0, 0xd4de, 0x2, 0x0, 0x16}, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x10000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x3, 0x3, 0x1, {0x0, 0x0, r3}}, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) dup3(r0, r4, 0x0) 02:27:20 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1872.631326] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:27:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1872.662076] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1872.686902] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. 02:27:20 executing program 5: perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0xa, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x3ffc, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') getdents64(r2, 0x0, 0x0) getdents64(r2, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0}, 0x1) r3 = syz_genetlink_get_family_id$ipvs(0x0, r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={0xc8, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2141}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa22}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe9400000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8014}, 0x48000) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) lseek(0xffffffffffffffff, 0x2, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)=ANY=[@ANYBLOB="2fdb37649ce6de56f1a66de348a417040bba8009c5cd53b50f97298b035b3be1c5d095708560c432cbd0a799a9c94aa07ca0242933c3799d374b17d979131fb67add1380b3ff0deb06bf947f3d81039dbe009d98baeb6000e9d9f26f83f4d50ecc110500000000000000a73a83e4e16e8f7d3472208b8e76a96eea28f6fed55c671e9900b0153cf63c1945d1ffe3", @ANYRESDEC]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 1872.715189] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. 02:27:35 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) fstat(r0, &(0x7f0000000200)) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x100000001) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000001c0)={{r0}, 0xffff, 0x7, 0x2}) 02:27:35 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x2, 0xa}}}, 0xb8}}, 0x0) 02:27:35 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:27:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:27:35 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x4, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:27:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @dev}, 0x0, r3}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x29, 0x1, 0x9, 0x4, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x40, 0xff, 0x7f}}) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3, &(0x7f0000000700)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) io_setup(0x3, &(0x7f0000000000)=0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000000}, &(0x7f0000000180)) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r4, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r4, 0x0, &(0x7f00000001c0)) [ 1887.272252] FAULT_INJECTION: forcing a failure. 02:27:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESDEC]) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f00000002c0)=0x2c8, 0xffffffffffffffff, &(0x7f0000000300)=0x1, 0x4, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000c00)={0x124c, 0x28, 0x200, 0x70bd25, 0x25dfdbfb, {0x1f}, [@nested={0x1236, 0x62, 0x0, 0x1, [@generic="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", @generic="6c77596405f7eb1dafd34b0546187e3729fec6e7f7a5cc8840ce6abaa0a92adaddb9e884029459658d2f6b308a5cd7f6ee4fdfa3486384674d0bc3cee6bb24087d08b1365abcb2ab7f4247b3c1070eb89da40b03993d8392707b1316fb5e66861b2db694c9fe9b8ef42ac96a3b2a4bd47ac6f05ac73d3ff841f3d7862e661485feeaa351bc05b24964a55601f525a071496e472944b74848705e89f1290b3316348c1b90cca014", @typed={0x8, 0x32, 0x0, 0x0, @ipv4=@broadcast}, @generic="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", @generic="8ca5add4e885ccb75408ab7eb20e84cde0ad3fb15145d2241bdf5609614f1fff59139bd79e010a2780d6d5f8c2e22b04335a78122b2779c59980445c317d77e66ad8df173979adbbd53f103594f374a09af0c6d4901f2904a477d8eacb064b8c6495d986d2f8472c1fef1c7bcbd71047db6918c9e849ceb22ffa495606bb3ec79845d753a91b69b144"]}]}, 0x124c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = openat$hpet(0xffffffffffffff9c, 0x0, 0x1a30c2, 0x0) creat(&(0x7f0000000000)='./file2\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000000c0)={0x6200, 0x1f, 0x1}) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000180)) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x3}, 0x494, 0x81, 0x200, 0x0, 0x0, 0x4, 0x5c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xd5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) 02:27:35 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 61) [ 1887.272252] name failslab, interval 1, probability 0, space 0, times 0 [ 1887.273987] CPU: 1 PID: 10650 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1887.274897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1887.275950] Call Trace: [ 1887.276289] dump_stack+0x107/0x167 [ 1887.276748] should_fail.cold+0x5/0xa [ 1887.277255] ? create_object.isra.0+0x3a/0xa20 [ 1887.277850] should_failslab+0x5/0x20 [ 1887.278345] kmem_cache_alloc+0x5b/0x310 [ 1887.278874] ? xfrm_policy_get_afinfo+0x21/0x2b0 [ 1887.279487] create_object.isra.0+0x3a/0xa20 [ 1887.280055] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1887.280715] kmem_cache_alloc+0x159/0x310 [ 1887.281267] dst_alloc+0x9e/0x5d0 [ 1887.281706] xfrm_lookup_with_ifid+0xb79/0x1b70 [ 1887.282312] ? xfrm_policy_lookup_bytype.constprop.0+0x1a70/0x1a70 [ 1887.283123] ? ip6_dst_lookup_tail+0x63b/0xfc0 [ 1887.283722] icmpv6_route_lookup+0x2b3/0x470 [ 1887.284290] ? icmpv6_err+0x320/0x320 [ 1887.284789] ? dst_release+0x58/0x180 [ 1887.285290] ? icmpv6_xrlim_allow+0xbc/0x450 [ 1887.285857] ? icmpv6_sk_init+0x2a0/0x2a0 [ 1887.286392] ? projid_m_show+0x220/0x220 [ 1887.286920] ? ip6_pol_route_input+0x70/0x70 [ 1887.287495] icmp6_send+0xfdf/0x1f30 [ 1887.287986] ? icmpv6_push_pending_frames+0x470/0x470 [ 1887.288652] ? find_held_lock+0x2c/0x110 [ 1887.289216] ? ip6_dst_hoplimit+0x440/0x440 [ 1887.289775] ip6_pkt_drop+0x3d2/0x7f0 [ 1887.290265] ? ip6_pkt_discard+0x20/0x20 [ 1887.290788] ip6_local_out+0x29f/0x4c0 [ 1887.291293] ip6_send_skb+0x117/0x460 [ 1887.291786] udp_v6_send_skb+0x7b7/0x1620 [ 1887.292334] udpv6_sendmsg+0x216b/0x2b40 [ 1887.292859] ? ip_frag_init+0x350/0x350 [ 1887.293373] ? udp_v6_push_pending_frames+0x360/0x360 [ 1887.294033] ? SOFTIRQ_verbose+0x10/0x10 [ 1887.294565] ? __lockdep_reset_lock+0x180/0x180 [ 1887.295179] ? lock_acquire+0x197/0x470 [ 1887.295690] ? find_held_lock+0x2c/0x110 [ 1887.296220] ? lock_chain_count+0x20/0x20 [ 1887.296751] ? sock_has_perm+0x1ea/0x280 [ 1887.297301] ? __import_iovec+0x458/0x590 [ 1887.297834] ? udp_v6_push_pending_frames+0x360/0x360 [ 1887.298498] inet6_sendmsg+0x105/0x140 [ 1887.298980] ? inet6_compat_ioctl+0x320/0x320 [ 1887.299555] __sock_sendmsg+0xf2/0x190 [ 1887.300058] ____sys_sendmsg+0x334/0x870 [ 1887.300584] ? sock_write_iter+0x3d0/0x3d0 [ 1887.301133] ? do_recvmmsg+0x6d0/0x6d0 [ 1887.301637] ? find_held_lock+0x2c/0x110 [ 1887.302168] ___sys_sendmsg+0xf3/0x170 [ 1887.302671] ? sendmsg_copy_msghdr+0x160/0x160 [ 1887.303261] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1887.303936] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1887.304510] ? trace_hardirqs_on+0x5b/0x180 [ 1887.305077] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1887.305654] ? finish_task_switch+0x126/0x5d0 [ 1887.306231] ? finish_task_switch+0xef/0x5d0 [ 1887.306795] ? __switch_to+0x572/0xf70 [ 1887.307297] ? __switch_to_asm+0x3a/0x60 [ 1887.307811] ? __switch_to_asm+0x34/0x60 [ 1887.308332] ? __schedule+0x82c/0x1ea0 [ 1887.308831] ? io_schedule_timeout+0x140/0x140 [ 1887.309412] __sys_sendmmsg+0x195/0x470 [ 1887.309923] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1887.310472] ? lock_downgrade+0x6d0/0x6d0 [ 1887.311013] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1887.311625] ? wait_for_completion_io+0x270/0x270 [ 1887.312248] ? rcu_read_lock_any_held+0x75/0xa0 [ 1887.312835] ? vfs_write+0x354/0xb10 [ 1887.313307] ? fput_many+0x2f/0x1a0 [ 1887.313774] ? ksys_write+0x1a9/0x260 [ 1887.314261] ? __ia32_sys_read+0xb0/0xb0 [ 1887.314782] __x64_sys_sendmmsg+0x99/0x100 [ 1887.315304] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1887.315959] do_syscall_64+0x33/0x40 [ 1887.316416] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1887.317076] RIP: 0033:0x7f9688118b19 [ 1887.317553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1887.319897] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1887.320892] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1887.321945] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1887.322954] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1887.323861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1887.324746] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:27:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:27:35 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x8, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:27:35 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x3, 0xa}}}, 0xb8}}, 0x0) [ 1887.410916] __nla_validate_parse: 1 callbacks suppressed [ 1887.410929] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1888.146114] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 02:27:53 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:27:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xb8}}, 0x0) 02:27:53 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000140)=""/102) semctl$SEM_INFO(r0, 0x5, 0x13, &(0x7f0000000080)=""/101) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f0000000000)=""/35) unshare(0x48020200) 02:27:53 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x9, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:27:53 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 62) 02:27:53 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x8, 0xa}}}, 0xb8}}, 0x0) 02:27:53 executing program 0: futex(&(0x7f0000000000)=0x2, 0xc, 0x2, &(0x7f0000000040), &(0x7f0000000080), 0x7fffffff) futex(&(0x7f00000000c0)=0x1, 0xb, 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x1) futex(&(0x7f0000000180)=0x2, 0x5, 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)=0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) futex(&(0x7f0000000280)=0x1, 0x0, 0x2, &(0x7f0000000300)={r0, r1+60000000}, &(0x7f0000000340)=0x1, 0x1) futex(&(0x7f0000000380), 0xd, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0x2) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000440)) semtimedop(0xffffffffffffffff, &(0x7f0000000480)=[{0x3, 0x7f}, {0x0, 0x2}, {0x0, 0x0, 0x800}], 0x3, &(0x7f00000004c0)={0x0, 0x3938700}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd, 0x3, 0x0, 0x3f, 0x3, 0x1}, 0xb5f8) futex(&(0x7f0000000540)=0x1, 0xb, 0x2, &(0x7f0000000580), &(0x7f00000005c0), 0x1) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) futex(&(0x7f0000000600)=0x2, 0x6, 0x2, &(0x7f0000000680)={r2, r3+10000000}, &(0x7f00000006c0)=0x2, 0x0) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000700)="eeda35c229f5a6f4c6444c4128daaa169e2c4175fc490d027074b7fecc93ef796f2cbe8d58741db96071b14e10b1110e34817e77bafb0f60837e2dfffa06fe16189f18a80ccf0f770e7587548f5f513a800e0fc1319dfc16ca400f7d24c520c251174a4679e2278bdd0d9053c7de95acb776d0e60a9aaf773986d0b33e29e6099419426cf657b732123529789098cbef733995c081fb7e8c439349ca075ef2e220f66da4e22773aa14b6c26c28ed2a01a9cbc291c614e348e208bfabda7937a5ca1c8c9560853adf52d69ec7a943e9e3118ec723b274ccf1a8fb", 0xda, 0x4, &(0x7f0000000840)={r4, r5+10000000}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x4, 0x7fffffff, &(0x7f0000000880)="ea3b804070cd4ad43904c570d13c332a886f2d04fd6c51ab419c2b980d8c0331fbe1d9470382bf9214f23ab8ca514970bf74655fb24ab62040ea88a9543977f523ed63c1e79df8624e9aa56805299e658ac119f55225b87cddfc1790b0e3c00a29257797000d88e337d28a61fffbbf2b2c089bd26fa7772bcc4f285805caf4d09c8878247b6b39b7be0df0eb7a93487ab61151e9f64d535a74599a3d9651d5b1d9d2c3a02f5caad5d77fb1c1eb58c9da33ae6d", 0xb3, 0x8, 0x1}, 0xffffffff) clock_gettime(0x7, &(0x7f0000000980)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000009c0)=@isdn={0x22, 0x80, 0x3, 0x2, 0x5}}, 0xb94) sched_rr_get_interval(0x0, &(0x7f0000000a80)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000ac0)={0x2000}) 02:27:53 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0xbb, 0x80, 0xc2, 0x4, 0x1c}, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="64e7d326c1e3", @rand_addr, @multicast, @remote}}}}, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = fork() ptrace(0x10, r0) tkill(r0, 0x17) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ftruncate(r1, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e24, 0x65899913, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1c) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x8, 0xc0) fsetxattr$security_ima(r2, &(0x7f00000000c0), &(0x7f0000000680)=ANY=[@ANYBLOB="02e6b6d6ce4b43b8cb4f0bf0f5cb3f1ba75b8e8a82afbc77c35bc241bad603741da16ca9a1599795570fbb661525f5873f0396d8acd8a962ba801400"/73], 0x14, 0x1) ptrace$peeksig(0x4209, r0, &(0x7f00000000c0)={0x7f, 0x0, 0x5}, &(0x7f0000000100)=[{}, {}, {}, {}, {}]) [ 1905.215707] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1905.221670] FAULT_INJECTION: forcing a failure. [ 1905.221670] name failslab, interval 1, probability 0, space 0, times 0 [ 1905.223554] CPU: 1 PID: 10691 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1905.224653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1905.225983] Call Trace: [ 1905.226403] dump_stack+0x107/0x167 [ 1905.226985] should_fail.cold+0x5/0xa [ 1905.227590] ? dst_alloc+0x9e/0x5d0 [ 1905.228173] should_failslab+0x5/0x20 [ 1905.228772] kmem_cache_alloc+0x5b/0x310 [ 1905.229429] dst_alloc+0x9e/0x5d0 [ 1905.229989] xfrm_lookup_with_ifid+0xb79/0x1b70 [ 1905.230729] ? xfrm_policy_lookup_bytype.constprop.0+0x1a70/0x1a70 [ 1905.231707] ? ip6_route_output_flags+0xf0/0x370 [ 1905.232448] ? ip6_dst_lookup_tail+0x63b/0xfc0 [ 1905.233184] icmpv6_route_lookup+0x385/0x470 [ 1905.233874] ? icmpv6_err+0x320/0x320 [ 1905.234473] ? dst_release+0x58/0x180 [ 1905.235091] icmp6_send+0xfdf/0x1f30 [ 1905.235691] ? icmpv6_push_pending_frames+0x470/0x470 [ 1905.236499] ? find_held_lock+0x2c/0x110 [ 1905.237179] ? ip6_dst_hoplimit+0x440/0x440 [ 1905.237859] ip6_pkt_drop+0x3d2/0x7f0 [ 1905.238440] ? ip6_pkt_discard+0x20/0x20 [ 1905.239062] ip6_local_out+0x29f/0x4c0 [ 1905.239659] ip6_send_skb+0x117/0x460 [ 1905.240242] udp_v6_send_skb+0x7b7/0x1620 [ 1905.240880] udpv6_sendmsg+0x216b/0x2b40 [ 1905.241517] ? ip_frag_init+0x350/0x350 [ 1905.242135] ? udp_v6_push_pending_frames+0x360/0x360 [ 1905.242922] ? SOFTIRQ_verbose+0x10/0x10 [ 1905.243566] ? __lockdep_reset_lock+0x180/0x180 [ 1905.244270] ? lock_acquire+0x197/0x470 [ 1905.244879] ? find_held_lock+0x2c/0x110 [ 1905.245510] ? lock_chain_count+0x20/0x20 [ 1905.246137] ? sock_has_perm+0x1ea/0x280 [ 1905.246778] ? __import_iovec+0x458/0x590 [ 1905.247405] ? udp_v6_push_pending_frames+0x360/0x360 [ 1905.248179] inet6_sendmsg+0x105/0x140 [ 1905.248764] ? inet6_compat_ioctl+0x320/0x320 [ 1905.249466] __sock_sendmsg+0xf2/0x190 [ 1905.250057] ____sys_sendmsg+0x334/0x870 [ 1905.250669] ? sock_write_iter+0x3d0/0x3d0 [ 1905.251309] ? do_recvmmsg+0x6d0/0x6d0 [ 1905.251908] ? __lock_acquire+0x1657/0x5b00 [ 1905.252567] ___sys_sendmsg+0xf3/0x170 [ 1905.253165] ? sendmsg_copy_msghdr+0x160/0x160 [ 1905.253866] ? __lockdep_reset_lock+0x180/0x180 [ 1905.254562] ? lock_acquire+0x197/0x470 [ 1905.255160] ? find_held_lock+0x2c/0x110 [ 1905.255771] ? __might_fault+0xd3/0x180 [ 1905.256362] ? lock_downgrade+0x6d0/0x6d0 [ 1905.256995] __sys_sendmmsg+0x195/0x470 [ 1905.257621] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1905.258274] ? lock_downgrade+0x6d0/0x6d0 [ 1905.258914] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1905.259639] ? wait_for_completion_io+0x270/0x270 [ 1905.260365] ? rcu_read_lock_any_held+0x75/0xa0 [ 1905.261074] ? vfs_write+0x354/0xb10 [ 1905.261647] ? fput_many+0x2f/0x1a0 [ 1905.262184] ? ksys_write+0x1a9/0x260 [ 1905.262751] ? __ia32_sys_read+0xb0/0xb0 [ 1905.263360] __x64_sys_sendmmsg+0x99/0x100 [ 1905.263994] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1905.264766] do_syscall_64+0x33/0x40 [ 1905.265349] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1905.266123] RIP: 0033:0x7f9688118b19 [ 1905.266674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1905.269428] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1905.270591] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1905.271667] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1905.272746] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1905.273831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1905.274926] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:27:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xb8}}, 0x0) 02:27:53 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, 0xa}}}, 0xb8}}, 0x0) 02:27:53 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0xa, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:27:53 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:27:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xb8}}, 0x0) 02:27:53 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0xe, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:27:53 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x1, @tid=r1}, &(0x7f0000000340)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x4b68, 0x0) fcntl$dupfd(r3, 0x406, r0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r4, &(0x7f0000000080)=""/65, 0x41) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000400)={{r5, r6+60000000}, {0x0, 0x989680}}, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="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"]) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:27:53 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xf, 0xa}}}, 0xb8}}, 0x0) [ 1921.126841] FAULT_INJECTION: forcing a failure. [ 1921.126841] name failslab, interval 1, probability 0, space 0, times 0 [ 1921.129659] CPU: 1 PID: 10735 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1921.131347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1921.133398] Call Trace: [ 1921.134047] dump_stack+0x107/0x167 [ 1921.134940] should_fail.cold+0x5/0xa [ 1921.135875] ? dst_alloc+0x9e/0x5d0 [ 1921.136763] should_failslab+0x5/0x20 [ 1921.137720] kmem_cache_alloc+0x5b/0x310 [ 1921.138727] dst_alloc+0x9e/0x5d0 [ 1921.139581] xfrm_lookup_with_ifid+0xb79/0x1b70 [ 1921.140729] ? xfrm_policy_lookup_bytype.constprop.0+0x1a70/0x1a70 [ 1921.142283] ? ip6_route_output_flags+0xf0/0x370 [ 1921.143442] ? ip6_dst_lookup_tail+0x63b/0xfc0 [ 1921.144572] icmpv6_route_lookup+0x385/0x470 [ 1921.145671] ? icmpv6_err+0x320/0x320 [ 1921.146607] ? dst_release+0x58/0x180 [ 1921.147574] icmp6_send+0xfdf/0x1f30 [ 1921.148506] ? icmpv6_push_pending_frames+0x470/0x470 [ 1921.149799] ? find_held_lock+0x2c/0x110 [ 1921.150846] ? ip6_dst_hoplimit+0x440/0x440 [ 1921.151905] ip6_pkt_drop+0x3d2/0x7f0 [ 1921.152827] ? ip6_pkt_discard+0x20/0x20 [ 1921.153838] ip6_local_out+0x29f/0x4c0 [ 1921.154789] ip6_send_skb+0x117/0x460 [ 1921.155713] udp_v6_send_skb+0x7b7/0x1620 [ 1921.156737] udpv6_sendmsg+0x216b/0x2b40 [ 1921.157754] ? ip_frag_init+0x350/0x350 [ 1921.158735] ? udp_v6_push_pending_frames+0x360/0x360 [ 1921.160178] ? SOFTIRQ_verbose+0x10/0x10 02:28:09 executing program 0: r0 = semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d91e31b7892f71f3ac842db783e431d605372ea606c253e7c4ff3d013e13614b38210b49077cca3b953d867fd849b8fe2ff2f49a2849f897aa0aa580d9181e218f7c241c047d0a0ef6ba946c262de8447d2ec926ffc3aaadd9660fff9cea9b11f2ff3704df391d2bdb33465bfa785d15ef405e901c59cb0dfc75ae84a5ce85db5f2f363979cb753db1587", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=loose,noextend,nodevmap,dont_appraise,dont_measure,subj_type=,dont_measure,fscontext=system_u,fsmagic=0x000000000000008c,uid=', @ANYRESDEC=r2, @ANYBLOB=',audit,rootcoNtexu,\x00\x00\x00\x00\x00\x00\x00\x00']) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r2, 0x0, 0x39, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) semctl$IPC_RMID(0x0, 0x0, 0x0) r3 = semget(0x2, 0x0, 0x20b) r4 = getuid() stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000002c0)={{0x1, r4, r1, r5, 0x0, 0x39, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000080)=[{0x0, 0x4, 0x1000}], 0x1, &(0x7f0000000100)={r6, r7+10000000}) semctl$SEM_INFO(0x0, 0x935a4533181df21f, 0x13, &(0x7f0000001e00)=""/4096) syz_io_uring_setup(0x5bcb, &(0x7f0000000340)={0x0, 0xae6, 0x2, 0x1, 0x1ad}, &(0x7f0000ff8000/0x6000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000000)=""/35) unshare(0x48020200) 02:28:09 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:28:09 executing program 2: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x69) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x43) dup3(r3, r2, 0x0) r4 = fork() tkill(r4, 0x26) waitid(0x0, r4, 0x0, 0x4, &(0x7f0000000500)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x20, 0x3f, 0x5, 0x0, 0x1ff, 0x109400, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x42004, 0x8, 0x7000, 0x5, 0x7, 0xd0, 0x46c0, 0x0, 0x0, 0x0, 0x9}, r4, 0x7, r3, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 02:28:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x19, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:28:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) (fail_nth: 1) 02:28:09 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 63) 02:28:09 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x2f, 0xa}}}, 0xb8}}, 0x0) 02:28:09 executing program 5: syz_mount_image$nfs(0x0, &(0x7f00000004c0)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f0000000b80)) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x58, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000100}, 0x4004000) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x12}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044803}, 0x1) 02:28:09 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1921.161177] ? __lockdep_reset_lock+0x180/0x180 [ 1921.162504] ? lock_acquire+0x197/0x470 [ 1921.163469] ? find_held_lock+0x2c/0x110 [ 1921.164472] ? sock_has_perm+0x1ea/0x280 [ 1921.165517] ? __import_iovec+0x458/0x590 [ 1921.166523] ? udp_v6_push_pending_frames+0x360/0x360 [ 1921.167768] inet6_sendmsg+0x105/0x140 [ 1921.168706] ? inet6_compat_ioctl+0x320/0x320 [ 1921.169814] __sock_sendmsg+0xf2/0x190 [ 1921.170751] ____sys_sendmsg+0x334/0x870 [ 1921.171740] ? sock_write_iter+0x3d0/0x3d0 [ 1921.172751] ? do_recvmmsg+0x6d0/0x6d0 [ 1921.173714] ? __lock_acquire+0x1657/0x5b00 [ 1921.174766] ___sys_sendmsg+0xf3/0x170 [ 1921.175700] ? sendmsg_copy_msghdr+0x160/0x160 [ 1921.176799] ? __lockdep_reset_lock+0x180/0x180 [ 1921.177936] ? __fget_files+0x2cf/0x520 [ 1921.178897] ? lock_acquire+0x197/0x470 [ 1921.179850] ? find_held_lock+0x2c/0x110 [ 1921.180832] ? __might_fault+0xd3/0x180 [ 1921.181835] ? lock_downgrade+0x6d0/0x6d0 [ 1921.182859] __sys_sendmmsg+0x195/0x470 02:28:09 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1921.183821] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1921.185097] ? lock_downgrade+0x6d0/0x6d0 [ 1921.186150] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1921.187311] ? wait_for_completion_io+0x270/0x270 [ 1921.188470] ? rcu_read_lock_any_held+0x75/0xa0 [ 1921.189608] ? vfs_write+0x354/0xb10 [ 1921.190510] ? fput_many+0x2f/0x1a0 [ 1921.191382] ? ksys_write+0x1a9/0x260 [ 1921.192289] ? __ia32_sys_read+0xb0/0xb0 [ 1921.193292] __x64_sys_sendmmsg+0x99/0x100 [ 1921.194306] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1921.195532] do_syscall_64+0x33/0x40 [ 1921.196419] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1921.197664] RIP: 0033:0x7f9688118b19 [ 1921.198548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1921.202928] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1921.204740] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1921.206459] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1921.208150] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1921.209884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1921.211626] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 1921.251921] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1921.262454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10752 comm=syz-executor.5 [ 1921.283048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10753 comm=syz-executor.5 02:28:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:28:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x25, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:28:09 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xf0, 0xa}}}, 0xb8}}, 0x0) [ 1921.380510] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:28:09 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:28:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:28:09 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x162, 0xa}}}, 0xb8}}, 0x0) [ 1921.481603] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1921.484092] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1921.485877] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1921.487565] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 1921.489539] print_req_error: 8 callbacks suppressed [ 1921.489560] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 0 [ 1921.493406] Buffer I/O error on dev sr0, logical block 0, async page read [ 1921.495199] Buffer I/O error on dev sr0, logical block 1, async page read [ 1921.496915] Buffer I/O error on dev sr0, logical block 2, async page read [ 1921.498477] Buffer I/O error on dev sr0, logical block 3, async page read [ 1921.499984] Buffer I/O error on dev sr0, logical block 4, async page read [ 1921.501515] Buffer I/O error on dev sr0, logical block 5, async page read [ 1921.503021] Buffer I/O error on dev sr0, logical block 6, async page read [ 1921.504522] Buffer I/O error on dev sr0, logical block 7, async page read [ 1921.590782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1921.591472] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1921.592681] Buffer I/O error on dev sr0, logical block 0, async page read [ 1921.594113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1921.594814] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1921.596012] Buffer I/O error on dev sr0, logical block 1, async page read [ 1921.597084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1921.598262] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1921.599684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1921.600416] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1921.602033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1921.602690] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1921.604261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1921.604945] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1921.606253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1921.606924] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1921.608196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1921.608866] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 02:28:25 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:28:25 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x300, 0xa}}}, 0xb8}}, 0x0) 02:28:25 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000300)=0x6003) preadv(r1, &(0x7f0000001740)=[{&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000480)=""/246, 0xf6}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/202, 0xca}], 0x6, 0x8001, 0xfffffff8) r3 = memfd_create(&(0x7f0000000140)='(%(!+-#&\\\x00', 0x3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r2, 0x5395, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000000)={[0x1]}, 0x8) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ppoll(&(0x7f00000017c0)=[{r3, 0x300}, {0xffffffffffffffff, 0x4080}, {0xffffffffffffffff, 0x113a}, {0xffffffffffffffff, 0x108}, {0xffffffffffffffff, 0x106}], 0x5, &(0x7f0000001800)={0x0, 0x3938700}, &(0x7f0000001840)={[0x8]}, 0x8) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r0, 0x0) finit_module(r0, 0x0, 0x0) 02:28:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x2, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:28:25 executing program 2: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x69) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x43) dup3(r3, r2, 0x0) r4 = fork() tkill(r4, 0x26) waitid(0x0, r4, 0x0, 0x4, &(0x7f0000000500)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x20, 0x3f, 0x5, 0x0, 0x1ff, 0x109400, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x42004, 0x8, 0x7000, 0x5, 0x7, 0xd0, 0x46c0, 0x0, 0x0, 0x0, 0x9}, r4, 0x7, r3, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 02:28:25 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 64) 02:28:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) r1 = syz_open_procfs(0x0, 0x0) r2 = getpgid(0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x8, 0x4, @tid=r3}, &(0x7f0000000000)) r4 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x200, 0x82) r5 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002580)) sendmsg$nl_generic(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="34120000ffff00042cbd7000fedbdf250100000008002500", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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"], 0x1234}, 0x1, 0x0, 0x0, 0x80}, 0x0) 02:28:25 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x3c, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1936.912573] FAULT_INJECTION: forcing a failure. [ 1936.912573] name failslab, interval 1, probability 0, space 0, times 0 [ 1936.914473] CPU: 0 PID: 10790 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1936.915580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1936.916880] Call Trace: [ 1936.917304] dump_stack+0x107/0x167 [ 1936.917906] should_fail.cold+0x5/0xa [ 1936.918521] ? __alloc_skb+0x6d/0x5b0 [ 1936.919100] should_failslab+0x5/0x20 [ 1936.919686] kmem_cache_alloc_node+0x55/0x330 [ 1936.920370] ? mark_lock+0xf5/0x2df0 [ 1936.920958] __alloc_skb+0x6d/0x5b0 [ 1936.921555] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1936.922380] alloc_skb_with_frags+0x92/0x570 [ 1936.923038] ? mark_lock+0xf5/0x2df0 [ 1936.923602] ? mark_lock+0xf5/0x2df0 [ 1936.924169] sock_alloc_send_pskb+0x7af/0x930 [ 1936.924860] ? sk_alloc+0x350/0x350 [ 1936.925433] ? perf_trace_lock+0xac/0x490 [ 1936.926059] ? SOFTIRQ_verbose+0x10/0x10 [ 1936.926689] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 1936.927451] ? rawv6_exit+0x20/0x20 [ 1936.928023] ? SOFTIRQ_verbose+0x10/0x10 [ 1936.928655] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 1936.929400] ? ip6_mtu+0x1e9/0x3d0 [ 1936.929946] ? ip6_setup_cork+0xfb7/0x1740 [ 1936.930608] ip6_append_data+0x1e6/0x330 [ 1936.931220] ? rawv6_exit+0x20/0x20 [ 1936.931775] ? rawv6_exit+0x20/0x20 [ 1936.932340] icmp6_send+0x1250/0x1f30 [ 1936.932929] ? icmpv6_push_pending_frames+0x470/0x470 [ 1936.933715] ? find_held_lock+0x2c/0x110 [ 1936.934432] ? ip6_dst_hoplimit+0x440/0x440 [ 1936.935095] ip6_pkt_drop+0x3d2/0x7f0 [ 1936.935672] ? ip6_pkt_discard+0x20/0x20 [ 1936.936282] ip6_local_out+0x29f/0x4c0 [ 1936.936882] ip6_send_skb+0x117/0x460 [ 1936.937487] udp_v6_send_skb+0x7b7/0x1620 [ 1936.938137] udpv6_sendmsg+0x216b/0x2b40 [ 1936.938760] ? ip_frag_init+0x350/0x350 [ 1936.939376] ? udp_v6_push_pending_frames+0x360/0x360 [ 1936.940163] ? SOFTIRQ_verbose+0x10/0x10 [ 1936.940792] ? __lockdep_reset_lock+0x180/0x180 [ 1936.941522] ? lock_acquire+0x197/0x470 [ 1936.942121] ? find_held_lock+0x2c/0x110 [ 1936.942744] ? lock_chain_count+0x20/0x20 [ 1936.943359] ? sock_has_perm+0x1ea/0x280 [ 1936.944027] ? __import_iovec+0x458/0x590 [ 1936.944655] ? udp_v6_push_pending_frames+0x360/0x360 [ 1936.945449] inet6_sendmsg+0x105/0x140 [ 1936.946042] ? inet6_compat_ioctl+0x320/0x320 [ 1936.946715] __sock_sendmsg+0xf2/0x190 [ 1936.947310] ____sys_sendmsg+0x334/0x870 [ 1936.947922] ? sock_write_iter+0x3d0/0x3d0 [ 1936.948554] ? do_recvmmsg+0x6d0/0x6d0 [ 1936.949135] ? __lock_acquire+0x1657/0x5b00 [ 1936.949810] ___sys_sendmsg+0xf3/0x170 [ 1936.950402] ? sendmsg_copy_msghdr+0x160/0x160 [ 1936.951165] ? __lockdep_reset_lock+0x180/0x180 [ 1936.951887] ? lock_acquire+0x197/0x470 [ 1936.952485] ? find_held_lock+0x2c/0x110 [ 1936.953109] ? __might_fault+0xd3/0x180 [ 1936.953718] ? lock_downgrade+0x6d0/0x6d0 [ 1936.954355] __sys_sendmmsg+0x195/0x470 [ 1936.954965] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1936.955638] ? lock_downgrade+0x6d0/0x6d0 [ 1936.956271] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1936.956986] ? wait_for_completion_io+0x270/0x270 [ 1936.957777] ? rcu_read_lock_any_held+0x75/0xa0 [ 1936.958475] ? vfs_write+0x354/0xb10 [ 1936.959037] ? fput_many+0x2f/0x1a0 [ 1936.959582] ? ksys_write+0x1a9/0x260 [ 1936.960160] ? __ia32_sys_read+0xb0/0xb0 [ 1936.960775] __x64_sys_sendmmsg+0x99/0x100 [ 1936.961431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1936.962211] do_syscall_64+0x33/0x40 [ 1936.962770] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1936.963535] RIP: 0033:0x7f9688118b19 [ 1936.964089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1936.966810] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1936.967928] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1936.968982] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1936.970046] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1936.971098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1936.972151] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 1936.973702] kauditd_printk_skb: 8 callbacks suppressed [ 1936.973717] audit: type=1400 audit(1755916105.104:255): avc: denied { module_load } for pid=10783 comm="syz-executor.5" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=40964 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:hugetlbfs_t:s0 tclass=system permissive=1 02:28:25 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x61, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:28:25 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x900, 0xa}}}, 0xb8}}, 0x0) 02:28:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x3, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:28:25 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1937.043841] Module has invalid ELF structures 02:28:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x8, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1937.078394] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:28:25 executing program 5: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x69) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x43) dup3(r3, r2, 0x0) r4 = fork() tkill(r4, 0x26) waitid(0x0, r4, 0x0, 0x4, &(0x7f0000000500)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x20, 0x3f, 0x5, 0x0, 0x1ff, 0x109400, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x42004, 0x8, 0x7000, 0x5, 0x7, 0xd0, 0x46c0, 0x0, 0x0, 0x0, 0x9}, r4, 0x7, r3, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1937.143565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1937.144933] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1937.147306] buffer_io_error: 6 callbacks suppressed [ 1937.147319] Buffer I/O error on dev sr0, logical block 0, async page read [ 1937.151413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1937.152799] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1937.155146] Buffer I/O error on dev sr0, logical block 1, async page read 02:28:25 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:28:25 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xf00, 0xa}}}, 0xb8}}, 0x0) [ 1937.167035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1937.168367] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1937.169718] Buffer I/O error on dev sr0, logical block 2, async page read [ 1937.170979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1937.171726] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1937.173139] Buffer I/O error on dev sr0, logical block 3, async page read [ 1937.174328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1937.175067] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1937.176381] Buffer I/O error on dev sr0, logical block 4, async page read [ 1937.177856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1937.178577] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1937.179910] Buffer I/O error on dev sr0, logical block 5, async page read [ 1937.182940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1937.183690] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1937.185017] Buffer I/O error on dev sr0, logical block 6, async page read [ 1937.186470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1937.187732] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1937.189065] Buffer I/O error on dev sr0, logical block 7, async page read 02:28:25 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x63, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1937.268316] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:28:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x9, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:28:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r0, 0x46ada000) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x7, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 02:28:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xf, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:28:25 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:28:47 executing program 5: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x69) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x43) dup3(r3, r2, 0x0) r4 = fork() tkill(r4, 0x26) waitid(0x0, r4, 0x0, 0x4, &(0x7f0000000500)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x20, 0x3f, 0x5, 0x0, 0x1ff, 0x109400, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x42004, 0x8, 0x7000, 0x5, 0x7, 0xd0, 0x46c0, 0x0, 0x0, 0x0, 0x9}, r4, 0x7, r3, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 02:28:47 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 65) 02:28:47 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x300, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:28:47 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x2f00, 0xa}}}, 0xb8}}, 0x0) 02:28:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x2f, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:28:47 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:28:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655f040000000000000053ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000000c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000500)="ed4100000080b200dff4655fe0f4655fe0f4655f0000080dbf278d6ca27c10fde92075e1168ca56d3661", 0x2a, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pipefs\x00', 0x4010, &(0x7f0000000100)='\x00') 02:28:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYRES16]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) close(r3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c005ba5ecc4e7fb814dfd800000000000000000d3a758744148bb2f48e6070000000200002c34d2760050ed25d2ecac8f3f78c18dadcf9c7607b934742ddfd8458c3ee105a16e2002d678c3a0455239b33288cedfdfce61c947499df8bbd65e02f533207b14c3dd714c8b0da248722f4b115e1669c1de65daacaf732c6196345babc3b08be9e3605a3c989cf3c3446c2a416f6c09f0232a30d91bd352de483e537fa0e7bf001cf4cd458c26281f5bc812d7fe75bfacece134"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) dup(r2) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000000c0)={0x6200, 0x1f, 0x1}) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000180)) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 1959.145868] FAULT_INJECTION: forcing a failure. [ 1959.145868] name failslab, interval 1, probability 0, space 0, times 0 [ 1959.148489] CPU: 0 PID: 10850 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1959.150085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1959.151983] Call Trace: [ 1959.152604] dump_stack+0x107/0x167 [ 1959.153451] should_fail.cold+0x5/0xa [ 1959.154347] ? create_object.isra.0+0x3a/0xa20 [ 1959.155389] should_failslab+0x5/0x20 [ 1959.156264] kmem_cache_alloc+0x5b/0x310 [ 1959.157207] create_object.isra.0+0x3a/0xa20 [ 1959.158217] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1959.159605] kmem_cache_alloc_node+0x169/0x330 [ 1959.160652] ? mark_lock+0xf5/0x2df0 [ 1959.161676] __alloc_skb+0x6d/0x5b0 [ 1959.162519] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1959.163963] alloc_skb_with_frags+0x92/0x570 [ 1959.165146] ? mark_lock+0xf5/0x2df0 [ 1959.166163] ? mark_lock+0xf5/0x2df0 [ 1959.167162] sock_alloc_send_pskb+0x7af/0x930 [ 1959.168378] ? sk_alloc+0x350/0x350 [ 1959.169373] ? perf_trace_lock+0xac/0x490 [ 1959.170491] ? SOFTIRQ_verbose+0x10/0x10 [ 1959.171587] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 1959.173029] ? rawv6_exit+0x20/0x20 [ 1959.174129] ? SOFTIRQ_verbose+0x10/0x10 [ 1959.175375] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 1959.176821] ? ip6_mtu+0x1e9/0x3d0 [ 1959.177909] ? ip6_setup_cork+0xfb7/0x1740 [ 1959.179193] ip6_append_data+0x1e6/0x330 [ 1959.180423] ? rawv6_exit+0x20/0x20 [ 1959.181531] ? rawv6_exit+0x20/0x20 [ 1959.182637] icmp6_send+0x1250/0x1f30 [ 1959.183813] ? icmpv6_push_pending_frames+0x470/0x470 [ 1959.185350] ? find_held_lock+0x2c/0x110 [ 1959.186638] ? ip6_dst_hoplimit+0x440/0x440 [ 1959.187950] ip6_pkt_drop+0x3d2/0x7f0 [ 1959.189091] ? ip6_pkt_discard+0x20/0x20 [ 1959.190328] ip6_local_out+0x29f/0x4c0 [ 1959.191499] ip6_send_skb+0x117/0x460 [ 1959.192652] udp_v6_send_skb+0x7b7/0x1620 [ 1959.193937] udpv6_sendmsg+0x216b/0x2b40 [ 1959.195161] ? ip_frag_init+0x350/0x350 [ 1959.196373] ? udp_v6_push_pending_frames+0x360/0x360 [ 1959.197938] ? SOFTIRQ_verbose+0x10/0x10 [ 1959.199177] ? __lockdep_reset_lock+0x180/0x180 [ 1959.200583] ? lock_acquire+0x197/0x470 [ 1959.201787] ? find_held_lock+0x2c/0x110 [ 1959.203216] ? lock_chain_count+0x20/0x20 [ 1959.204455] ? sock_has_perm+0x1ea/0x280 [ 1959.205724] ? __import_iovec+0x458/0x590 [ 1959.206978] ? udp_v6_push_pending_frames+0x360/0x360 [ 1959.208522] inet6_sendmsg+0x105/0x140 [ 1959.209701] ? inet6_compat_ioctl+0x320/0x320 [ 1959.211051] __sock_sendmsg+0xf2/0x190 [ 1959.212220] ____sys_sendmsg+0x334/0x870 [ 1959.213449] ? sock_write_iter+0x3d0/0x3d0 [ 1959.214736] ? do_recvmmsg+0x6d0/0x6d0 [ 1959.215912] ? __lock_acquire+0x1657/0x5b00 [ 1959.217225] ___sys_sendmsg+0xf3/0x170 [ 1959.218409] ? sendmsg_copy_msghdr+0x160/0x160 [ 1959.219783] ? __lockdep_reset_lock+0x180/0x180 [ 1959.221181] ? lock_acquire+0x197/0x470 [ 1959.222394] ? find_held_lock+0x2c/0x110 [ 1959.223643] ? __might_fault+0xd3/0x180 [ 1959.224754] ? lock_downgrade+0x6d0/0x6d0 [ 1959.226051] __sys_sendmmsg+0x195/0x470 [ 1959.227097] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1959.228391] ? lock_downgrade+0x6d0/0x6d0 [ 1959.229507] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1959.230957] ? wait_for_completion_io+0x270/0x270 [ 1959.232402] ? rcu_read_lock_any_held+0x75/0xa0 [ 1959.233809] ? vfs_write+0x354/0xb10 [ 1959.234930] ? fput_many+0x2f/0x1a0 [ 1959.236028] ? ksys_write+0x1a9/0x260 [ 1959.237167] ? __ia32_sys_read+0xb0/0xb0 [ 1959.238419] __x64_sys_sendmmsg+0x99/0x100 [ 1959.239681] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1959.241228] do_syscall_64+0x33/0x40 [ 1959.242354] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1959.243893] RIP: 0033:0x7f9688118b19 [ 1959.245011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1959.250524] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1959.252799] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1959.254950] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1959.257074] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1959.259223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1959.261351] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:28:47 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:28:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x7e, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:28:47 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6201, 0xa}}}, 0xb8}}, 0x0) [ 1959.328264] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:28:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x442, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0xa}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001980)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x53000, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x400cc0, 0xa6) r5 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r5, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x300020, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@audit}]}}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) unshare(0x48020200) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0/../file0\x00'}) dup3(r4, r7, 0x2b1feda898f8ea04) 02:28:47 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:28:47 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@loopback, @mcast2, @empty, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x1100000}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) fcntl$getown(r0, 0x9) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035aee7d07675"]}) sendmsg$nl_generic(r2, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d400000014000268e872002a36e58c2516000000309195bcedd4a355ffd0b57d36c80aa3cd5c00a209ab410588e2acf39f612a058aca019d424c1cfefa9bd84118e7b9a3dc7b648488e3b314280151f16e53c3b34d356001432e0e37dbfac2e264d49dde22ffb05d71782e4588a22964e120c9b3e8ac10a180903c642a26553943488705f8f9389f0dc82f10989f62b3874701ee49da692b47f3a2374ddcf5407ac1d8d6ece93e8156a83bca75748906b35121f4bfbcd532464798ecfcbf0151eccc1703000000e09aefabad56510f51901f721fb776488673f91400"/230], 0xd4}, 0x1, 0x0, 0x0, 0x8010}, 0x0) utime(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000480)={0x10001, 0x80000001}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r4 = signalfd4(r3, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) dup(0xffffffffffffffff) gettid() unshare(0x48020200) 02:28:47 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/221, 0xdd}], 0x1) 02:28:47 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xf000, 0xa}}}, 0xb8}}, 0x0) 02:28:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xf0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1959.516107] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev sda, type ext4) errno=-22 [ 1959.747727] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev sda, type ext4) errno=-22 02:29:02 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x4, 0x10e05, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x4, 0xfffe0000000}, 0x4221, 0x9, 0x1, 0x3, 0x5, 0x8, 0x3, 0x0, 0x1c7b367a, 0x0, 0x80000000}, 0x0, 0xd, r0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r3, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat(r3, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) io_setup(0x81, &(0x7f0000000040)) 02:29:02 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x2, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:29:02 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0x85) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f00000000c0)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {r0, r1/1000+60000}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) clock_gettime(0x2, &(0x7f0000000000)) r3 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r3, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat(r3, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@loopback, @in=@initdev}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) r5 = syz_open_dev$vcsn(&(0x7f0000000180), 0x8, 0x20a342) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r5, &(0x7f00000001c0)={0x2}, r2, 0x1, 0x0, 0x1}, 0xc0c8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) signalfd4(r2, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x43) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000080)) r6 = fork() ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 02:29:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x2d8, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:29:02 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xffff, 0xa}}}, 0xb8}}, 0x0) 02:29:02 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:29:02 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 66) 02:29:02 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0) syz_emit_ethernet(0x1022, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x1, 0x4, [0xa02, 0x810, 0xb05, 0x83e]}) sendfile(r0, r1, &(0x7f0000000680)=0x7ff, 0x9) r2 = fork() ptrace$setopts(0x4206, r2, 0x10001, 0x3d) r3 = fork() wait4(r2, &(0x7f0000000100), 0x20000000, &(0x7f0000000040)) ptrace$setopts(0x4206, r3, 0x10001, 0x0) ptrace(0x10, r3) getpriority(0x0, r2) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) fork() [ 1974.549544] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:29:02 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:29:02 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x3, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1974.595302] FAULT_INJECTION: forcing a failure. [ 1974.595302] name failslab, interval 1, probability 0, space 0, times 0 [ 1974.597643] CPU: 1 PID: 10898 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1974.599009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1974.600642] Call Trace: [ 1974.601313] dump_stack+0x107/0x167 [ 1974.602224] should_fail.cold+0x5/0xa [ 1974.603165] should_failslab+0x5/0x20 [ 1974.604121] __kmalloc_node_track_caller+0x74/0x3b0 [ 1974.605370] ? alloc_skb_with_frags+0x92/0x570 [ 1974.606513] ? mark_lock+0xf5/0x2df0 [ 1974.607432] __alloc_skb+0xb1/0x5b0 [ 1974.608332] alloc_skb_with_frags+0x92/0x570 [ 1974.609407] ? mark_lock+0xf5/0x2df0 [ 1974.610371] ? mark_lock+0xf5/0x2df0 [ 1974.611296] sock_alloc_send_pskb+0x7af/0x930 [ 1974.612434] ? sk_alloc+0x350/0x350 [ 1974.613350] ? perf_trace_lock+0xac/0x490 [ 1974.614395] ? SOFTIRQ_verbose+0x10/0x10 [ 1974.615425] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 1974.616685] ? rawv6_exit+0x20/0x20 [ 1974.617587] ? SOFTIRQ_verbose+0x10/0x10 [ 1974.618634] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 1974.619831] ? ip6_mtu+0x1e9/0x3d0 [ 1974.620725] ? ip6_setup_cork+0xfb7/0x1740 [ 1974.621799] ip6_append_data+0x1e6/0x330 [ 1974.622807] ? rawv6_exit+0x20/0x20 [ 1974.623735] ? rawv6_exit+0x20/0x20 [ 1974.624659] icmp6_send+0x1250/0x1f30 [ 1974.625648] ? icmpv6_push_pending_frames+0x470/0x470 [ 1974.626941] ? find_held_lock+0x2c/0x110 [ 1974.628011] ? ip6_dst_hoplimit+0x440/0x440 [ 1974.629118] ip6_pkt_drop+0x3d2/0x7f0 [ 1974.630073] ? ip6_pkt_discard+0x20/0x20 [ 1974.631090] ip6_local_out+0x29f/0x4c0 [ 1974.632079] ip6_send_skb+0x117/0x460 [ 1974.633047] udp_v6_send_skb+0x7b7/0x1620 [ 1974.634122] udpv6_sendmsg+0x216b/0x2b40 [ 1974.635147] ? ip_frag_init+0x350/0x350 [ 1974.635367] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1974.636159] ? udp_v6_push_pending_frames+0x360/0x360 [ 1974.638529] ? SOFTIRQ_verbose+0x10/0x10 [ 1974.639579] ? __lockdep_reset_lock+0x180/0x180 [ 1974.640766] ? lock_acquire+0x197/0x470 [ 1974.641780] ? find_held_lock+0x2c/0x110 [ 1974.642827] ? lock_chain_count+0x20/0x20 [ 1974.643871] ? sock_has_perm+0x1ea/0x280 [ 1974.644929] ? __import_iovec+0x458/0x590 [ 1974.645995] ? udp_v6_push_pending_frames+0x360/0x360 [ 1974.647314] inet6_sendmsg+0x105/0x140 [ 1974.648300] ? inet6_compat_ioctl+0x320/0x320 [ 1974.649430] __sock_sendmsg+0xf2/0x190 [ 1974.650431] ____sys_sendmsg+0x334/0x870 [ 1974.651460] ? sock_write_iter+0x3d0/0x3d0 [ 1974.652530] ? do_recvmmsg+0x6d0/0x6d0 [ 1974.653530] ? __lock_acquire+0x1657/0x5b00 [ 1974.654656] ___sys_sendmsg+0xf3/0x170 [ 1974.655649] ? sendmsg_copy_msghdr+0x160/0x160 [ 1974.656812] ? __lockdep_reset_lock+0x180/0x180 [ 1974.658016] ? lock_acquire+0x197/0x470 [ 1974.659038] ? find_held_lock+0x2c/0x110 02:29:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x300, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1974.660098] ? __might_fault+0xd3/0x180 [ 1974.661148] ? lock_downgrade+0x6d0/0x6d0 [ 1974.662046] __sys_sendmmsg+0x195/0x470 [ 1974.662876] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1974.663770] ? lock_downgrade+0x6d0/0x6d0 [ 1974.664640] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1974.665635] ? wait_for_completion_io+0x270/0x270 [ 1974.666627] ? rcu_read_lock_any_held+0x75/0xa0 [ 1974.667574] ? vfs_write+0x354/0xb10 [ 1974.668349] ? fput_many+0x2f/0x1a0 [ 1974.669103] ? ksys_write+0x1a9/0x260 [ 1974.669912] ? __ia32_sys_read+0xb0/0xb0 [ 1974.670754] __x64_sys_sendmmsg+0x99/0x100 [ 1974.671619] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1974.672668] do_syscall_64+0x33/0x40 [ 1974.673434] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1974.674494] RIP: 0033:0x7f9688118b19 02:29:02 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x4, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1974.675260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1974.679196] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1974.680826] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1974.682367] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1974.683889] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1974.685414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1974.686953] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:29:02 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 02:29:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x900, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:29:02 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1974.763581] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:29:02 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xe}}}, 0xb8}}, 0x0) 02:29:03 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:29:03 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:29:03 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4c1d, @rand_addr=0x64010104}, {0x2, 0x4e20, @rand_addr=0x64010101}, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)='team0\x00', 0x9, 0x3, 0x7ff}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000000c0)) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000001c0)={@multicast1, @local, @dev}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="030000000000000002004e1ce0000001"], 0x5000) 02:29:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x5, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:29:03 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 67) 02:29:03 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2}}}, 0xb8}}, 0x0) 02:29:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xf00, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1975.031451] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1975.070316] FAULT_INJECTION: forcing a failure. [ 1975.070316] name failslab, interval 1, probability 0, space 0, times 0 [ 1975.071630] CPU: 0 PID: 10940 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1975.072432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1975.073393] Call Trace: [ 1975.073717] dump_stack+0x107/0x167 [ 1975.074140] should_fail.cold+0x5/0xa [ 1975.074592] ? create_object.isra.0+0x3a/0xa20 [ 1975.075122] should_failslab+0x5/0x20 [ 1975.075569] kmem_cache_alloc+0x5b/0x310 [ 1975.076046] create_object.isra.0+0x3a/0xa20 [ 1975.076559] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1975.077149] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1975.077740] ? alloc_skb_with_frags+0x92/0x570 [ 1975.078265] ? mark_lock+0xf5/0x2df0 [ 1975.078698] __alloc_skb+0xb1/0x5b0 [ 1975.079123] alloc_skb_with_frags+0x92/0x570 [ 1975.079630] ? mark_lock+0xf5/0x2df0 [ 1975.080060] ? mark_lock+0xf5/0x2df0 [ 1975.080492] sock_alloc_send_pskb+0x7af/0x930 [ 1975.081018] ? sk_alloc+0x350/0x350 [ 1975.081442] ? perf_trace_lock+0xac/0x490 [ 1975.081924] ? SOFTIRQ_verbose+0x10/0x10 [ 1975.082430] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 1975.083025] ? rawv6_exit+0x20/0x20 [ 1975.083443] ? SOFTIRQ_verbose+0x10/0x10 [ 1975.083918] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 1975.084474] ? ip6_mtu+0x1e9/0x3d0 [ 1975.084884] ? ip6_setup_cork+0xfb7/0x1740 [ 1975.085374] ip6_append_data+0x1e6/0x330 [ 1975.085844] ? rawv6_exit+0x20/0x20 [ 1975.086265] ? rawv6_exit+0x20/0x20 [ 1975.086689] icmp6_send+0x1250/0x1f30 [ 1975.087145] ? icmpv6_push_pending_frames+0x470/0x470 [ 1975.087742] ? find_held_lock+0x2c/0x110 [ 1975.088242] ? ip6_dst_hoplimit+0x440/0x440 [ 1975.088750] ip6_pkt_drop+0x3d2/0x7f0 [ 1975.089194] ? ip6_pkt_discard+0x20/0x20 [ 1975.089670] ip6_local_out+0x29f/0x4c0 [ 1975.090123] ip6_send_skb+0x117/0x460 [ 1975.090567] udp_v6_send_skb+0x7b7/0x1620 [ 1975.091056] udpv6_sendmsg+0x216b/0x2b40 [ 1975.091531] ? ip_frag_init+0x350/0x350 [ 1975.092003] ? udp_v6_push_pending_frames+0x360/0x360 [ 1975.092594] ? SOFTIRQ_verbose+0x10/0x10 [ 1975.093073] ? __lockdep_reset_lock+0x180/0x180 [ 1975.093622] ? lock_acquire+0x197/0x470 [ 1975.094083] ? find_held_lock+0x2c/0x110 [ 1975.094559] ? lock_chain_count+0x20/0x20 [ 1975.095042] ? sock_has_perm+0x1ea/0x280 [ 1975.095529] ? __import_iovec+0x458/0x590 [ 1975.096010] ? udp_v6_push_pending_frames+0x360/0x360 [ 1975.096612] inet6_sendmsg+0x105/0x140 [ 1975.097066] ? inet6_compat_ioctl+0x320/0x320 [ 1975.097591] __sock_sendmsg+0xf2/0x190 [ 1975.098049] ____sys_sendmsg+0x334/0x870 [ 1975.098521] ? sock_write_iter+0x3d0/0x3d0 [ 1975.099015] ? do_recvmmsg+0x6d0/0x6d0 [ 1975.099466] ? find_held_lock+0x2c/0x110 [ 1975.099945] ___sys_sendmsg+0xf3/0x170 [ 1975.100402] ? sendmsg_copy_msghdr+0x160/0x160 [ 1975.100930] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1975.101535] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1975.102063] ? trace_hardirqs_on+0x5b/0x180 [ 1975.102561] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1975.103081] ? finish_task_switch+0x126/0x5d0 [ 1975.103631] ? finish_task_switch+0xef/0x5d0 [ 1975.104173] ? __switch_to+0x572/0xf70 [ 1975.104658] ? __switch_to_asm+0x3a/0x60 [ 1975.105129] ? __switch_to_asm+0x34/0x60 [ 1975.105599] ? __schedule+0x82c/0x1ea0 [ 1975.106059] ? io_schedule_timeout+0x140/0x140 [ 1975.106602] __sys_sendmmsg+0x195/0x470 [ 1975.107071] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1975.107571] ? lock_downgrade+0x6d0/0x6d0 [ 1975.108062] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1975.108619] ? wait_for_completion_io+0x270/0x270 [ 1975.109179] ? rcu_read_lock_any_held+0x75/0xa0 [ 1975.109724] ? vfs_write+0x354/0xb10 [ 1975.110155] ? fput_many+0x2f/0x1a0 [ 1975.110577] ? ksys_write+0x1a9/0x260 [ 1975.111020] ? __ia32_sys_read+0xb0/0xb0 [ 1975.111495] __x64_sys_sendmmsg+0x99/0x100 [ 1975.111989] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1975.112584] do_syscall_64+0x33/0x40 [ 1975.113014] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1975.113607] RIP: 0033:0x7f9688118b19 [ 1975.114045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1975.116164] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1975.117043] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1975.117877] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1975.118698] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1975.119522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1975.120345] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 1975.387127] cgroup: fork rejected by pids controller in /syz0 02:29:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x6, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:29:18 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') writev(r7, &(0x7f0000000380)=[{0x0}], 0x1) [ 1990.408570] FAULT_INJECTION: forcing a failure. [ 1990.408570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1990.411068] CPU: 1 PID: 11053 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1990.412525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1990.414282] Call Trace: [ 1990.414836] dump_stack+0x107/0x167 [ 1990.415620] should_fail.cold+0x5/0xa [ 1990.416438] _copy_from_user+0x2e/0x1b0 [ 1990.417286] __copy_msghdr_from_user+0x91/0x4b0 [ 1990.418288] ? __ia32_sys_shutdown+0x80/0x80 [ 1990.419232] ? udp_v6_push_pending_frames+0x360/0x360 [ 1990.420323] ? inet6_sendmsg+0xbd/0x140 [ 1990.421162] ? inet6_compat_ioctl+0x320/0x320 [ 1990.422113] ? __sock_sendmsg+0x55/0x190 [ 1990.422994] sendmsg_copy_msghdr+0xa1/0x160 [ 1990.423919] ? do_recvmmsg+0x6d0/0x6d0 [ 1990.424739] ? __lock_acquire+0x1657/0x5b00 sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003400)=[{{&(0x7f0000000240)={0x2, 0x4e1f, @private=0xa010100}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000000580)="2241637592f65aa7c6567ae28c2a81755ffff247769e1c484fa08942b88c1438d548f59af967bc0557833adbd51e1bfff0284b6592009c8c38dcc7faf3fc07039485e18a49b8c338e5fb83b932ae09dcbe1ecf709676227329de06b0d973437a1b1cd62042e35f20c9f4dab1be831e45b12214c1af130b827050507763881fd817c4b2a134dbcc7e8ea16032aac861556b632b1beb202b15c85c59a98aa1c7640c0b8397bb82211c356ff9c8feb6439b75ef7e3c01d340dcf7b5ab706fead22f62279c7a37f70d06dd5217b7e9975a389d", 0xd1}, {&(0x7f0000000740)="64affb4e14f2b52493202e04d29e3319afd0e3b3197d21e22593ab2f305a21a5f26ac15065dec56cb78840736f207aadb3c38bee6dc9cc37cd37181586e05c21160aabbf6d7c534667b3f94b0dd6e02c838b5948bc00e6b6e40348b79e4cd98581b6ee2c8c7dd4e19e99b9de283a1160d7e6461351f82c9ca33880271d2f9d7a84d0fd301865ab6770dc1b3eeeee57e0f5b6253a015fb5fba86b699579392f35aab277b4db55b2a0e0726cee9eedfa823f25371da5282b46fadb89463a5c189ad905274a439b0b292ed138c780327c3d19fa4b6c11f28f5ba573775cd598e42d10e53abfe77ae993cfe46302c4d54dab19", 0xf1}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="121a41a3a7032ff45043a7d07504bb843d4c8da2519ddbc07034c75b673c5758a7f903f106ffb7de5abe880eff3dfbf96ef8062b000431ee908c68789bda15a75ec3c979b4815f2f9eb7c6cca4d35a7b045fb85e55a4efbc53edada49393b0f9aaffa34fac28056c75aeee28a930d355dc76274627956462f9b14645c47dbc73c8ac65fc242f79ec02867f52e43cafa9e1d3c958e2a60a29b791df81064234de4b83a24ab54bbafe4e94de3b3edb1fa41d7c9959bb30161857e6c65478dbd43a", 0xc0}, {&(0x7f0000000280)="ae9e142e72946770032568303da5a84f09fd1025a279c3e784321bc852", 0x1d}, {&(0x7f0000000900)="bca7cfb4cbcf1171895dca4f927a6b41a22395c82c140950aea7c57f185a163e7d0e068af4965b4f44f9baa0c48775c9f887470ec7b581d91a0a07b45c8350a8c13244e7888acbd8a8a6bba18d40256e3c4d139ff7acabdd5f598cc409f2476ed7425f5b32684898cb37fdd4e8ece77b3cfc005fa401d3b9", 0x78}, {&(0x7f00000004c0)="52522fadd766773f042e673fb462ca015c38dfde2e4e9968f9eab7cb5f8ffec0bf2a1e899aa948b0acefa4021fcd4c3e717ef18fb6b856cf3ca97f0dc574", 0x3e}, {&(0x7f0000001b00)="10b8ea586a55fcaec729d87fb79b7f96bf0cd3c310d05acb4382f19774f9df2fe8b421d779fcfccf7c2ab1e8c225f146af42e8695b7a360d3965a01cd35bf7ccb484f3dc37a24315bf4053279cde566b6b0bc2757f", 0x55}], 0x8}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000840)="9014a2629dbd9ab728", 0x9}, {&(0x7f0000001c00)="7d2d20c22f42c043ffb4baac5990ef9bb2badc33a0e2016fb7269363fd747af38a26c7a3e7668b903f3c0973b6df33ec16dca5a41f784fcf8baa9fcfe50c6979827a2f2c5bbcfa4c9f71aabb8eccf07e3653d7c556bc0bbee6022d8b23402cf5b0e8a9a42fefbec2909ebc502904520074622f9b1c9f21590331e3cf354e504653a93fda5ecdfab92d2224b59aae7a9e3c7c0c7abba761e5d042ba096b39b5fedb6145da6a47f06c5a707049ae0e45b901b5d77c134b4b7940beb0227039d5c740f1711940a5cd350b5edc68ff0e605fc92d70f6ac40e1647931c5a18e8bf32210c0e4f3010f0ba0ae87", 0xea}, {&(0x7f0000001d00)="ddac6dcc5020d42edf1235b6efae0d2acaaba08f31f627476b33477f1957f37258de774163f4743a0b16fbb87cd1694a6dbf612f1a2adf5809123f145f769c600e991c6c4e0e4bd6032fdde856b5c61a8594febc274d2f01eac7e24af7eb42f27bd5958d8ccbddd4203c13a7b5b027ca9457e41592a21cbe105dd0455ccc26126b4ef3ab31c2c3ae36a41b46e0477e836decdb8a403bd742d740af9a299f201d48ed47f3fe879f34eb9203ac7590fcf7fa09ad068514d7b2b87c4ad2b8bef6", 0xbf}, {&(0x7f0000001dc0)="5900ae1a31dda89a439c0747d7c0ed137321416a394714a784591fedfebbd832c07e0c5101180064f75395f886b1afba5003cb4d3e42eab2605609e87df75ec79da11d865989f2641c5999e0b8a1bc8b7496a4d0d86fae75d1418ab3bedd8596ef2280c96b21279a1bfba1f1d1f06f285ba1f24cb7992bbc9c5a5de52ce4817bf9c7d036fe3b50d5c7c3083cad3ea423585dbf76aa2a2d6e", 0x98}, {&(0x7f00000034c0)="cb34b8bdc53117a830dd43a44c659fe4ae140a506552c3ae4efa2094643cc762620ab8ba300a9ff1c643ffc07f14f6d9c0c99a8c5ed81a73d4aa2a39c7e4585054fe5eb65a02b730e55b5092a7cc5a39f8852c86c270c2222be25c2f37317556311ec9e8794000de4a6a94bd76634d0043e13632624842a9524a219b6b2be2585870db13ed88d650dd86d8686dabb53cef234c0c1f8669bee7b0ce12ba9219774a93342b4df7cc0f4608fd01dcb9687bda1253556e6cce", 0xb7}], 0x5}}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f00000009c0)="53b7ad5da2fee7f8f1a17a5fbe8cc9e28ec7", 0x12}, {&(0x7f0000001fc0)="296d21e323bb27b690f1ac24f7b24dd7e1949a0911ee5ca57ad80af0df50cef18812e9f8f77b9036cd1fff74b7d8a48bbaacc3380d46f1834e1154fb8beb11f0a97d93a48a3c62258a96b8f6ff645d55630ecf784976ebcc7ef7d8206de8c8a7b6b722890537901db899cbad78771c6024cad11e4c12ff94746d7620d833a9ca2728beaaad5916af3a0d166e83", 0x8d}, {&(0x7f0000002080)="29045fe7451874f1c3457cea01011b50fc8d00ff039942", 0x17}, {&(0x7f00000020c0)="7efcb320cd8ed3a2fa097bf18dbcbf1926564c85260d7a046c0181c6b7b10b2ad7dbdec7ee", 0x25}, {&(0x7f0000002100)="281f5d191808d5555c0c6c3a541285f15d", 0x11}, {&(0x7f0000002140)="156608aa74428d3ed9547ce0e7f8c162eea23b600719c050075d511919d5993bbefbc6d4a1a27cda5b96cf93a768f7cb3f80d57df068fc2a73cbe33295b20a75e5af3a735ebb9f9aa1d1bdd6502be3aadbe63fb59df7d27f7546a840054d2b72", 0x60}, {&(0x7f00000021c0)="2fcaf5b7175fa89579550352000ea4af3e55957c955380d52c79f09fe392e76e6fc8c88f96436a99026fbcb5c2d3ea7a9ec6af2ef371e3305bc80c6f21d9c39db01bb5c5fc8c07899dd3e9d81cf4ff5a0542ce2c4924ccbf5ae2a28b917d14d6715a863b6654dffe4b87209468d50a41493036b6e32a6c8099e5f9cafb0683957fe2c0e2aa5e41804eae963a48aa0f015f28359238c9a5a8ae6c78b105e57241cdda89932eaa1635b1d3ba4ad3928abd3ac93d2a077fd932c74b7bb538c53ba37f413d4c22994906a4643a710566a0541f447cb56a6331e7ad1980d16577f4bdc4a03d741cb1dd8acbe363c4c408ff27850692e7ec916de104de36cfb32d7ef6520954a42f22742ea132a6c78a31ef14febd91dd2da48916b65d79be7ab69e965c624d48c96c341470368adffb890cbf785fa8195e88cc7c82fb673845f8a00a79137e87d27e2b8ff493d55360a528d5f1aca6a0d7ec35841d425e263a417f9512fc4132899e87db8ed32b19765efc0bae91c86f040d0b9720d48d5824858da30df7a8aed2444f3651b7320cca907af10ca0bbf48c74856a3ff95cf051f7e41d17ceab274750f3aa0795b19025f6a8b8beb8db8aaf7ea7a336b0d7538db37ab03b367d5ef795527c2dd1c66d43f48554c9d58dc37230134e73a5e50029b672cb2bfa2344a3e22b430fcc7799e96d4c4919d10d77c82f36cee7e67fc4d92b10a99bc794d1c0410e4ec8fd9f99be5668defd6bc9a4ac8d748d4776cbe28585f7c3b5a13a6c38c3741cbe1f5545fefb8b1b87c55f77bb945067a9224100c4abc47f1e33ff42ba2f46a2cdaede11132c3756a871e5fdfd19276c9541be48b6abc2579fe764bd007f82afda20945e34dff1bdeba878d6860974b4547f720fab5dcc6bd477215eb26ea70d06dd894f2b0f002c6abd259c1fb574aaff5e2753e58d2d2b0cc165b78093fe233e29d178e45051ea5fe6faf54b140f4e8caa20430d39cc191344f442df8e7df22b57453f2897f4c4e071ec61896316eb61279bc173c78a04378ab73821b4b161fc09e02dab38b8d1f3608c5c0e498bdaaf877e7c7e5baf1a24a3643b22de64e7a2a131535763e84b73d8f19b509a73d69a43b3d75ef9f9e7203bb7ec3ef69318f182e8d14926d916083257a5cf6aaa21363ef0babcf3b850bcc4397b29981f1b4a0de70509c4d24986b11becd428104a81047e923e92238a60fc1515207147c99e3b094879a5bfc11530c491628996380d54df0e14d2754e1f38f14143ba1de4ebdf5e6e98b81d44cb7c907fe77eeb2a096d15cf47cc19793fe845f81b4b45693dd5b187f90d621fd7b3613da3b6181b659c4f0cba64e664e6a0198493d3ef9e21b8c397a10a457babdbb3f850ea259ec7b8af6ac5b63b01bb8920bfa5d89a68a393336551edb896a5f27e43aca61ef15b59fa31258f56cfa09f88d4ac02f3936f6118a47327146dd3002d13baca829b9879f5be06d1132481f037e831a316a1a760b1f6cce34ec3bcaeff2a1d514407bed6831187bbf104112c77fb87fbadbaeeaed7d928093cd221c93c02aa5f670602c9d2c0311a6d6d111b82dc2de377d948209d3ce9a67021f52aa1c2a294ff8f3f6a1e8fce70697562509cfc55d7a65458629add09a0eefc137eb0acd69421c7072ce023195d373b78cbbf4baf2d21b8d8e77e29fb7f23c1eb25e6421143b8daabfc1d6733bc6502063c7162bd2566f33bfafa83ebac21d10c5e779f8d0788441d94c76ff56e751af2cd3a6667f7f82b7b5108db79c5e2a5bfe02640751a8299c6cae719f37f19c5570ba9ffd7abca5c1a2dd1df827779b5b69b94d3e9bb50803d90a525de404127b2c7430da138bcaef2deb91d55fb95f4956e52c04c478e78c9422224bd56e8864e74e620deceb341119f042e4a3f8de5659e88854413d55d416d2b5635d823617585055ee10f4709a8331d29241965e14602b6d376a1b9111cfbf8fb36e38e915dad16dfb836adf111283b67b6a88772a8b9f56c6700f8dc93481d57d0c2f1abc14dfad945f5b06cd4ee32e9e7eca7beec94b79374c078a2bc577abcbb1e0983be013b06b3590c5616b445960df27d7a33cbcdd4eb535e74471b090f5661fa410afda0bb59abec73247c02602713b34196834d21e55222019990204fa7933f228e04d9418bba83bf6e7852e126559ef179b9484db6efc62ff969398b4369db6056cf1f27a7d95972380128472f24bbed0265c093f7c6d68466a1487ed391fd517eb62df798e7b0310bfca8741275ed8d78cdb893c6fcbf0e9a0bd129bea00f2e84ed72348738a645bf59119e7e4945f661a399c02964aadf829df123fa383de6d27debe8768c426072cef1c5de84a64b3f5cd73331fc3d6bc8953ac323a7ad989e1fb57d6714bae68b6b2246600d941375fd4fa438adfcb235a6af6303555ab8d96f70e477eb99c0c3599363632c3fffae60c3dd9bb3e84cc1344413067668e0cad0c822ab91a8b6d6e2f813b0445e0dc0baaa774f7b73f3a004a01cbd5f4e2b0c56cefc4f060afbe918b91ccfcb552a487446eb8443952ebc8cdf859d8c58a42dea1b05731de20229f3ed2538653ae8bfce6fad2f301d7706ff701eb5a53eadba3dcc278bf0f251d56f7cc243b637bc32a4f6a2111a8176fcf3159bf32b3b459922cc8f3e9059d93c6bea53a03856c6c919c15bf0d8b8e3d5647ff0dfbf70f8bea4b03af8e6129cbd3cbb471e902dd354243d382f04040ba394f2ae1cc70af4c0257cb502e43d4e0bccc38502b08d123726a4f9903c71fb53b6c1581e846e0a997a5c30b480b6a5e552d0d47c6837a0bb9042e78530fcb6bbbc54ca46f2bd9cacc5407b1448a4fa74fd9cfabc8ee9109abf3c2f22a46e3bfff439c9d5a1ef1f5bba94f06dffe748e1d2ed8708651d3bbfc3ea43bdc7a8c75263d5743bd84f142b837bfa44919aace30122ed781a068b6ffabf0759d2912a1d3303438732a745e66089c9581ba341f3095f973168e7d430075fb179adf18ce1f6bf245582d9c5c00be5815d95daf0ee4fd43cf1921db4fee26f837e04c0524376f72ebc7c98ad95e8416835494af0e4feabaf149aac735e7e38a801ce6a793e05ba8fd81be1ab89821cd61fdf3610084b090524095583c278b842b2c2f2d85adcf6812512de11ffa95b2c313681305565553fa1647ad0ae323a85945f5f3943d676ca0cba4e091ea778b873c8916f84ad81334eed3dfcf984f9717851b46c8fafc0bfa26927872f4f3ca343dc8bfaa6213a99d76ab4641daa5fcd9d6ab11def9135f0dd621df7aa30a8612e56886c20e6c639a07ad8fd75ee6016ad2ddd5ce127152964e0fbd15b371d6b990188680c1646b387e640670091d7d845cb0e434594261df77f94f42bff04aeb784a8dba49b128ef0abad213a06f66ac5f2c3967cced572c949364a9f1ae8e3a06107ea46309c2f93f764577b0595709852c151f0551c6155524766b12aa6c399f41f40e8bbc8fe450fd8134f80242ef0a15633041ee6fd315f4eeea58e08f7d30b9b2f44443097b97cd8a82bc0054b04ea1a5794d45535ff125c39755e6c326ba6fc1d75fe1d955a3a8da32e5cdfa8bd78d43403775b9dfa59e2fd227539fb55b6a0bf395334c3702f7b5eadd449cddfb4d8deb16879591d45754ddf79db144d540f9770bf65b2581403d887ec172d912b0d442875b00d2b5d1784c2b56a755f522752597d22d1b74df095919866400f073c875c45e01b5577069b22948144d82c14f016331c2f8215bb54b81542c276604bfb3e790f4d673fc0d8a4b5013bfb609fa6979ebb4d8dcfd5a6445f2141b5328b241d497323623b3d4ab704ceee8c3c94b55b50ed4dc93c27786e10db20718a800137a7df1e811fd5981f350282c3ca914582d95bd78f4e144dd0151287fc945edfa53c72ed1352296e906c293a954fdbfe5540836acfab86bab7ad076e01d6203a23308df6b13ce517254a32ff88f489dc800d7c80a74fdca476dab8ecbd488efa9c2fd55ad54f417b0809007b0361e52d4406a81bbd981623801aff6f73ac8d536de689726ca71e2280ffa58bf5229a92f1a9a9fffa695a1008bb26e2c713beb7011a3dc43adfd420e4ce3baa1d9a01e3a997dfb7860adc234681611faf8a4a03824b23f991a00c658460767119ffcc6ce205b2b0c83f3d35c705ccae68d9bc80ceacc7202e88a130de62caba433e9a973b63fdfb0aa3a23ddb8fdd13ba9a80da49816ee4cd5e31527873bf93a41966259d4935d0c92e400f9f169fc77587610d13574b2421c698b468b8f9b3e8037ea40f416c06e477aaa47326ddc28d56a0cb5472a1d8bd171237e55e71a063211608f6eb2ed306895034974a7923a0de288dfb660aaee0f53e82327fd28bf85977d23fccc68ed7aef76c3b0d5404651eb97a029a3ba72e1ad18c82ed4d6a1670c903528b7be4acfa4a4c7e5fa76304ca579e094d47a358dc677c8542b77c9867d3f80a36ddaef4b63d82f42d9b1b5ff579b24b23f0fcfcfb58bc9d2196ae74be21bac2e8fd7c0e957993529b8d089d2643f5e19212de0ee0c3ffea317a2b01902b16fdf07e7f6d1e1d32c845a2d9c280c5f6dd1b7f5273103ec5d15dd4b540ce8b960d65b1f1f988b2e967bb3536f4ef15a59fad979c0f8a06e5c4a0519b27142df9accfa5d8f4f66ddd1389faaee573289cee8364ce4122c262a9421469fe220bfc1b41bf6b15e58f8148c07ee22be4234dafd509aff3db216f6999cc3dee3124ab66573e9afcf5430f984506ce2056381c0fb2b9dae1001c88d96448e953401c0eba85050b53b5d4893a895b4e4037aaec33e0822d2192116f97b15f30578da6d7ab86cdeef33580de573e2f74c427626f28df90b3fd3531468bf4a89f7c4423beb9f33ead95131ed8d69c91095b01128ea14c5b6a232cb7f993f727832a37b8349f8a910c4768f1ccbb1114413fc0482d303bb4b85e423f020004efbf74c4636f8dbcd2065c50348446337d833f8ad10ee2305e429105ed3649de2c4f35c15bf7aa515d60dc4cbfceeb914fba74e494fba573f0d36195274c3fdd443dec7f0b6300eb7f6f71e45f9ef18656cf047ffc547e89258cc9463708f5075422fc9109c097e5a6d3de33ebc185096141c44f3f3803b27b5f6095a9abc891f8eed19efb485e7bb89e528ba590aeb626d63ff40c71805c5ec22265ecb9e7ab2abe6f573fa0d862b388b671c6a9b910d4ff0f7f1ba23eb634aee432b7b35d29c927ce3cf9a13cee6e6761f5a26c54e0f90ebd35be2558f59b6dc766a0a1c52307a8792505641a1d3008646d7936593b5a2b4d82d5c281e62eeae9afe4770e728daca913b853630de9a86e9cc433309c1f4fb4ed76af927db8cf02b50cd1a6dde1f142604593f6dfac6dd80b993fd2d7e6c97578b63d8abd2f6c409f4ca90066bc504b9ffa91ec24f35df27fc8ef91e1b707bdb276e87e803ef27fb0a930fcc63c979d8f1509b92f7a1e147c2f9fc32b3d49121136a86d2e82b55de519af61d6a58955f248eb08a88b7056ce72bc35c23fdd62f93be9ccc349fac014ed4ed3c31f25f84bf127b240c874a7b2e7347a668e55a292a4ef76e112a664d8e03043864dc331332b82f97c5031a327414ff863f7ea7e06590953f6c850687e7d7bd19cc94d4eda4479aa5d00ee229cf0da2a217147df241238449c4a519a76dd10e7b86bb2b8f45981484fd4221f698d3cb53ee752d30b83e033f4c1e7dea0e25028d83b9c93d7ac30a2d12b4ee3218de36e37e63df354efe6df5149d0998f042c", 0x1000}, {&(0x7f00000031c0)="11012ead55c81bca77d4316c08bb14a8fc1093cd2bcda1dc529f3182c9f481a12bcb212103a451869b43b335f06379497b216f9ef83a18720c2402b2797eef7a720a6e09e1facb8f5e021cb30541b191196de9eeee5ff87bec057d", 0x5b}], 0x8, &(0x7f00000032c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x20}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4da67063}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x21, 0x0, 0x3, [0x2, 0x101, 0x2, 0x81, 0x1f, 0x5, 0x8, 0x7, 0x5]}, @timestamp={0x44, 0x18, 0x6e, 0x0, 0x4, [0x4, 0xffff, 0x10004, 0xac9, 0x2]}, @end, @timestamp={0x44, 0x8, 0xbe, 0x0, 0x1, [0xf99b]}, @ssrr={0x89, 0x3, 0x71}, @rr={0x7, 0x1f, 0x7, [@rand_addr=0x64010102, @local, @remote, @empty, @rand_addr=0x64010102, @rand_addr=0x64010100, @multicast1]}, @generic={0x8, 0xc, "1941d0b4815d2089504f"}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}], 0x120}}], 0x3, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x3, 0x2007, @fd_index, 0x2, &(0x7f0000000140)="0a34b80600c565d18114cbaf9b9d91c56a8150f6ee3356ce", 0x18, 0x8, 0x1, {0x0, r8}}, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000480), 0x0, 0x202002) r10 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x6, 0x0, 0x0, 0x80000, &(0x7f0000000980)={[{@utf8}, {@shortname_win95}, {@numtail}], [{@audit}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@appraise}]}) syz_io_uring_submit(0x0, r2, &(0x7f0000000a00)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000880)=[r3, r9, r4, r5, 0xffffffffffffffff, r10, r4], 0x7, 0x0, 0x1}, 0x9cca) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1990.426119] ___sys_sendmsg+0xc6/0x170 02:29:18 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d50, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6d, 0xe0, 0x46, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x0, 0xee, {0x9, 0x21, 0x1, 0x92, 0x1, {0x22, 0x129}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x7, 0xa9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0x8, 0x4}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x111, 0x1, 0x5, 0x73, 0x20, 0x6}, 0x17, &(0x7f0000000440)={0x5, 0xf, 0x17, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0xe7, 0x0, 0x2, 0x880f, 0x4}]}, 0x1, [{0x9a, &(0x7f00000004c0)=@string={0x9a, 0x3, "3ad29e905e629315ebd6185e0ee472251737a54d7bc219fbfb6a6c24a76b7eea2e6182bb449aeaf0ee0b20948b16df06ef63308600b3a0ca12d82a2a5b65e76879391959373e84a60302ec5d7431178e5a19a4413ef8119e989d3379a8e5673e292913b1f0ddba2a56a749a4aa1bb09453feb22e3ee128b76edf1c494a10f30e13749857393546ec507c9b111dadc483543614cb35b47699"}}]}) timer_create(0x5, &(0x7f0000000240)={0x0, 0x37, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f00000005c0)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x800, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000640)=ANY=[@ANYBLOB="040041b2042131d734a29ade8b0360792e8a53b0e02e668b3ca330f8b59aa7134170c5612d31161d11a6fbcd060200000024c5df081650478277b5405e62abf379b7476400f18bcd0000000000000000b288ef8e8d6c8201676b82e9ffc81985cabb4355c826bca259bd0dfd7397c81e880390f7118889a1b8f858430699a64f3107c5030000000000000000000000000029f7cfc5f87b6bb6d3c602f209a2aabeb298f06e7337bb65919ee41a214607c007748a1c77e26391d2166fc59fc63a79db3192f5a1a84467ec07cb50e2ea1993a8bbbb1858e4422c6abd082b3754499174110315288ea4eff39a0f1406a6b9da003d50ec13a2a1633b83a0ac23914893e373000000e5f3dfd13672ea507188ac37a61428de00014dc5feb7c30eccc2f8c3c6f6f390ed893e3df2d29efd9e3c471400a62cc65587d5ce2c4d723d2d02aa483147b430b361435e1f01dc5a3bf626957002a84006985e839e17639e0b607d5e50349af65f4f2bbd4d0346f1fdc1b2cffe4d20ca9404add59e86ba6adaaadf1d204882ab6c333951c4d1524ce9bcd4beaaa6b1d48329038ca4b24fdd5c7c0819d5c856a569abbe57c2c143709acff8b288c477a25e79eb3448c6a4e08ac8da9aa05b0d5e36402cd49229bd7f2832789d17c7e1e81a516f736faa5f78ca4ec4073f2b26e28f6e011beb747919f888890f14b3fd7aec1f8bd486fb19842dae42aa95cb3f206104000000f0f13ca7a757b0cd23bdee855c74363a11ff7b3784da3b78494040ab0e1c566c09cba52a7d0a20b11f98c199d01f153037ce82d2f1955e624b0cd5e1f2ee516bb3bdb0901fc92d5335e9ac4bb0dca63680f920f052626b4dcc07066390f2dcebbf0c233a2dc307975f5f48ee74d68a5b9b67b6b5112def18a93e656b15e3aca7031d00001da1e9ac03599b24d8f0b6514c13b903226c451af96ee932c943a65523f83979e052186ee2ff3f576fe56f65a4a306d8ac10afdba0d888"], 0x4, 0x1) r3 = socket$inet(0xa, 0x3, 0xff) sendto(r3, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x10010, r3, 0xbcc94000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) capset(&(0x7f0000000280)={0x20071026}, &(0x7f00000002c0)={0xffffffff, 0x1, 0x0, 0xffff, 0x45, 0x5}) r4 = fcntl$getown(r2, 0x9) capset(&(0x7f00000000c0)={0x20071026, r4}, &(0x7f00000003c0)={0x7, 0x5, 0x1000, 0x8, 0xa8, 0x401}) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:29:18 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 68) 02:29:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x2f00, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:29:18 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}}}, 0xb8}}, 0x0) 02:29:18 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000340)=[{0x20}, {0x6}]}, 0x10) openat(r0, &(0x7f0000000040)='./file0\x00', 0x521000, 0x4) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x1000, 0x800) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [{0x20, '+'}], 0xa, "05405ddbf9434a7cbfacc7c52ddde2f389be15b4684eaa02c7e943df40a67bb005bf3697cc3277798473ec0d2cadb17d55d2f952530bf4455c35e1e21c415f3598d14bdbc33b5c365bf07967d57a1162785344e54696fb62c9aebfef4d5ac6c71a22fac221c6961a506798f881c2dc36cc27350f153df03eaf76e24a57f341602126f5a3b65c0787b1f15c29e528ea076fc4ca059dca96bf79d88e"}, 0xa8) sendfile(r1, r0, 0x0, 0x10000007) 02:29:18 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1990.427373] ? sendmsg_copy_msghdr+0x160/0x160 [ 1990.428617] ? __lockdep_reset_lock+0x180/0x180 [ 1990.429701] ? lock_acquire+0x197/0x470 [ 1990.429732] udc-core: couldn't find an available UDC or it's busy [ 1990.430572] ? find_held_lock+0x2c/0x110 [ 1990.431446] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1990.432332] ? __might_fault+0xd3/0x180 [ 1990.434107] ? lock_downgrade+0x6d0/0x6d0 [ 1990.435011] __sys_sendmmsg+0x195/0x470 [ 1990.435866] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1990.436778] ? lock_downgrade+0x6d0/0x6d0 [ 1990.437667] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1990.438685] ? wait_for_completion_io+0x270/0x270 [ 1990.439703] ? rcu_read_lock_any_held+0x75/0xa0 [ 1990.440675] ? vfs_write+0x354/0xb10 [ 1990.441467] ? fput_many+0x2f/0x1a0 [ 1990.442251] ? ksys_write+0x1a9/0x260 [ 1990.443070] ? __ia32_sys_read+0xb0/0xb0 [ 1990.443930] __x64_sys_sendmmsg+0x99/0x100 [ 1990.444822] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1990.445915] do_syscall_64+0x33/0x40 [ 1990.446692] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1990.447793] RIP: 0033:0x7f9688118b19 [ 1990.448588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1990.452523] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1990.454170] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 1990.455710] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1990.457233] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1990.458789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1990.460308] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 1990.464081] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:29:18 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x9}}}, 0xb8}}, 0x0) 02:29:18 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:29:18 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xf}}}, 0xb8}}, 0x0) 02:29:35 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x7, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:29:35 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="54000000230000032abd7000fedbdf25000000000c001c", @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="01000000080016009467ffff150008001100080001070900ea446c73b20620348100000008000b0008000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008802}, 0x20000000) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001400)=@updsa={0x158, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@local, 0x0, 0x33}, @in=@private, {0x0, 0x0, 0x6, 0x0, 0x2040000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd25, 0x0, 0x80000000}}]}, 0x158}}, 0x0) readv(r0, 0x0, 0x0) fcntl$setown(r0, 0x8, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff800}}, './file0\x00'}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100e8afb0420f46075e1866d61f000018000000", @ANYRES32=r1, @ANYBLOB="00000000000000002e2f66696c653000fb3cdf2e1c045b5d73d6bfe5337f390808cc20ceb5c2c3631b7ace06552fc95be2ef511d6b543382fd059e7dc7d5"]) waitid(0x2, 0x0, &(0x7f0000000100), 0x20000000, &(0x7f0000000500)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0xe0, 0x3e, 0x100, 0x70bd2d, 0x25dfdbfe, {0x1f}, [@generic="a862262c608fa55ded7478bcbe857531fca64e62f3241b23ad16d343dd9eed59397e1019251cb4f55eb9629b945d92a91a24fa9d28ebd1b58d8ba1b0642dc5727386acac03aade32f313b4835fe0cc4de3e621b71fd91ce9787fac75ba1e991774af69a10c016a5781c713f9126f8693487befa5f59fee97612d347c4cdf00d7fc2d42ae8165a178b429ef8de29f51b2397211391be3c063fd6d81ec230aa5004f8bfab5d52f89f940accdf99c06f24abc6b52acebb099eba281cd4b2b231fff3867ad89e575e3a9300b82"]}, 0xe0}, 0x1, 0x0, 0x0, 0x20040010}, 0x800) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x131081, 0x0) r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r4, 0x10, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40044) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) 02:29:35 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2f}}}, 0xb8}}, 0x0) 02:29:35 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:29:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x7e00, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:29:35 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ethernet, &(0x7f0000000080)=0x80, 0x80000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x67}, {0x8, 0xb, 0xfffffbff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x16, 0xa5cf}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x2}}]}, 0xb0}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1ec, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d80c9e9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21b2}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x32d}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x24}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @local, 0x80}}}}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x801}, 0x40001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r4 = openat$cgroup_ro(r3, &(0x7f00000008c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) bind$packet(r4, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x7a}, 0x14) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000940), 0x208000, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0xb59b8d07544e0221}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x5c}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x70240026}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x18, 0x3f9, 0x200, 0x70bd28, 0x25dfdbfe, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4048c90}, 0x4000011) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, 0x0, 0x401, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xcf}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000000}, 0x8005) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000cc0)="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") sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x94}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x81) recvmsg$unix(r3, &(0x7f0000001400)={&(0x7f0000000ec0), 0x6e, &(0x7f0000001240)=[{&(0x7f0000000f40)=""/8, 0x8}, {&(0x7f0000000f80)=""/224, 0xe0}, {&(0x7f0000001080)=""/80, 0x50}, {&(0x7f0000001100)=""/157, 0x9d}, {&(0x7f00000011c0)=""/76, 0x4c}], 0x5, &(0x7f00000012c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}, 0x10000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001480), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000001640)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001600)={&(0x7f00000014c0)={0x108, r8, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xf4, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xde2321c02be917cb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x802}, 0x4000000) r9 = dup3(r6, r4, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r9, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x33}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x45}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xcc}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x40004) 02:29:35 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 69) 02:29:35 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x40000) syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7ff, 0x2, &(0x7f0000000640)=[{&(0x7f0000000480)="235585f7fe9b18677d12f07f50ead624cac5140218706ce560e45905557e9117ba10864a8350435efdc70e2f479f070287e3fcd628f5cab8b441a8b03bc34672143f41729545d291c285f25f451245415e37fd3c4f1d003421ebded88e616b989c0efdc5cbf577156d6a730ec65724", 0x6f, 0x7}, {&(0x7f0000000540)="034ffa549a2b6b429089424b7420b5af404dc99214e45408c651e4e3b8fc3081c90bea4264adbfac1a4066d58230a8e185b46c0e05ce1070b5f36d54a9210f31fb15c66144e516551ee276055ed20bed5e53ad3226d234e084bfd3f1c780fd8a19e9eac028f462e383ab1f1672a3f3eaea39461641ecaf749771a836b49b1ac2ab57d625691f08ab939f521a9c108bb80e6472ed061f8311032f767d8fee2d146c5fe4acbd9aa128db2b16e75543063a17eeb14b9ab2ee2dc92f4b8c5bcde7cb0c868489b92d27e2f122", 0xca}], 0x0, &(0x7f0000000680)={[{@gid}, {@gid={'gid', 0x3d, 0xee01}}, {@nocompress}], [{@hash}]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) r0 = getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x6, &(0x7f0000000e80)=""/67) syz_mount_image$iso9660(&(0x7f0000000f00), &(0x7f0000000f40)='./file0\x00', 0x0, 0x4, &(0x7f0000001200)=[{&(0x7f0000000f80)="c691a776cf4b8df4a8dfa38e801498a2", 0x10}, {0x0, 0x0, 0x8}, {&(0x7f0000001080)="e6e50977a119e95150b28f36144ac14b365ce905a460f7e23766f5f68f701e769b2573e8a42a37f58b047508a3a437ee5d7b48d59c1b8030fa5aa88a34a7fd2d51d492134a34ecd51828d1bd1aa0fde013561ac13b002ae69481d316a65914dd282799ab06b5484f", 0x68, 0x9}, {&(0x7f0000001100)="a62c1879b48eea581bfff750272ccbc34a013beb3114dcdfa0e9574a058000bb52e3a16f04098722e0bb960f1c37599851a5ed08c5a60b763d5b10548017d0122f24e48bfce06459b350b2037b2bc9847874d3b2b43da5b1b57ebaaa55c6da1afa60723f9610b405f2b706d59f93fcb48a5a2f42fce02bfd2f1aac9c2204a842980d098223da09188ec0edc22d4037c0b9e19c8a2107c37399a7d8e613bae2c6a475dd1786800df6ec405c766d6446673675b9a0f5429b16b9774335c2106a112015c80dcd9bb1887e7bb0b75f051267f5ff69abb146e0e9ee9f0d8e4fa5e933780f38c06921b7b4c5e558e6", 0xec}], 0x1000000, &(0x7f0000001280)={[{@dmode={'dmode', 0x3d, 0x9}}, {@session}, {@uid}, {@utf8}, {@sbsector}, {@utf8}]}) [ 2007.866065] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2007.895530] FAULT_INJECTION: forcing a failure. [ 2007.895530] name failslab, interval 1, probability 0, space 0, times 0 [ 2007.898130] CPU: 0 PID: 11197 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2007.899694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2007.901576] Call Trace: [ 2007.902193] dump_stack+0x107/0x167 [ 2007.903029] should_fail.cold+0x5/0xa [ 2007.903890] ? create_object.isra.0+0x3a/0xa20 [ 2007.904927] should_failslab+0x5/0x20 [ 2007.905787] kmem_cache_alloc+0x5b/0x310 [ 2007.906722] create_object.isra.0+0x3a/0xa20 [ 2007.907713] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2007.908873] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2007.910037] ? alloc_skb_with_frags+0x92/0x570 [ 2007.911062] ? mark_lock+0xf5/0x2df0 [ 2007.911907] __alloc_skb+0xb1/0x5b0 [ 2007.912767] alloc_skb_with_frags+0x92/0x570 [ 2007.913757] ? mark_lock+0xf5/0x2df0 [ 2007.914608] ? mark_lock+0xf5/0x2df0 [ 2007.915455] sock_alloc_send_pskb+0x7af/0x930 [ 2007.916487] ? sk_alloc+0x350/0x350 [ 2007.917321] ? perf_trace_lock+0xac/0x490 [ 2007.918261] ? SOFTIRQ_verbose+0x10/0x10 [ 2007.919194] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2007.920338] ? rawv6_exit+0x20/0x20 [ 2007.921157] ? SOFTIRQ_verbose+0x10/0x10 [ 2007.922092] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2007.923181] ? ip6_mtu+0x1e9/0x3d0 [ 2007.923982] ? ip6_setup_cork+0xfb7/0x1740 [ 2007.924955] ip6_append_data+0x1e6/0x330 [ 2007.925874] ? rawv6_exit+0x20/0x20 [ 2007.926712] ? rawv6_exit+0x20/0x20 [ 2007.927542] icmp6_send+0x1250/0x1f30 [ 2007.928433] ? icmpv6_push_pending_frames+0x470/0x470 [ 2007.929604] ? find_held_lock+0x2c/0x110 [ 2007.930582] ? ip6_dst_hoplimit+0x440/0x440 [ 2007.931562] ip6_pkt_drop+0x3d2/0x7f0 [ 2007.932426] ? ip6_pkt_discard+0x20/0x20 [ 2007.933345] ip6_local_out+0x29f/0x4c0 [ 2007.934242] ip6_send_skb+0x117/0x460 [ 2007.935115] udp_v6_send_skb+0x7b7/0x1620 [ 2007.936074] udpv6_sendmsg+0x216b/0x2b40 [ 2007.937011] ? ip_frag_init+0x350/0x350 [ 2007.937939] ? udp_v6_push_pending_frames+0x360/0x360 [ 2007.939107] ? SOFTIRQ_verbose+0x10/0x10 [ 2007.940038] ? __lockdep_reset_lock+0x180/0x180 [ 2007.941113] ? lock_acquire+0x197/0x470 [ 2007.942027] ? find_held_lock+0x2c/0x110 [ 2007.942966] ? lock_chain_count+0x20/0x20 [ 2007.943906] ? sock_has_perm+0x1ea/0x280 [ 2007.944868] ? __import_iovec+0x458/0x590 [ 2007.945809] ? udp_v6_push_pending_frames+0x360/0x360 [ 2007.946981] inet6_sendmsg+0x105/0x140 [ 2007.947866] ? inet6_compat_ioctl+0x320/0x320 [ 2007.948877] __sock_sendmsg+0xf2/0x190 [ 2007.949759] ____sys_sendmsg+0x334/0x870 [ 2007.950696] ? sock_write_iter+0x3d0/0x3d0 [ 2007.951649] ? do_recvmmsg+0x6d0/0x6d0 [ 2007.952540] ? find_held_lock+0x2c/0x110 [ 2007.953473] ___sys_sendmsg+0xf3/0x170 [ 2007.954371] ? sendmsg_copy_msghdr+0x160/0x160 [ 2007.955401] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2007.956584] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2007.957591] ? trace_hardirqs_on+0x5b/0x180 [ 2007.958574] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2007.959581] ? finish_task_switch+0x126/0x5d0 [ 2007.960585] ? finish_task_switch+0xef/0x5d0 [ 2007.961581] ? __switch_to+0x572/0xf70 [ 2007.962465] ? __switch_to_asm+0x3a/0x60 [ 2007.963393] ? __switch_to_asm+0x34/0x60 [ 2007.964324] ? __schedule+0x82c/0x1ea0 [ 2007.965224] ? io_schedule_timeout+0x140/0x140 [ 2007.966296] __sys_sendmmsg+0x195/0x470 [ 2007.967209] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2007.968177] ? lock_downgrade+0x6d0/0x6d0 [ 2007.969138] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2007.970230] ? wait_for_completion_io+0x270/0x270 [ 2007.971326] ? rcu_read_lock_any_held+0x75/0xa0 [ 2007.972367] ? vfs_write+0x354/0xb10 [ 2007.973218] ? fput_many+0x2f/0x1a0 [ 2007.974040] ? ksys_write+0x1a9/0x260 [ 2007.974911] ? __ia32_sys_read+0xb0/0xb0 [ 2007.975837] __x64_sys_sendmmsg+0x99/0x100 [ 2007.976789] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2007.977967] do_syscall_64+0x33/0x40 [ 2007.978807] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2007.979970] RIP: 0033:0x7f9688118b19 [ 2007.980810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2007.984951] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2007.986688] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2007.988302] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2007.989931] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2007.991544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2007.993171] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:29:54 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 70) 02:29:54 executing program 5: syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x82011, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d6c6f63616c5c7215762b9434697b486c61745076652c00"]) 02:29:54 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffc, 0x0, @perf_config_ext, 0x2000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xbe9}, 0x0, 0xffffffeffffffffb, 0xffffffffffffffff, 0x1) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)=ANY=[@ANYBLOB="c85300000300"/16], 0x1c}}, 0x0) getxattr(&(0x7f0000000140)='mnt/encrypted_dir\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="46fa957b6949fd75fe000000000000"], &(0x7f0000000300)=""/117, 0x75) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r2 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, 'mnt/encrypted_dir\x00'}) setsockopt$inet_mreqn(r2, 0x0, 0xcf, 0x0, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100500290000000000050029000100000005002d000000000008007b000000c00008a20000000000e2ffffff00000000000000000000d2c5"], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) fcntl$dupfd(r3, 0x0, r1) r4 = accept$inet(r1, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000280)=0x10) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000002c0)={@remote, @multicast2}, 0xc) fallocate(r1, 0x0, 0x0, 0x8800000) [ 2026.113448] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:29:54 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000100)='./file0/../file0\x00', 0x400000, 0x6, &(0x7f0000000440)=[{&(0x7f0000000200)="1ba48abf874a417b493fc72f41fef057bac68b95d04f7d1ac196c6b9f5f90ac682e29b0830e90a0436478a5bf05b4798b21a78a8c5c24e6bd4993c8649962fffd89867d6a183cae14c641d0643e8156be22d66ff32a3eb70d4ddb7076356d008517e8b505741a9a42de28d40eef9af197733184a40eca634619e817cdaff", 0x7e, 0x1}, {&(0x7f0000000640)="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", 0x1000, 0x4}, {&(0x7f0000000280)="601d91bbdbd657719e8359d61715623f33fc0e8165bdc23928ccdab082470e8d4918879666cd44571564ca4cd1040fd66b8974ae77a29fe65ffcba69731c8c0847dfb92433e9a8db53831cc4b579833649895fe5414d422fac50f74b38299807456ea6d929bb1408b85c32625260d42bf9b849b77bf0458d28cd9621967516273f5c0510c5ad685a9e6181cc86a1377ec7b29127169b2338067fe9906f0c64e2430f8b9155af2f529d3c93857c0426d82c165eb5dd79896990eed09f27ed", 0xbe, 0x8}, {&(0x7f0000001e00)="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", 0x1000, 0x5}, {&(0x7f0000002e00)="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", 0x1000, 0x9a4}, {&(0x7f00000003c0)="36d46be6670a359ac54251e2983979d1a50372233849130cb240827a5a0471f094ddf7c463bdccd64bd118d7a8aa48b6c8b9e6216595a064e77f59a130b937f711a926daa20f6559ee2b436a8285d209a429698abbc04b2eed117bdba7f6e62a2a04947acc80d26477552c", 0x6b, 0xffffffffffffffe0}], 0x150008, &(0x7f0000000500)={[{@huge_within_size}, {@size={'size', 0x3d, [0x65, 0x34]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x67, 0x35, 0x30, 0xf, 0x0, 0x6d, 0x2d, 0x37]}}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, 'aname'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, ']&%-\'\xaa.+'}}, {@smackfshat={'smackfshat', 0x3d, '+#,-\xa2,+-'}}]}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4040, 0x120) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, &(0x7f0000000040)={r1, r0, 0x8}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) 02:29:54 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x8, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:29:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xd802, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:29:54 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:29:54 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:29:54 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2}}}, 0xb8}}, 0x0) 02:29:54 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x9, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2026.163446] FAULT_INJECTION: forcing a failure. [ 2026.163446] name failslab, interval 1, probability 0, space 0, times 0 [ 2026.165072] CPU: 1 PID: 11223 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2026.165859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2026.166819] Call Trace: [ 2026.167131] dump_stack+0x107/0x167 [ 2026.167548] should_fail.cold+0x5/0xa [ 2026.167986] ? create_object.isra.0+0x3a/0xa20 [ 2026.168504] should_failslab+0x5/0x20 [ 2026.168938] kmem_cache_alloc+0x5b/0x310 [ 2026.169396] ? __is_insn_slot_addr+0x14c/0x290 [ 2026.169918] create_object.isra.0+0x3a/0xa20 [ 2026.170416] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2026.170993] kmem_cache_alloc_node+0x169/0x330 [ 2026.171513] __alloc_skb+0x6d/0x5b0 [ 2026.171932] alloc_skb_with_frags+0x92/0x570 [ 2026.172435] sock_alloc_send_pskb+0x7af/0x930 [ 2026.172954] ? sk_alloc+0x350/0x350 [ 2026.173374] ? perf_trace_lock+0xac/0x490 [ 2026.173840] ? SOFTIRQ_verbose+0x10/0x10 [ 2026.174306] ? lock_chain_count+0x20/0x20 [ 2026.174780] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2026.175354] ? ip_frag_init+0x350/0x350 [ 2026.175810] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2026.176354] ? ip6_mtu+0x1e9/0x3d0 [ 2026.176759] ? ip6_setup_cork+0xfb7/0x1740 [ 2026.177239] ip6_make_skb+0x2df/0x4e0 [ 2026.177667] ? ip_frag_init+0x350/0x350 [ 2026.178135] ? ip_frag_init+0x350/0x350 [ 2026.178589] ? ip6_push_pending_frames+0xf0/0xf0 [ 2026.179134] ? ip6_dst_hoplimit+0x199/0x440 [ 2026.179623] ? lock_downgrade+0x6d0/0x6d0 [ 2026.180107] udpv6_sendmsg+0x2128/0x2b40 [ 2026.180573] ? ip_frag_init+0x350/0x350 [ 2026.181036] ? udp_v6_push_pending_frames+0x360/0x360 [ 2026.181623] ? SOFTIRQ_verbose+0x10/0x10 [ 2026.182097] ? __lockdep_reset_lock+0x180/0x180 [ 2026.182626] ? lock_acquire+0x197/0x470 [ 2026.182911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11225 comm=syz-executor.0 [ 2026.183075] ? find_held_lock+0x2c/0x110 [ 2026.183095] ? lock_chain_count+0x20/0x20 [ 2026.186491] ? sock_has_perm+0x1ea/0x280 [ 2026.186966] ? __import_iovec+0x458/0x590 [ 2026.187432] ? udp_v6_push_pending_frames+0x360/0x360 [ 2026.188017] inet6_sendmsg+0x105/0x140 [ 2026.188459] ? inet6_compat_ioctl+0x320/0x320 [ 2026.188973] __sock_sendmsg+0xf2/0x190 [ 2026.189411] ____sys_sendmsg+0x334/0x870 [ 2026.189870] ? sock_write_iter+0x3d0/0x3d0 [ 2026.190352] ? do_recvmmsg+0x6d0/0x6d0 [ 2026.190790] ? __lock_acquire+0x1657/0x5b00 [ 2026.191286] ___sys_sendmsg+0xf3/0x170 [ 2026.191731] ? sendmsg_copy_msghdr+0x160/0x160 [ 2026.192243] ? __lockdep_reset_lock+0x180/0x180 [ 2026.192770] ? lock_acquire+0x197/0x470 [ 2026.193219] ? find_held_lock+0x2c/0x110 [ 2026.193681] ? __might_fault+0xd3/0x180 [ 2026.194147] ? lock_downgrade+0x6d0/0x6d0 [ 2026.194628] __sys_sendmmsg+0x195/0x470 [ 2026.195079] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2026.195567] ? lock_downgrade+0x6d0/0x6d0 [ 2026.196047] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2026.196595] ? wait_for_completion_io+0x270/0x270 [ 2026.197144] ? rcu_read_lock_any_held+0x75/0xa0 [ 2026.197669] ? vfs_write+0x354/0xb10 [ 2026.198098] ? fput_many+0x2f/0x1a0 [ 2026.198512] ? ksys_write+0x1a9/0x260 [ 2026.198944] ? __ia32_sys_read+0xb0/0xb0 [ 2026.199410] __x64_sys_sendmmsg+0x99/0x100 [ 2026.199891] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2026.200472] do_syscall_64+0x33/0x40 [ 2026.200893] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2026.201475] RIP: 0033:0x7f9688118b19 [ 2026.201898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2026.203987] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2026.204847] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2026.205645] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2026.206458] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2026.207259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2026.208065] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:29:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xf000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:29:54 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c65302000202e2d200820000ab2c1bec4fc4167deb4a7fbacabda69751a591d5f9b9a2384df4a7031c840598f4ee5303afea8414f751db501bca30419fb7ce4074fb23c3480465d6e7bcc98de2cf50729c165c655a9c78634ab5c6419fb0e54cca7aeac876c574706bc529c46ab7dd06cc66eac854a7c5cc85fb6bf41deae1a672a98f9851288098d58fc595d2c1a8c84ae0c"], 0xa4) io_uring_setup(0x69ab, &(0x7f0000000540)={0x0, 0x50d8, 0x10, 0x0, 0x3dd, 0x0, r0}) r1 = syz_io_uring_setup(0x76d7, &(0x7f0000000200)={0x0, 0x1c70, 0x20, 0x0, 0x3af, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00007a7000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) syz_io_uring_submit(0x0, r2, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000440)={r3, r4+60000000}, 0x1, 0x0, 0x1}, 0x7f) r5 = creat(0x0, 0x2) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x4010, r5, 0x0) syz_io_uring_setup(0x6cb, &(0x7f00000005c0)={0x0, 0xed9e, 0x2, 0x2, 0x12d, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000927000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000640)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000680)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x8000}, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40086607, &(0x7f00000004c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pwrite64(r9, &(0x7f0000000140)="9973ffe5841614b377973572aa5065985c7b379f33884c9907ec35a842c2175b70ab77256563966978856569428ec7257fff4f67cb3806ab5ef877a80adf2fbac6bd2c602b8e7a5c5034603726a5be7bfee34047aede401cb910140651cb4ecf3987d0aa61304453cac214aa47cb9f77a8c4e90b797a72e4abaf96162ef184724d10d8385e7827ce6da6d6b93c0107c1095ae2f89ae89086b0dc986d8934fbac5c0aaacf89d78d35edab6961e5ba063831995795f747c873ca5808", 0xbb, 0x7ffa71df) [ 2026.254577] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2026.268324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11225 comm=syz-executor.0 02:29:54 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(0x0, 0x0) 02:29:54 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xa, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:29:54 executing program 0: r0 = open(&(0x7f00000004c0)='./file0\x00', 0x50000, 0x112) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6ed6, 0x20000000200}, 0xa032}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x3, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}, 0xc3a}, 0x1c) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000000), &(0x7f00000000c0)=0x4) fallocate(r1, 0x3, 0x52, 0x6) getsockname(0xffffffffffffffff, &(0x7f0000000300)=@sco, &(0x7f0000000100)=0x80) r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000001c0)=0x1) openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0xfff, 0x500, 0x0, 0x40010120}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$vcsa(&(0x7f0000000840), 0x0, 0x28180) creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80) 02:29:54 executing program 0: pread64(0xffffffffffffffff, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ocfs2_parent={0x18, 0x2, {{0x2a1f}}}, 0x200003) sendto$inet6(r0, &(0x7f00000020c0)="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", 0x1000, 0x1, &(0x7f0000000300)={0xa, 0x6, 0xffffffff, @mcast1, 0x4}, 0x1c) r1 = syz_open_pts(0xffffffffffffffff, 0x200) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r4, 0xb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB="180008005200080000004a0081de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b000008000c000000000008000b0000000000050019000000000008001f00", @ANYRES32=0x0, @ANYBLOB="435c990b8cf288f12ebb1331908beee99359341a370000000000deff00009f55d67993fde4859dbf9f42038cb0f4265826827ed56e16c18a9275444c73b7a3037607984510655af0e06e2e55afc65cb87d60b2a6785d0150c022e4664d96a7121b6889a9dbebe48540edd119ca77d5b79254b8acd52271a9188ef677da788c0e23d3a65058716dc6f5b7d055b95c40c41e0d26174b8761aa58997f38e3f7a850722f7b9f4b4edc03f42229de8569dc29eb89fc9dff70884e6f4a9cfe4c9130a1f028925edd4df8fc18ef4d480f456795a0fb92f8d6af714aaed6ed4fd26f5c54bd00"/237], 0x138}}, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000004c0)=""/203, &(0x7f0000000140)=0xcb) r5 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r5, 0xb) r6 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r6, 0xb) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0x67, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRESOCT=r5, @ANYRES64, @ANYRES16=r1, @ANYBLOB="7a3d05a162cf1cdbad40b8d921e7e52b933d379ae0143788f4b4f1c6d3fa2bb90f738e8d5b61e10df30d7ed13c87174796d8acc3d21673f7b0b9ec4aeb2aa122ca3561085246d2bfa36da019baaa6017ecb738944d6cc6c5b836d0d94dab03e2f1520ec9a38d67e4349aafda9f583a0108837894d5f6", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x20048888}, 0x4000000) fcntl$getflags(r2, 0x401) shmat(r5, &(0x7f00003fd000/0xc00000)=nil, 0x5000) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x108, 0x1d, 0xc21, 0x70bd26, 0x1, {0x4, 0x0, 0x2}, [@generic="5ef5bd7693e95bf6e80299abea12842b4d82fc055d05298cd3366e363bd1dfea40a6cc775c4007cbe09154c748550cd9b827b12a5cf2d114b0634ef6d205b14686d7886acc08b4225bdadf524119f4d164a8848cdfb409e7d19ed9d4a2a735e34d3ae7102e720944cc6dc8d03dd5095316802e4d83bf810790011fbc31f43e4245d9030e51293a25ca2bb91187c359c100b937802ecb60fbb14abac098982cb98f60fd8ff769fa612a1ba4c0a20f394b543311551f8f29a6c4b6460ae4e1b2274c2fd9311021d5b9317d5e5707c1690d502471066a4d1b0b6321bb3f12d6ff5d5b3d6037d10f5c090a51a7e1b365786399"]}, 0x150}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) [ 2026.478269] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2026.499313] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. 02:30:10 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3}}}, 0xb8}}, 0x0) 02:30:10 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x80000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:30:10 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(0x0, 0x0) 02:30:10 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 71) 02:30:10 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200210e000041004d4e2e7900000000"], 0x14}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f0000000180)=""/13, 0xd}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000200)=""/108, 0x6c}], 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000280)={0x0, 0x6327}) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x4, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1d05fdbe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) 02:30:10 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xf, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:30:10 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a73, &(0x7f0000000300)={0x0, 0x89fb, 0x10, 0x1, 0x18b, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x4ff6, &(0x7f0000000140)={0x0, 0x8026, 0x0, 0x2, 0x3b9, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) 02:30:10 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000001240)='\x00', 0x1a10c0, 0x1a9) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x5) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0xfffffffffffffffa, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) syz_open_procfs(r2, &(0x7f0000000580)='pagemap\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='pipefs\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f0000000440)='./file0\x00', 0x6, 0x6, &(0x7f0000000c00)=[{&(0x7f0000000480)="4cb3e64e2c25c0643fc0ee47f3339c1b82b8ea44cbf0c8470004c4ce4deb19dfda258a774e2b62aa57e04274fbc9dab3cd23a1db0c763d6ac6727b3dd70749c451003a58261a9643fdcd407c126f3471b7b0f69264da650c7c8e2aaac5780f3d5f6f1c5739c4f4559eee76f352a8398ff5a789195c8384f5e114ef", 0x7b, 0x20}, {&(0x7f00000009c0)="5fcab1a7da18c56f1b9b7537f2119ffd7a0a94a4681303082d2a9a41f6ba839c490d25b5c073568015dfda7d64792ef2f8f7fee5b5af1b9f1a72cec47bc80879fd8f40570401d15a28e1171a3d7870350d34dd988b834f206bc8dff77a392ba72310c25e165e7129c02e00ad5d5440c073acc219670e966b252ba262474eb47388fc649d647f0fc95e6f3b1a649ec04e0f63681dfe4b4de05bcff3997a39e908d953e2f6dbe138de063f2d9e2bb6cba3877ff1eab5d8a68d2f0ffb6b3ebc0db9585c7b31bdfff010663787e0b3b99f902ea0ad9428826aff1b5573c022acd64fb8e7593b7a92", 0xe6, 0x135}, {&(0x7f0000000500)="cd415d3966044966d3c1d68f3ebb034296bc362a6d3f153f26172f67b75e7906", 0x20, 0x1}, {&(0x7f0000000ac0)="096c8f026ae7568fcfc3417a8a85ad2151fd41914e2cf1633fc5f60b79d09745d17b0095af008f9c519043a599a6c4ef8ca24963c616e57cf2b16a358a6bad83136b13b73de8f9837d7e7a97d7157fc167e0ce45c2487238e5a48342ca68d94378e14514f2f43b536c83718ab1bc6d5874fe12be9b0bf350b4353fa8baa5cccff19b42baa121eb0ec28515dc865f39f6cfc01b2cd91637006bb749cd40702e56e0b8baac1af2bdb96d710cb5cc32bb08", 0xb0, 0x3d}, {&(0x7f0000001e00)="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", 0x1000, 0x9b25}, {&(0x7f0000000b80)="fd90ddd299c99f0f4f28ed508e2e7e524c7f67b1dc6fb41789a2eccec02edfdd205bcf95241f3b0626675b5a982f59fdfb95fa5f98e0daf4e7a12a8b48f8edf69c953d47157fc041d6bff7879609bee448a7be7454d2c1f9e8a8482b", 0x5c, 0x7}], 0x14c06, &(0x7f0000000d00)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x29}}], [{@dont_hash}, {@fowner_gt}, {@appraise}, {@measure}, {@smackfstransmute={'smackfstransmute', 0x3d, 'pagemap\x00'}}, {@uid_eq={'uid', 0x3d, r4}}, {@obj_type={'obj_type', 0x3d, '&^#)$^\xbe'}}]}) r5 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d00210c00000000000000000aff0f000000000000000000140001"], 0x30}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r6, 0x3a, 0x1, 0x0, &(0x7f0000000080)=0x2000) ioctl$BTRFS_IOC_FS_INFO(r6, 0x8400941f, &(0x7f00000005c0)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000200)="86881d18e0a4634dca41639461d6930fc5a1", 0x12, 0x400, &(0x7f0000000240)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00']) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f00000002c0)=ANY=[@ANYBLOB='gid', @ANYRESHEX=0x0, @ANYBLOB="2c73697a653d6b256d2d3474c82c6d6f64653d30303030303030303030303030303030303037373032332c6769643d", @ANYRESHEX=0xee00, @ANYBLOB="00040000ff9bd492c35891f93cc82c5208cc4494fe3e98f509c1c3338615e16a81d0bafbc05ac21892e21277a6142459205ead9b70f20dd2bec43edb079c8958f0b8b9313ab1ee5392654f9119f2c9089bc0b39b2a1e8479087932fd4ab56741ce18c3e6caaa5b5a4166c408e5885dd946eb5f9aa9728f5bd3f112c9bc2c12afd9f094101bfd61c9000000007a1f0252fcc51e984699bafd139660222456c09d034f6d0205e2a01b744bfb14cecda511aefc6352b7"]) [ 2042.099300] FAULT_INJECTION: forcing a failure. [ 2042.099300] name failslab, interval 1, probability 0, space 0, times 0 [ 2042.101991] CPU: 0 PID: 11258 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2042.103820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2042.105788] Call Trace: [ 2042.106448] dump_stack+0x107/0x167 [ 2042.107305] should_fail.cold+0x5/0xa [ 2042.108214] ? create_object.isra.0+0x3a/0xa20 [ 2042.109288] should_failslab+0x5/0x20 [ 2042.110195] kmem_cache_alloc+0x5b/0x310 [ 2042.111181] ? __is_insn_slot_addr+0x14c/0x290 [ 2042.112255] create_object.isra.0+0x3a/0xa20 [ 2042.113280] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2042.114509] kmem_cache_alloc_node+0x169/0x330 [ 2042.115591] __alloc_skb+0x6d/0x5b0 [ 2042.116458] alloc_skb_with_frags+0x92/0x570 [ 2042.117499] sock_alloc_send_pskb+0x7af/0x930 [ 2042.118604] ? sk_alloc+0x350/0x350 [ 2042.119463] ? perf_trace_lock+0xac/0x490 [ 2042.120443] ? SOFTIRQ_verbose+0x10/0x10 [ 2042.121396] ? lock_chain_count+0x20/0x20 [ 2042.122407] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2042.123594] ? ip_frag_init+0x350/0x350 [ 2042.124541] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2042.125669] ? ip6_mtu+0x1e9/0x3d0 [ 2042.126525] ? ip6_setup_cork+0xfb7/0x1740 [ 2042.127521] ip6_make_skb+0x2df/0x4e0 [ 2042.128409] ? ip_frag_init+0x350/0x350 [ 2042.129352] ? ip_frag_init+0x350/0x350 [ 2042.130315] ? ip6_push_pending_frames+0xf0/0xf0 [ 2042.131438] ? ip6_dst_hoplimit+0x199/0x440 [ 2042.132446] ? lock_downgrade+0x6d0/0x6d0 [ 2042.133437] udpv6_sendmsg+0x2128/0x2b40 [ 2042.134426] ? ip_frag_init+0x350/0x350 [ 2042.135374] ? udp_v6_push_pending_frames+0x360/0x360 [ 2042.136584] ? SOFTIRQ_verbose+0x10/0x10 [ 2042.137549] ? __lockdep_reset_lock+0x180/0x180 [ 2042.138674] ? lock_acquire+0x197/0x470 [ 2042.139606] ? find_held_lock+0x2c/0x110 [ 2042.140573] ? lock_chain_count+0x20/0x20 [ 2042.141543] ? sock_has_perm+0x1ea/0x280 [ 2042.142556] ? __import_iovec+0x458/0x590 [ 2042.143526] ? udp_v6_push_pending_frames+0x360/0x360 [ 2042.144736] inet6_sendmsg+0x105/0x140 [ 2042.145648] ? inet6_compat_ioctl+0x320/0x320 [ 2042.146734] __sock_sendmsg+0xf2/0x190 [ 2042.147644] ____sys_sendmsg+0x334/0x870 [ 2042.148602] ? sock_write_iter+0x3d0/0x3d0 [ 2042.149596] ? do_recvmmsg+0x6d0/0x6d0 [ 2042.150541] ? __lock_acquire+0x1657/0x5b00 [ 2042.151576] ___sys_sendmsg+0xf3/0x170 [ 2042.152494] ? sendmsg_copy_msghdr+0x160/0x160 [ 2042.153564] ? __lockdep_reset_lock+0x180/0x180 [ 2042.154688] ? lock_acquire+0x197/0x470 [ 2042.155622] ? find_held_lock+0x2c/0x110 [ 2042.156588] ? __might_fault+0xd3/0x180 [ 2042.157521] ? lock_downgrade+0x6d0/0x6d0 [ 2042.158550] __sys_sendmmsg+0x195/0x470 [ 2042.159489] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2042.160504] ? lock_downgrade+0x6d0/0x6d0 [ 2042.161496] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2042.162653] ? wait_for_completion_io+0x270/0x270 [ 2042.163774] ? rcu_read_lock_any_held+0x75/0xa0 [ 2042.164859] ? vfs_write+0x354/0xb10 [ 2042.165731] ? fput_many+0x2f/0x1a0 [ 2042.166608] ? ksys_write+0x1a9/0x260 [ 2042.167495] ? __ia32_sys_read+0xb0/0xb0 [ 2042.168451] __x64_sys_sendmmsg+0x99/0x100 [ 2042.169439] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2042.170670] do_syscall_64+0x33/0x40 [ 2042.171546] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2042.172746] RIP: 0033:0x7f9688118b19 [ 2042.173607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2042.177941] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2042.179742] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2042.181407] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2042.183078] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2042.184737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2042.186435] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:30:10 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xf0ffff, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2042.228880] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:30:10 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r1, 0x2f, 0x6, 0xf5, 0x295faaa0, 0x30, @remote, @empty, 0x0, 0x700, 0x3, 0xffffafaf}}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="e23d62dfe76ca9018033ac72adea963d51aec141ef2ee5a4a4aee676ec1787d096786b72bd973ca57a65e00e52151a0538818d47f2bcd16ab618cff1242b5804dc61cda284bd44f732fc14adc2db591dd054749c554bfdad90be661b023ec35e55202d817e6f4d206b9a31637dae4de42ba1a8387a4c2928108009bfcabf2a06f53359c0bad919bc2e5b64316f7df4ec6414cbe874c2733570e40bd4fc8ff6aeef9c6b2685a755f38b2488a27dc3d52088caca44d29cb0a1e66fedaa11d3a4f4a1b19b9dbc513b675945", 0xca}, {&(0x7f0000000440)="a92ac1e536b0b3282d6316a538dfc5a69d00e76a7b4d1c11ae3e5d9fb643a9b000d9256ffd97da88001014032ac769fefaaa954c09282aa9e8239a70a8efcdda9b2bfba60281d1d4ec5eb47f38f756d61fa911f537301801af7a72577e114ec13fa9276b788b9edae98d1c5c0ebe3a032e206f0f5dbb978f6b8684981d5ae46850c08d6e58db6107425441cffb61270878e34180134bdff19f33cb0954b13345de366fc8fbf5faef59b2771ad765b21211c5e5c3ab8fa608b815159e", 0xbc}, {&(0x7f0000000c00)="84efd8b8c79c8e76aaac2a70a978b88ff7218c27bde3269a9c94bb3949dcfd0980593254c65a00c88bc6432df97fee1311d2aea269adcf9a2cefe9e89a54e3e6d4bc06aabae49aaaf723575991881ae168ee5d7bb2af1b1226c67465546af12cd9cdaed6414940ac61be23f240ff3f2eb34b82388f04a27e63241a51062fda086036a11cb02e0571af4d68a8607a0ab7573b4a861a72a7721a835d2e6aa0bd875ae2044bf6a0753418c2dbca5a933400a017e06cc3c6419f3f9f4163290b776b38a30f2371cba0e6c7f8e1e6d743350f4ea31aa2cad037c3ceb044d4747b6d0f129fb535ef41553b0dd743d779efcb9e4bcdaecde8336db3912bfe2dddfae5b8c82d17fd6651f28162d923cc2e6e601110dcf3b419943e1333efa45d6dbd267a6a503f5d7c31807be699424cf7b0f7004743b78774f3db7e37d9e7aec82ae36bc25eb6da4412e54ae75518fa69a413aea5ffc3fbdd13a5558410e085b4f5b9895e5cdbc2907e978fd599fce5495f3eedbbd07c9e73ac6fc553b6b2af16c8a1bdf1886c0a025948741b13c600c1f3d9ebdc042b43cd4bccc2c3ebb5c2ed196cc76082fc2fbdca26cfa07e9902664a6663245aca6fc743bd86e3571f7b819d3de4007a3c506a5aa0c9a050b4458ef0747666e3395b2d9af64acfeb92518fc71110aa7a9fc0a44ba20caf2c65c30c6cd2442ebbb0ab6d205a57ea88499b568a3e8cddf4f41a4573d2479c1f475b3b9b34e9e7e89c265a21e882ede85ebce98853c861d069610df5f6465587317359cee42ff24e92bf71c811721a19644ba1a9e43dde7eb37f836aeecad8ea5001862eddf57d87437a85d4b9ed03fd6bb6695589989d7db78b986c8a4f02af8189fe6d84b0abeb8498a6b618332491d346c14768bf46ee2442f87375fb8c97e4ab2f05dcb38fa02bd6b7d2f4746405fb6155a5d9aea8e2afe52768f6c3e61a44464a07fbd5b6befeaedfd8dd4d9615e3ed6d57763f31d3310bb807f01e4407495f7ac0cbf03083b2cc540dd903edbaa1ba7568f9d5ad07ffe98a320ca6973794f2cc9a7f684bf400b9334cbdbd8f0d5acf63caf42c263307a64ce2547319c652a32f8a8bdfa3be61b8e1861211e7de827166b3066d8cf70c0ef2fa07b07acfcf35ff1f97a16c7b72333244b9c4f69a5ca5efc7def7cea8848201c6031e495ef1dd3b6c482f0a8d4b9bb3f01d80f6d7182efb6ce7a5229585aacc78561cc726c99925c96699749132d11fd67fbe3fa60cee4725e7ef01ea4901ca2632ffcd66decbf7b947b002fe769935d3f1acd47446acd612709e11457a6fe99d1ddcca7cff640569537fad6cde8cf9ccbd7bd4c6a0f93b0391593291808e2c7767b3e793fa2c4dab45320fad71a4b828cd44d5f7b660281b7dbd799d8db5269c82f417b4bb63ad4f54d5dad84bcd3556f4cf914cf9810c3962dfeb4724bd845a1c5e3b280fc119c92d1986f1a3ceea096838ca3841d3416c6f8c59e00ecb138150b3619b231062db2a6c50c6533aa9e944d69c0c215ffd102f411b0c3c177fd55068f15c5d6912c10b0cb27f53f1a25c1eeea693fa486879f82524fea7910e8538ba9f3e3253c93055ce8ebfbbdfcbb4fa430425e2b2217892c869ddf340c6161dd545701a65bd2c54da3d93a9bac9db984d1931b27f75dcf6262eb67ef904249eca972575ccdbb308ee2655c00043a28a20d9353369b98e01f1fd64f776f9831cbf2a55509f66c0b43c45b629274545aa8c45bbd9bb74b66b8c2034f06a172e235adcb9a2e66505ce0d5da47345881b11e6f91215100887fdfdb789bd72352b1adae9d6924389070e189eeaf6049662a7b3731e167c198f095fedb7fd5cd6db28ad3f1398bb940c5da00f0cad63d8ec853e6d035599785bb1d87450afdd6cb58fdc0e30ffedf97c797b361cc56f643d92df754c2bc13306ee3240b9269fd4f7cf37b4f93729d2f3589ce485b7891721971f9821af9907d09de2c69aceaedad3657413d45be2d2b81aff43dc1126847fda136fa216092d9b232382c116ab81cdfae1ab0b0eeeecbd0c01b37a5131ea22a494a1af537138c2592b83ab008c7999be5246a2cf5833202776833036174d78415b66364397c44eafb5268eb7f34d774477f32387d175bc666e8a97ce263d08dbf8ce226679f8d5a4e053d8145ce2a5f7db63f9761b7a5b07aa699516b63ff2a7eea18acfce471a6140a91f78227bfd158f466d4b64285ec2190d5f5bb684a320fea4f673c1d712cad63d9dc1d3005ae09cf2286603e8cd318bb0c01de5346184202808b20c275c5c65c35bda4ac9809bcd08850d448a611f7423e38811a93c309970f5cd78964280b27df251ca0b67d4f9babc321175323deea819d477971faa0181343459f301f9360b80f390fbd5e8cc6fcc0b28cb38a7d6a2d6b3b8079fbba174a6537767e4e330005b0b5fb722dc44d2d4031da28e91e8ea3e8bcb4173ddc3782955f1d1c6e891537770fc2d6a4d87cb809c00c41928ed49d04881cfe5c45ea9a5a3fcad6be295240990d24adbd2721d44ee422d01c4ca3613d858fe6dc6d011976230a97b4d040f610c0f3a5bb2d144f129368ffb57a7f7d246be6726895b4a2029c01a93ebe34dfdc972e4a8fefcb747dcd9c6a61f287bb1e24aee1141daaf08396e8ae5cae8156d3253114e3c6ef6bb4c3b143574fa4fb95f70ac71340eec1f0226d494c00d2c203f5eecd1e96fad09b16285f3e38fbe2a552ab690a542fc1055aa6d260ab23f58f6412d26fbb93181222ed56c7d3052d1ef58cd8db55e189b8d3e2fb96ae790c87687b0d7d66f9babd0266bc081c7b6b7e422814e417565816d0aed40705783b9ec669fa6e8f098d40c27a9ebc52c6d659df57c087ebc29e289c99ce73cabaf5f7cca4ecac77069b8938fb9b96c950f753a7af4ef70742171b62704872c477636a052f2bdc00d73e1ef9551d1f1d035457959877bb618088789ed843fb17d35afc69336ac9e7c7ed1f19e7c8001767a1b23067bbfa0cd1e1ec0d5ae6b877300900dc5efe5eda4d32623b3ca9190347e2b247145b83ddef8c68a945675761d19c8dbda6dc2007a7c38832a8596adce6c88d6c4020ccf8e6621ca88754fc9202c80fd5585972d986b63133d779eb2ba725d3d2ba3b24624c1e38d498a31d1418b2c1cb9d9695bbee425e0189f4f2d8dcb18da1fc4e071476569246668eb73feb90781ef8a5547fb319793e33d2a2e19705831848549a86a25cc2dff29a321d1ac61f699ca65d5ee89340a550243bddf8162188469096b3c17bc2ffb749de96df01ad5f29dd0334248248e58b6956f17850102e1c5cf803836c8d2c15b39624548a642a7c3d5038299a5884d06ad2cfa4e7e309679fb0a472222cd9e0a5e15257f0bee6ee24e31bd110d60eed67335bd86d9e80c33b6b6ff3b3656cc2f18969f958a3b5ecdf88981cf21fc1a8fad1c6df05f864301f71d4b9aa5f99dbe7079facb35fbba6c000887d543fa912f957845d10fcaec67c672dda0a4d19d234287c728a4b04e79e0203de00e1fa27ffe2b21faea9cc92b0d7748dde64cb4ac605c5aad0a77c6f0ad501e5017cba9594c7a32280f3238803098440c8742000a47dc6e71679a5eaa8103d9eb47fa036ca7d373a39cb9c42780c3ed891672390e6c2b4ea8f7eac95b407906e8e7e39abcf5649f24d53c5641de4699c4b62f7b9826ecf2d07267a188aec0180d43f07bac2166cfabe69bbfaf41922c64236f24354358db5aca487f60416c74ffb6b1875777f4259bba86e25d52c2522ec834657503baabf4262bdac9f4c32ae02bcba79e21e9cce50fe4c2da84119109590f8159412b521cb7f2bcef9f749c1c8b43751ec0e6f416ef3c76790cce27a69618a8fcb60879d5dfd5bad1546b4603c3589c2fb37606f34d16f606b7bf19036ba27617f51c45e9d6c50a8b2c87f4816111d14b592ec8e284ce79d3c03cb73f1a9f40f9236ca7b22665b7cfaec803a71fc4ba9ebc024fcbaf923d10f1a6c4bd799185343ee85fa0bf56932d833fa813692f12883cf9f7668216aea9cc87df700d4d4c852ff41ea7a5c4c7ac89da773057996ca6c7405d4a02f7edeb3018e6e53a421a1fcef31331a17f6624842f1b616f787168f323da3e734eb289cc7d83302fb2252441e4e53f70ac23b390950b77bd20eafae41a40adf708f1aa4a2cfaf3b2ec27e10066317227b6a798dd07aa3692a6162f863c79d14c4d6cb8fae797beea2a4ed334e666ff045d1ec5abcadf340684ef1b32748f52beeb09708853a77c5a9088b4c6530c912eace3ee8f398f3b0086322434620ca46f1ac601a97722997afecf42c554fafddd3e3a7adc4811fa39acced671683eb77d12cc7e428b69a879bde8fd25842bf37bfd0b1e312e87d3dd1b1083605fe2493c8881a0a5cb1c8e5f1edb72e496a701dd49075cfaead7f63bb6a69800611d2dd9de45f844cde6fe7357a3b48335b1c4e460a16eee0a042de03daec1f34196afea65a7e7e872b932d4a986dd9441cbd1283ca9f202d3666a14c96e1b89e108ba7cc6ed01f92959c1a739b911e7d6ebb31599909f6b633a3de32e994848d011170de666e92a0a6ccda5b6db598762974419ccaead246ee74d707181c5c859812085e7bb7188fef9a8696cf9f2d6de68b57e99b5fd34b233d248022fa99d92381c75f18668ff2142e84b82df734f877ec3972c0966764593aeddef1d8f28b96be93954b8474803eea713e2a985deea3e1d8c38e421e9888e2c0116ec9b732b77780a7103c3dd4b32f2755333059fa548b90f4614ad28994d7e9f306935a1ac782bd0571cc898b12af2967cb0c904a714439391adf3c0477505c32ef660b7d200605622719214b3c77dbe6572eca952e256057d932a2690852261e632c2d78ba74ee8d7e67679e24373b8604f9e0fa788ae7f437277db715ab05a14df80524521edaa0284c0b851487480fd4d673c5b01b397740bea19456bdb46161fce7c62a00a92cb557a2aa79f16ff9596c3a9ad98f1cda89a4c069375b6c85466de0c168b5fbe7043ff2a2ea6e6bf6fe32f10cf045fd21d89646faa57d48f61b166afc958cb1103e4034d0d047dd82bc351758fb96f47581a63112837f52c02fedbf96d3dfd0996a96d759004e8bd89cab2ee80bca524ee6093fc6d873378a8776868ac4ab8d3d648bd244a33c77d6f732f8a9baa566a0bd2f810a9ab639e65522232425e92555f0fef7e29f0eec3ab2b1be4e2c67c5e6241a2c19c86a599cfe8d24b8c9c1edf861e38f6431ee4403d5917587f8d8597f033e06151d87e2a5ef84f002cd5628cc43bb744c270ce08fec863b60309064d4b7173cabc7f28b22ebf41a9d20aec193e5bf45dd2774084ccf4b4104833c9473cbe574d9112b3e06eb120a4b26714b7bbaa947560541def81654eb5f8c9a1f84e10af63646b8a1459b82c0022e612463806b36edb78fd8b6bbb39c8460d7297bfb00972345b74ef59f18baaf7af3e5603caa2610ad0a16125f5d4b96123bc96be93dd1fa9634ceaec336845269c3297ab5660b43f55d2b5581bc7efe66fe1e4dd3cbf03b8f910b79afe9be9f585e3aa22521afcfe51bf4547ea310d7160ebca3a80f8780d56f104af479f475c5ad1ed62261feef38efcf9cdd588789446ab65f43446d243c1be15aa72fbc3d1aa5dddb3b8cb928b436efbdb28fcf6147068f33ab8fcffbac834fcfe5e7f36b7646028bede8527923a3e8d241b68938b291069ac688184e2f5d927b78fcc3fb8961ca02db337399004ca132f0dc1c72d61", 0x1000}, {&(0x7f0000000000)="328605d010af31cf02b793d6e573a37d0fc800abd9eb8762c1f48701d57d86522320f9dab6be14ab3a38", 0x2a}, {&(0x7f0000000500)="9f3eec39dbb0114b5b0a861d9b3842e87ce7f14fd035d7c099f5c80302ea45c1e12cdabebd0bc68f23bcce1c443749866e4f200fc50a0c13e53367becb9048b281e5c9e18acc0835d13c7beb742aa264cd", 0x51}, {&(0x7f0000000580)="634334f47dc24423e39e4b6e698173a7f5897cf6147bcf62351f04027fbf4df5228c752607a471353d34c24c1982aeb15991050a3e2d88dafc976e281468afacc9753eefe2d34efd5b3f55a7c6c7032a3726efa88be028194362fc33c3c269619f21ae37d40d76f767f430aa089788e55ec4a3c6361680cee74bcd3d2d0cd30e1488120f2e29", 0x86}, {&(0x7f0000000040)="ee9c90edac94e17648769f18ae", 0xd}], 0x7, &(0x7f00000006c0)=[@tclass={{0x14, 0x29, 0x43, 0x400}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x87, 0x2, '\x00', [@ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @loopback}]}}}, @hopopts={{0xf0, 0x29, 0x36, {0x3a, 0x1a, '\x00', [@ra={0x5, 0x2, 0xfb10}, @hao={0xc9, 0x10, @private2}, @enc_lim={0x4, 0x1, 0xfb}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x6, 0xb4, "e6b9303c8921227750a47c74fb1c671e5ccda756d47ea083099f50efa187129dba4a4095d353bf287c252b2d07966bdae1bbd00667e86d14d555a3b718dc44c10804281551c79eedc8e001af38a75cbc36992b16adaa61e247dc60c0382524a4a431f7bf6db5118a16c2d82c24c3f11d52d337bacaa8c7c6fd342abe7f0bcca041710048fca2447de1ad3b27c7619fbdce2125e8895093b0aa31a1e2fe70fc3adb0ffdcbceb7a18562dce1887c92b9f62a1be1c5"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x8, 0xe, 0x1, 0x40, 0x0, [@local, @rand_addr=' \x01\x00', @local, @dev={0xfe, 0x80, '\x00', 0x22}, @ipv4={'\x00', '\xff\xff', @local}, @local, @local]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x5e, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @hopopts_2292={{0xa0, 0x29, 0x36, {0x89, 0x11, '\x00', [@pad1, @calipso={0x7, 0x20, {0x2, 0x6, 0x4, 0x0, [0x7fff, 0x5, 0xe5]}}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0x20, 0x2, [0xfffffffffffffff8, 0xffffffff, 0x9, 0x3ff, 0x0]}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x89, 0xade1, [0x8, 0x9, 0x7]}}, @jumbo={0xc2, 0x4, 0x8}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x2c8}, 0x4041) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "c009b39830e4109622d7a29d0bd42e6d365c8384f665a2104b6faaa5427626b93311e77f0de4211e1217bc355a5246327eb7ba126bf7e4adb45535a4d9757c77f555e42c9254e9f9089be590271f821f5f6b632da2dabf1d6e618629da57a34a33f5e913338e628f32d84f60dbb9f94b70f1828e7d652bb2443c02901738d15cd72d14288f0d47dfe96e49988d0402f96628f97be361723e018daf71ab695fa4726664c00ec9aa53b8c092760da4cd088f03fad6504eceb8949dc35abc6c9f51916777bc38aa3669fb220546dbd1024eb87da205b46ec35180a8fcb898160855b5044023da75f2b1f285c1462a8afa95492a14be3f42052ff535612d226506a0", "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"}) 02:30:10 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9}}}, 0xb8}}, 0x0) 02:30:10 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(0x0, 0x0) 02:30:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x3}, 0x9) r2 = mq_open(&(0x7f00000007c0)='\xc4fdn/\xda\x1ag\x92\x05\xdb\xe7\xf2\xaa5T\xb5\x0e@\xa5\x15M\x1b\xec\xbf\x97\x05\x00\x00\x00\x00\x00\xec\xa6t\xd7\x01\x81\xa7\x81\xc9\x8dNK\x02K\x89\xcc\xfd\xd4n\x06\x8e\xd3{\t\x1d\xf5f\x9e_\xb5sF\x90\xe0\xf4\xfc\xa7\x9a\x16{\x87K<\"\xb9\xea\xb3\xefh\xfd\v$\xda\xe8x\x1e\xe1\x97S)0q\xd3\xa0|\xe5\xd1\xd88\xfcZK.t\xe9\x831\xc9\xd9K\x9a\xfe\x14\x14yu\x86\xb2O\xffOO\xe4/\xb0\xc9\xbbB\x99\v\x19\x06\x95\xb5\xd3r\r\x91d0\x9b\xb8-\xbbx\xaf\x051*\x01\xa7\xfb\\\xc4\x1f\x1f\x81\x98\x9b\x1dz\xbc\xd2\xcdc\xa3\xda\xa0\x85\xccb\xe2\'\x04\xf3>\xc1f\xf0\xc5R\x04C\xbb\x9a\x94\xb6Si\x80\xf9\x02\xcans\xee(\x8f\xf8\xfb\xcf$YhQ\b\xa1:.\xc1O\xc8\x885\xf6V\xb8\xb3\x00}\xe4\x11`[\xda(\x94\xd7\r\x1eJ\xeb\x1f\xa4\xde\xd0\x9bo\x94y\x0e&\x01\x90#\xe2\xb3\b\xb0-\n\x90\xb8\x8a\xca\x95\xd2\xf7f\xbf\xdb\xcb~i\"\x98\xa24\xb4*;\xbb\x9f\xea\xf0}^\x16|5\x7fi\xc8\xb4t\xfbv:R\xec\x8b\x8d\xa6\a\x8e,\x96\x8f|W@{\x99w\x1fD\x90\xc3k\x925\r\xa4T\x91\x1a}\x14\x87Q\xdd\xac@6XOC5\xa5\xdcj\xddG\x16w\xbc\xe1\xb7\x19\xd6n1\x84m\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x83, &(0x7f0000000200)={0x6, 0x4, 0x4, 0x1}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c460104000100000000000000c0030003008c01000009010000000000004000000000000000a70300000000000000800000040038000200070001010500000000700000000008000000000000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000000000000000000000300000000000000010000000000000006000000040000004f96338ba86e73dfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405e66db71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/658], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2d, 0x4, 0x1, 0x7ff, 0x0, @local, @private1, 0x8000, 0x20, 0x1f}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f6d696c6530003c810000008a13baddeac60f0a9d864cfd98f2b8424d418c32b24a93dc96fcaced60d27839a5e5dddf222669021494e0"]) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r7, 0x550c, 0x20000000) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0x6, @local, 0x9}, 0x1c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 2042.313424] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2042.325518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=11280 comm=syz-executor.2 02:30:10 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x48, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2042.357113] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. 02:30:10 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x1000000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2042.365327] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2564 sclass=netlink_xfrm_socket pid=11280 comm=syz-executor.2 [ 2042.383413] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:30:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000300)="5807ac48cbc924cc87529bb7d0d99c8ac43050dc65a3e4c06e533dbcc6a494cbd7a79ea467a0f939df8082276e291f60c2c002216c4045faa6d5a3bd9026a0b6e3d8e46b0a7e9c3343ace06001355ae821b1d6cf486435ebd26f9cbc897e773052b5424d943656daddc3d913d81379e80c3a251483f4e034b187d7b18c92f09933c409a9f8a4d16d71d536aed6179ade43b0f605ae3724acd10500e93e52bb17975b27bd45774389", 0xa8, 0x1}, {&(0x7f00000001c0)="0aa1867d1eaaa830150c2c58c4664a6a3f7392cd27aad5a80c22fd1af57b00de4729354d43520917e030f48e5a32e50827b5dec825345fb4b708bfd3716809f5d4ddd28dfaaa3a5b8e4eb0d2dc8eb97c3bc015176ae5a69e662920661fce2c09633a6c8780445a0d294711bb94ffa58c21b211e777912ae6df5f3f32d8366edd72e71b930cb645b9a49c", 0x8a, 0xe9}], 0x28, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x800, 0x1c) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x100000001) sendfile(r0, r0, 0x0, 0x100000005) 02:30:27 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf}}}, 0xb8}}, 0x0) 02:30:27 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x4c, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:30:27 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = epoll_create1(0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r3, 0x0, 0x0, 0x9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x11001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000004", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000009001f00706879310000000005002000010000000c000500000000"], 0x34}}, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x882c2, 0x0) fallocate(r5, 0x0, 0x0, 0x1000002) r6 = memfd_create(&(0x7f0000000340)='\x00', 0x0) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) finit_module(r6, 0x0, 0x0) close_range(r4, r6, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r8, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) 02:30:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x10000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f00000105a0)="0000000000000000000000000000000000000000000000000c0000de46b807b70b0000000c0001022e00000002000000e80302022e2e00"/64, 0x40, 0x13e0}, {&(0x7f00000105e0)="0000000000000000000000000000000000000000000000000c0000de5551aadd00000000f40300"/64, 0x40, 0x17e0}, {&(0x7f0000010620)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x1be0}, {&(0x7f0000010660)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x1fe0}, {&(0x7f00000106a0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x23e0}, {&(0x7f00000106e0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x27e0}, {&(0x7f0000010720)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x2be0}, {&(0x7f0000010760)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x2fe0}, {&(0x7f00000107a0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x33e0}, {&(0x7f00000107e0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x37e0}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x3be0}, {&(0x7f0000010860)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x3fe0}, {&(0x7f00000108a0)="0000000000000000000000000000000000000000000000000c0000de2b607f29", 0x20, 0x43e0}, {&(0x7f00000108c0)="ff07ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x400, 0x4c00}, {&(0x7f0000010cc0)="00000000000000009f09c75f9f09c75f9f09c75f00"/32, 0x20, 0x8c00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f0000", 0xa0, 0x8c60}, {&(0x7f0000010d80)="00000000000000000000000000000000000000000000000000000000acff0000", 0x20, 0x8d60}, {&(0x7f0000010da0)="000000000000000000000000000000000000000000000000000000000ee30000", 0x20, 0x8de0}, {&(0x7f0000010dc0)="00000000000000000000000000000000000000000000000000000000ce1e0000", 0x20, 0x8e60}, {&(0x7f0000010de0)="000000000000000000000000000000000000000000000000000000007f6e000080810000003004049f09c75f9f09c75f9f09c75f000000000000010002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000005620000", 0xa0, 0x8ee0}, {&(0x7f0000010e80)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00;W\x00\x00', 0x20, 0x8fe0}, {&(0x7f0000010ea0)="00000000000000000000000000000000000000000000000000000000fbaa0000", 0x20, 0x9060}, {&(0x7f0000010ec0)="000000000000000000000000000000000000000000000000000000004ada0000c0410000003000009f09c75f9f09c75f9f09c75f00000000000002001800000000000800000000000af301000400000000000000000000000c0000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070fa0000", 0xa0, 0x90e0}], 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0075dd745b6565c108937f8713d55881eccfae6cc2e08b7ac90cdfb7e9a15a940c59a419680e3332e4733ba38a27ba255f1dd86aac406246ac4862f962534f9e0138a209e95970e43e11e7cd4e76fcffffffffffffffff20114832db1130ce6dc28f347680d29c2a729b29436984ea24d2245b7346cb7fd6b3aabd781c8cb7ef9ef13a10633c478896d482aa132cf4f9fa107b049ef900"/166]) r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'batadv_slave_1\x00', &(0x7f0000001840)=ANY=[@ANYBLOB="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"]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200bd5c948598f862c78b000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40"]) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000540)=@v2={0x2, @aes256, 0x0, '\x00', @a}) r3 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r3, &(0x7f00000000c0)='./file0\x00', 0x0) openat(r3, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlinkat(r3, &(0x7f00000004c0)='./file0\x00', 0x200) openat(r3, &(0x7f0000000040)='./mnt\x00', 0x4000, 0x11) write(0xffffffffffffffff, &(0x7f00000005c0)='foo', 0x3) 02:30:27 executing program 2: clone(0x800, &(0x7f0000000000)="40bbc7a78471d85e31ea9fb36bf832e047c539af3904c760cc9be9cc1b8d40aeb6f8125f689be33ec5f686c15933fd2ea001d64e819842db54e3d713ebc89d89e85d064bc2f8c5ed8b9ef98e53eaa4a0392d24a32c04f82c42", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="ac12a4154d33a3c0e710fe5f4eead116258e9ffbd54b1b80600ae37c3181a8463d95084e98efd9694ad227bde5ce788ce691aef30178bae3894f8e6eca4929dd713beaa20f5db4f8ba7e9ce26761c6266d6476eff6b160c406d7f70ad9810e5ef9de4a91f2bb7228f9c5ba68c8a5cb55bd37c13106239dfd6f57a833da191c969c822fbde78bb16b8de37318bf681d25791334a7d4835f6a53a16335c5db4acc95bf72cef1ec8b0335f0609821b7016f0ff6245a66bcacd2a9e0") perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev, 0xffff0001}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 02:30:27 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 72) 02:30:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x2000000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:30:27 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2059.545725] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2059.559474] FAULT_INJECTION: forcing a failure. [ 2059.559474] name failslab, interval 1, probability 0, space 0, times 0 [ 2059.561777] CPU: 1 PID: 11311 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2059.563179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2059.564815] Call Trace: [ 2059.565335] dump_stack+0x107/0x167 [ 2059.566062] should_fail.cold+0x5/0xa [ 2059.566842] ? create_object.isra.0+0x3a/0xa20 [ 2059.567748] should_failslab+0x5/0x20 [ 2059.568503] kmem_cache_alloc+0x5b/0x310 [ 2059.569313] create_object.isra.0+0x3a/0xa20 [ 2059.570172] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2059.571184] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2059.572188] ? alloc_skb_with_frags+0x92/0x570 [ 2059.573111] __alloc_skb+0xb1/0x5b0 [ 2059.573846] alloc_skb_with_frags+0x92/0x570 [ 2059.574738] sock_alloc_send_pskb+0x7af/0x930 [ 2059.575637] ? sk_alloc+0x350/0x350 [ 2059.576369] ? perf_trace_lock+0xac/0x490 [ 2059.577185] ? SOFTIRQ_verbose+0x10/0x10 [ 2059.577988] ? lock_chain_count+0x20/0x20 [ 2059.578822] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2059.579831] ? ip_frag_init+0x350/0x350 [ 2059.580640] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2059.581589] ? ip6_mtu+0x1e9/0x3d0 [ 2059.582287] ? ip6_setup_cork+0xfb7/0x1740 [ 2059.583139] ip6_make_skb+0x2df/0x4e0 [ 2059.583874] ? ip_frag_init+0x350/0x350 [ 2059.584654] ? ip_frag_init+0x350/0x350 [ 2059.585453] ? ip6_push_pending_frames+0xf0/0xf0 [ 2059.586401] ? ip6_dst_hoplimit+0x199/0x440 [ 2059.587243] ? lock_downgrade+0x6d0/0x6d0 [ 2059.588077] udpv6_sendmsg+0x2128/0x2b40 [ 2059.588880] ? ip_frag_init+0x350/0x350 [ 2059.589658] ? udp_v6_push_pending_frames+0x360/0x360 [ 2059.590684] ? SOFTIRQ_verbose+0x10/0x10 [ 2059.591509] ? __lockdep_reset_lock+0x180/0x180 [ 2059.592455] ? lock_acquire+0x197/0x470 [ 2059.593255] ? find_held_lock+0x2c/0x110 [ 2059.594079] ? lock_chain_count+0x20/0x20 [ 2059.594929] ? sock_has_perm+0x1ea/0x280 [ 2059.595772] ? __import_iovec+0x458/0x590 [ 2059.596608] ? udp_v6_push_pending_frames+0x360/0x360 [ 2059.597646] inet6_sendmsg+0x105/0x140 [ 2059.598445] ? inet6_compat_ioctl+0x320/0x320 [ 2059.599348] __sock_sendmsg+0xf2/0x190 [ 2059.600129] ____sys_sendmsg+0x334/0x870 [ 2059.600956] ? sock_write_iter+0x3d0/0x3d0 [ 2059.601803] ? do_recvmmsg+0x6d0/0x6d0 [ 2059.602595] ? __lock_acquire+0x1657/0x5b00 [ 2059.603471] ___sys_sendmsg+0xf3/0x170 [ 2059.604247] ? sendmsg_copy_msghdr+0x160/0x160 [ 2059.605153] ? __lockdep_reset_lock+0x180/0x180 [ 2059.606085] ? lock_acquire+0x197/0x470 [ 2059.606883] ? find_held_lock+0x2c/0x110 [ 2059.607699] ? __might_fault+0xd3/0x180 [ 2059.608490] ? lock_downgrade+0x6d0/0x6d0 [ 2059.609330] __sys_sendmmsg+0x195/0x470 [ 2059.610131] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2059.610999] ? lock_downgrade+0x6d0/0x6d0 [ 2059.611840] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2059.612798] ? wait_for_completion_io+0x270/0x270 [ 2059.613756] ? rcu_read_lock_any_held+0x75/0xa0 [ 2059.614678] ? vfs_write+0x354/0xb10 [ 2059.615419] ? fput_many+0x2f/0x1a0 [ 2059.616138] ? ksys_write+0x1a9/0x260 [ 2059.616896] ? __ia32_sys_read+0xb0/0xb0 [ 2059.616926] Module has invalid ELF structures [ 2059.617704] __x64_sys_sendmmsg+0x99/0x100 [ 2059.617740] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2059.621504] do_syscall_64+0x33/0x40 [ 2059.622571] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2059.623828] RIP: 0033:0x7f9688118b19 [ 2059.624701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2059.628998] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2059.630798] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2059.632472] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2059.634131] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2059.635812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2059.637523] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:30:27 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2f}}}, 0xb8}}, 0x0) 02:30:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x3000000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:30:27 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x68, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:30:27 executing program 2: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000000c0)={0x8, {{0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0x7}}, 0x1}, 0x90) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x8, 0x2, 0x2, 0x0, 0x80, 0x277}, &(0x7f00000001c0)=0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) utimes(&(0x7f0000000040)='./file0\x00', 0x0) 02:30:27 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:30:27 executing program 5: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x18) r0 = syz_io_uring_setup(0x68d2, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x4}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index}, 0x8001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd, 0xe0000, 0x0, 0x1, 0x0, 0x1}, 0x81) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x37, 0xac52) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000000)={0x3}) [ 2059.744580] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:30:27 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x56b, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000240), 0x4) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0xe5, 0x5, 0xef, 0x0, 0x5, 0x420, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x800, 0x0, 0x4, 0x0, 0x81}, r4, 0x4, r2, 0xa) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x66e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)={0x7ff}) pread64(r5, &(0x7f0000000300)=""/47, 0x2f, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={&(0x7f0000000a80), 0x6e, &(0x7f0000001080)=[{&(0x7f0000000b00)=""/153, 0x99}, {&(0x7f0000000bc0)=""/138, 0x8a}, {&(0x7f0000000c80)=""/112, 0x70}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/213, 0xd5}, {&(0x7f0000000e00)=""/199, 0xc7}, {&(0x7f00000002c0)=""/54, 0x36}, {&(0x7f0000000f00)=""/251, 0xfb}], 0x8, &(0x7f0000001100)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x40010180) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000001180)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000400), 0x5, 0x4a8c40) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001040)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c00008002060103000b0000000000e00300000744ff03000000000000000240fe8000000000000000000000000000aa080008400000006405000700290000001800018014000250fe88001100000000000000c4e85e540105000400020000000900020033797a3100000000"], 0x6c}}, 0x10000010) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) splice(0xffffffffffffffff, &(0x7f00000011c0)=0x1, 0xffffffffffffffff, &(0x7f0000001440)=0x2, 0xcb, 0xc) [ 2059.796957] audit: type=1326 audit(1755916227.935:256): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11328 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e3052b19 code=0x7ffc0000 [ 2059.807869] audit: type=1326 audit(1755916227.946:257): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11328 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb4e3051c27 code=0x7ffc0000 02:30:27 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x6c, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2059.830400] audit: type=1326 audit(1755916227.953:258): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11328 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e3052b19 code=0x7ffc0000 02:30:27 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:30:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2059.847292] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 3 (only 16 groups) [ 2059.860874] audit: type=1326 audit(1755916227.960:259): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11328 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fb4e3052b19 code=0x7ffc0000 [ 2059.880172] audit: type=1326 audit(1755916227.960:260): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11328 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e3052b19 code=0x7ffc0000 [ 2059.894654] audit: type=1326 audit(1755916227.966:261): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11328 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb4e3052b19 code=0x7ffc0000 [ 2059.899933] audit: type=1326 audit(1755916227.967:262): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11328 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e3052b19 code=0x7ffc0000 [ 2059.926179] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 3 (only 16 groups) [ 2059.929015] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2059.931195] audit: type=1326 audit(1755916227.967:263): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11328 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb4e3052b19 code=0x7ffc0000 [ 2059.952154] audit: type=1326 audit(1755916227.969:265): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11328 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e3052b19 code=0x7ffc0000 02:30:28 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:30:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2f}}}, 0xb8}}, 0x0) [ 2060.004988] audit: type=1326 audit(1755916227.969:266): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11328 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e3052b19 code=0x7ffc0000 02:30:28 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 02:30:45 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xf000000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:30:45 executing program 5: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x280c, &(0x7f0000000240)={0x0, 0x7910, 0x2, 0x0, 0x382, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000400)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000500)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)={0x800, 0x100, 0xc}, &(0x7f00000004c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000140)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') writev(r8, &(0x7f0000000380)=[{&(0x7f0000000040)='3', 0x1}], 0x1) openat(r8, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:30:45 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3}}}, 0xb8}}, 0x0) 02:30:45 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:30:45 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x74, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:30:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:30:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r3 = fcntl$dupfd(r2, 0x0, r2) sendmmsg$inet6(r3, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@hopopts={{0x88, 0x29, 0x36, {0x0, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x20}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x800]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x32e]}}]}}}], 0x88}}, {{&(0x7f00000003c0)={0xa, 0x4e21, 0x10004, @private2, 0x5fb}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000380)="e56406dd95f099f80e9121a3b7de4176ae1a608f159c5cce4b8465a4c31544b4b574e08f", 0x24}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x128}}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x6010, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000100001000000001c59994138a307ea0000000000", @ANYRES32, @ANYBLOB="068df34bb36b00a8192b6c2a1e6d8d76c400fac889adb105906592d4ad9aedf6e3f7"], 0x28}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001000000001c59994138a307ea0000000000", @ANYRES32, @ANYBLOB="0400001208001b"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) splice(r2, &(0x7f00000001c0)=0x7, r3, &(0x7f0000000200)=0x3, 0x7, 0x1) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) 02:30:45 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 73) [ 2077.044976] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2077.066580] FAULT_INJECTION: forcing a failure. [ 2077.066580] name failslab, interval 1, probability 0, space 0, times 0 [ 2077.069799] CPU: 0 PID: 11366 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2077.071722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2077.074011] Call Trace: [ 2077.074755] dump_stack+0x107/0x167 [ 2077.075764] should_fail.cold+0x5/0xa [ 2077.076820] ? __alloc_skb+0x6d/0x5b0 [ 2077.077871] should_failslab+0x5/0x20 [ 2077.078919] kmem_cache_alloc_node+0x55/0x330 [ 2077.080013] __alloc_skb+0x6d/0x5b0 [ 2077.080915] alloc_skb_with_frags+0x92/0x570 [ 2077.081988] sock_alloc_send_pskb+0x7af/0x930 [ 2077.083100] ? sk_alloc+0x350/0x350 [ 2077.083994] ? perf_trace_lock+0xac/0x490 [ 2077.085009] ? SOFTIRQ_verbose+0x10/0x10 [ 2077.086011] ? lock_chain_count+0x20/0x20 [ 2077.087050] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2077.088293] ? ip_frag_init+0x350/0x350 [ 2077.089297] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2077.090486] ? ip6_mtu+0x1e9/0x3d0 [ 2077.091358] ? ip6_setup_cork+0xfb7/0x1740 [ 2077.092404] ip6_make_skb+0x2df/0x4e0 [ 2077.093336] ? ip_frag_init+0x350/0x350 [ 2077.094320] ? ip_frag_init+0x350/0x350 [ 2077.095304] ? ip6_push_pending_frames+0xf0/0xf0 [ 2077.096477] ? ip6_dst_hoplimit+0x199/0x440 [ 2077.097523] ? lock_downgrade+0x6d0/0x6d0 [ 2077.098565] udpv6_sendmsg+0x2128/0x2b40 [ 2077.099572] ? ip_frag_init+0x350/0x350 [ 2077.100559] ? udp_v6_push_pending_frames+0x360/0x360 [ 2077.101817] ? SOFTIRQ_verbose+0x10/0x10 [ 2077.102828] ? __lockdep_reset_lock+0x180/0x180 [ 2077.103984] ? lock_acquire+0x197/0x470 [ 2077.104954] ? find_held_lock+0x2c/0x110 [ 2077.105960] ? lock_chain_count+0x20/0x20 [ 2077.106979] ? sock_has_perm+0x1ea/0x280 [ 2077.107994] ? __import_iovec+0x458/0x590 [ 2077.109010] ? udp_v6_push_pending_frames+0x360/0x360 [ 2077.110274] inet6_sendmsg+0x105/0x140 [ 2077.111234] ? inet6_compat_ioctl+0x320/0x320 [ 2077.112327] __sock_sendmsg+0xf2/0x190 [ 2077.113298] ____sys_sendmsg+0x334/0x870 [ 2077.114298] ? sock_write_iter+0x3d0/0x3d0 [ 2077.115331] ? do_recvmmsg+0x6d0/0x6d0 [ 2077.116287] ? __lock_acquire+0x1657/0x5b00 [ 2077.117351] ___sys_sendmsg+0xf3/0x170 [ 2077.118301] ? sendmsg_copy_msghdr+0x160/0x160 [ 2077.119424] ? __lockdep_reset_lock+0x180/0x180 [ 2077.120558] ? lock_acquire+0x197/0x470 [ 2077.121521] ? find_held_lock+0x2c/0x110 [ 2077.122521] ? __might_fault+0xd3/0x180 [ 2077.123487] ? lock_downgrade+0x6d0/0x6d0 [ 2077.124515] __sys_sendmmsg+0x195/0x470 [ 2077.125495] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2077.126560] ? lock_downgrade+0x6d0/0x6d0 [ 2077.127591] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2077.128761] ? wait_for_completion_io+0x270/0x270 [ 2077.129939] ? rcu_read_lock_any_held+0x75/0xa0 [ 2077.131092] ? vfs_write+0x354/0xb10 [ 2077.131997] ? fput_many+0x2f/0x1a0 [ 2077.132892] ? ksys_write+0x1a9/0x260 [ 2077.133819] ? __ia32_sys_read+0xb0/0xb0 [ 2077.134831] __x64_sys_sendmmsg+0x99/0x100 [ 2077.135864] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2077.137127] do_syscall_64+0x33/0x40 [ 2077.138044] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2077.139314] RIP: 0033:0x7f9688118b19 [ 2077.140232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2077.144760] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2077.146643] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2077.148396] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2077.150150] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2077.151903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2077.153658] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:30:45 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x7a, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:30:45 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x9}}}, 0xb8}}, 0x0) 02:30:45 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x2f000000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:30:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xf000000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2077.220098] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2077.251606] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2077.290593] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 02:30:45 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf}}}, 0xb8}}, 0x0) 02:30:45 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x7e000000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:30:45 executing program 0: unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x5) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext, 0x14002, 0x0, 0x0, 0x0, 0x8001, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x80000) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0xfd00ae9fb133f86) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x78) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) unshare(0x1c010900) r3 = semget(0x3, 0x4, 0x100) semop(r3, &(0x7f0000000080)=[{0x2, 0x7f, 0x800}], 0x1) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x1e) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x45) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x0, 0xea60}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x7f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) unshare(0x4a020900) 02:30:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x2f000000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:31:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf73}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20010400}, 0x8800) ftruncate(r0, 0x1000003) r3 = dup2(r0, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0'}, 0xb) fcntl$getflags(0xffffffffffffffff, 0x40a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000229bd7000fbdbdf25300001000c0099002000000062000000063ae9aca3fe581712e40036002c0000000675350014000000060036000d0000000600360024000000"], 0x40}}, 0x8000) 02:31:02 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xf0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2094.523513] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2094.545231] FAULT_INJECTION: forcing a failure. [ 2094.545231] name failslab, interval 1, probability 0, space 0, times 0 02:31:02 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5e, 0x442, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0xa}, 0xa600, 0x0, 0x0, 0x3, 0x1, 0x40, 0x80}, 0x0, 0xfffffffffffffffa, 0xffffffffffffffff, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001980)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x53000, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x400cc0, 0xa6) readlinkat(r4, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)=""/136, 0x88) preadv(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c", 0x33}, {&(0x7f0000000340)}, {&(0x7f0000000540)}], 0x4) syz_genetlink_get_family_id$gtp(0x0, r6) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, r7, 0x2}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001640)=ANY=[@ANYRESDEC=r6, @ANYRESHEX, @ANYBLOB="2c7786679a51b5ab2c49711c00cda1e25d030000", @ANYRESHEX, @ANYRESDEC, @ANYRES16=0x0, @ANYRESDEC, @ANYRES64=r1, @ANYRESHEX=r5]) 02:31:02 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 74) 02:31:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x80ffffff, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:31:02 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f}}}, 0xb8}}, 0x0) 02:31:02 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) r1 = getuid() keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000380)='dns_resolver\x00', &(0x7f00000003c0)='cifs.spnego\x00') keyctl$chown(0x4, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, r1, 0xee00, 0x4, 0xff35}, 0x0, 0x0, 0xee2e, 0x5, 0x1, 0x20e, 0xce, 0x8, 0x2, 0x0, 0xffffffffffffffff, r2}) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)='%\x00', 0xfffffffffffffffa) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r4 = request_key(&(0x7f00000002c0)='cifs.spnego\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='\x00', r0) r5 = getegid() setresgid(r5, r5, 0x0) keyctl$chown(0x4, r4, r1, r5) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 02:31:02 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) [ 2094.547987] CPU: 1 PID: 11410 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2094.549560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2094.551310] Call Trace: [ 2094.551873] dump_stack+0x107/0x167 [ 2094.552643] should_fail.cold+0x5/0xa [ 2094.553457] ? create_object.isra.0+0x3a/0xa20 [ 2094.554422] should_failslab+0x5/0x20 [ 2094.555240] kmem_cache_alloc+0x5b/0x310 [ 2094.556093] ? xfrm_policy_get_afinfo+0x21/0x2b0 [ 2094.556323] FAULT_INJECTION: forcing a failure. [ 2094.556323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2094.557086] create_object.isra.0+0x3a/0xa20 [ 2094.557113] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2094.561658] kmem_cache_alloc+0x159/0x310 [ 2094.562548] dst_alloc+0x9e/0x5d0 [ 2094.563293] xfrm_lookup_with_ifid+0xb79/0x1b70 [ 2094.564272] ? xfrm_policy_lookup_bytype.constprop.0+0x1a70/0x1a70 [ 2094.565591] ? ip6_dst_lookup_tail+0x63b/0xfc0 [ 2094.566558] icmpv6_route_lookup+0x2b3/0x470 [ 2094.567491] ? icmpv6_err+0x320/0x320 [ 2094.568294] ? dst_release+0x58/0x180 [ 2094.569098] ? icmpv6_xrlim_allow+0xbc/0x450 [ 2094.570012] ? icmpv6_sk_init+0x2a0/0x2a0 [ 2094.570888] ? projid_m_show+0x220/0x220 [ 2094.571737] ? ip6_pol_route_input+0x70/0x70 [ 2094.572673] icmp6_send+0xfdf/0x1f30 [ 2094.573477] ? icmpv6_push_pending_frames+0x470/0x470 [ 2094.574562] ? find_held_lock+0x2c/0x110 [ 2094.575472] ? ip6_dst_hoplimit+0x440/0x440 [ 2094.576386] ip6_pkt_drop+0x3d2/0x7f0 [ 2094.577180] ? ip6_pkt_discard+0x20/0x20 [ 2094.578036] ip6_local_out+0x29f/0x4c0 [ 2094.578874] ip6_send_skb+0x117/0x460 [ 2094.579684] udp_v6_send_skb+0x7b7/0x1620 [ 2094.580569] udpv6_sendmsg+0x216b/0x2b40 [ 2094.581429] ? ip_frag_init+0x350/0x350 [ 2094.582283] ? udp_v6_push_pending_frames+0x360/0x360 [ 2094.583372] ? SOFTIRQ_verbose+0x10/0x10 [ 2094.584232] ? __lockdep_reset_lock+0x180/0x180 [ 2094.585216] ? lock_acquire+0x197/0x470 [ 2094.586047] ? find_held_lock+0x2c/0x110 [ 2094.586923] ? lock_chain_count+0x20/0x20 [ 2094.587791] ? sock_has_perm+0x1ea/0x280 [ 2094.588678] ? __import_iovec+0x458/0x590 [ 2094.589550] ? udp_v6_push_pending_frames+0x360/0x360 [ 2094.590640] inet6_sendmsg+0x105/0x140 [ 2094.591454] ? inet6_compat_ioctl+0x320/0x320 [ 2094.592390] __sock_sendmsg+0xf2/0x190 [ 2094.593207] ____sys_sendmsg+0x334/0x870 [ 2094.594068] ? sock_write_iter+0x3d0/0x3d0 [ 2094.594961] ? do_recvmmsg+0x6d0/0x6d0 [ 2094.595779] ? __lock_acquire+0x1657/0x5b00 [ 2094.596703] ___sys_sendmsg+0xf3/0x170 [ 2094.597526] ? sendmsg_copy_msghdr+0x160/0x160 [ 2094.598491] ? __lockdep_reset_lock+0x180/0x180 [ 2094.599483] ? lock_acquire+0x197/0x470 [ 2094.600315] ? find_held_lock+0x2c/0x110 [ 2094.601181] ? __might_fault+0xd3/0x180 [ 2094.602016] ? lock_downgrade+0x6d0/0x6d0 [ 2094.602915] __sys_sendmmsg+0x195/0x470 [ 2094.603755] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2094.604661] ? lock_downgrade+0x6d0/0x6d0 [ 2094.605549] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2094.606560] ? wait_for_completion_io+0x270/0x270 [ 2094.607582] ? rcu_read_lock_any_held+0x75/0xa0 [ 2094.608555] ? vfs_write+0x354/0xb10 [ 2094.609338] ? fput_many+0x2f/0x1a0 [ 2094.610101] ? ksys_write+0x1a9/0x260 [ 2094.610907] ? __ia32_sys_read+0xb0/0xb0 [ 2094.611768] __x64_sys_sendmmsg+0x99/0x100 [ 2094.612653] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2094.613734] do_syscall_64+0x33/0x40 [ 2094.614522] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2094.615610] RIP: 0033:0x7f9688118b19 [ 2094.616386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2094.620235] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2094.621827] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2094.623332] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2094.624823] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2094.626314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2094.627809] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 2094.629353] CPU: 0 PID: 11421 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2094.630952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2094.632835] Call Trace: [ 2094.633437] dump_stack+0x107/0x167 [ 2094.634260] should_fail.cold+0x5/0xa [ 2094.635144] _copy_from_user+0x2e/0x1b0 [ 2094.636055] copy_clone_args_from_user+0x147/0x790 [ 2094.637181] ? __lockdep_reset_lock+0x180/0x180 [ 2094.638230] ? sighand_ctor+0x40/0x40 [ 2094.639111] ? find_held_lock+0x2c/0x110 [ 2094.640054] ? ksys_write+0x21a/0x260 [ 2094.640926] ? lock_downgrade+0x6d0/0x6d0 [ 2094.641880] __do_sys_clone3+0x9d/0x320 [ 2094.642784] ? __do_sys_clone+0x110/0x110 [ 2094.643730] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2094.644860] ? wait_for_completion_io+0x270/0x270 [ 2094.645945] ? rcu_read_lock_any_held+0x75/0xa0 [ 2094.646999] ? vfs_write+0x354/0xb10 [ 2094.647834] ? fput_many+0x2f/0x1a0 [ 2094.648653] ? ksys_write+0x1a9/0x260 [ 2094.649519] ? __ia32_sys_read+0xb0/0xb0 [ 2094.650433] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2094.651629] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2094.652799] ? trace_hardirqs_on+0x5b/0x180 [ 2094.653780] do_syscall_64+0x33/0x40 [ 2094.654636] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2094.655795] RIP: 0033:0x7f5655a9cb19 [ 2094.656638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2094.660809] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2094.662527] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2094.664164] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2094.665784] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2094.667407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2094.669060] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:31:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x9effffff, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:31:02 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x1e7, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:31:02 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2}}}, 0xb8}}, 0x0) [ 2094.774650] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:31:02 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x1}, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0x7ff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0xffff) r4 = syz_io_uring_setup(0x100024, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3a7, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r4}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1) accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000300)=0x6e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r8, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:31:02 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsmount(r0, 0x0, 0xf2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 02:31:02 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x3}}}, 0xb8}}, 0x0) 02:31:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x300, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2094.918774] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:31:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xd8020000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:31:19 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) 02:31:19 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 75) 02:31:19 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8}}}, 0xb8}}, 0x0) 02:31:19 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = inotify_init1(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_WRITEV={0x2, 0x1, 0x4000, @fd_index=0x9, 0x1, &(0x7f0000000500)=[{}, {&(0x7f0000000140)="8518c1b37d37681797c250bc0a5f6649c00fc30de45ff822df3c3fe51ffa10a3fe9674e7e02f12edaefb7c5794ed4dd51d60842edd31f8f6a20c649bcef472261b75fee2cbb82e66d4d7bc7a1e19a782f5d85e992552d694d5041a4690e0064611f806158f902b886f87245b28b75e0a1fbc5b292fb9c956e0edd95d2a58427e6e9bfce75562344fad783842e47f5e64f8fe87a352ca14f7da4381ac20ebad076dd53cc0f98940e43ac93c10e308c7b91c6b7f450b450ca4f8d02776dae62dfb65f58f9ecf1b50b576ce7a2bf9f32ec4eb6c05117e80b87e464e9353", 0xdc}, {&(0x7f0000000080)="afed", 0x2}, {&(0x7f00000002c0)="39884d9b9ed70f64e974e8de2eb93f23f6af3659cb059d6792743743ee9abd65bcd35413641fc4bd3a590ca87444cc3c2bf8a83f1b63164eca7a4db5edb62d08206cc5397d9648ecb5b48ddb7330848161a70365758da5d32e2d1f3df4f223b6976ee8d5221c1644", 0x68}, {&(0x7f0000000340)="927fc4fdc7243b92c3fcc34aa7c6c005581ed6f2b0cd28e511f52e4856f3b2c4568a549dc9f63338d2e80d528392baf5a3949a4434d85776826fc16285bbcc074a32749296e98ba8740d7461cd95fa56146207a0f4a2e3402d5b18f63f14f311365eb974d96ff863fdf93c661af0c78ebc3798ec567e349d5556478340f2bed463a0efe02b583e1e780fb689083f86134cf1bb320b6998c3c812e5467a516cc24ef20fefc9fc44e28aa8dfb2202d592b", 0xb0}, {&(0x7f0000000400)="f2cf8c68ff03bbfb42194e5a1163af68ff3b035532357d1995b33816ec5d8fc6cbfd585da73cafc50c550c6594afdc0853fd7e72714251e053b81ee9cd728a250b161f34c05419", 0x47}, {&(0x7f00000000c0)}, {&(0x7f0000000240)="63f4778f3bacd6b8ec2ab02616238e0a35aa40777bfe8d5329854c8055", 0x1d}], 0x8, 0x10, 0x1, {0x1}}, 0x10000) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) r3 = fork() tkill(r3, 0x26) waitid(0x0, r3, 0x0, 0x4, &(0x7f0000000500)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) kcmp(0x0, r3, 0x4, r4, r1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x58, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x202200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x200000b4) r6 = open$dir(&(0x7f0000000000)='./file1\x00', 0x40, 0x41) close_range(r6, r2, 0x2) sendfile(r0, r1, 0x0, 0x100000001) 02:31:19 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x500, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:31:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = openat$cgroup_subtree(r0, &(0x7f0000003140), 0x2, 0x0) r3 = pidfd_open(0x0, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) ioctl$int_out(r1, 0xa8c2, &(0x7f0000003000)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000003180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf250400000008000300", @ANYRES32=0x0, @ANYBLOB="08003200060000000a000900aaaaaaaaaa26000008003200fa04000005002d000100000008003b003b03000008000600", @ANYRES32=0x0, @ANYBLOB="e35f01b4997d69236b49d992c7992d237d6f8199fc16c829c8ce8907e8f9823806ead5d1067bbba9b0cda82a6f4148d0c6eb35e9d22ec728bb48d0a12b477c457614815af7ff36e1a76e3dcaf364612664600fe3483e2ab57e54f2dc3908fe1ecf"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0xc0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000003100)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4c}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x40804) fcntl$setstatus(r0, 0x4, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) recvmmsg$unix(r5, &(0x7f0000002e80)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000140)=""/10, 0xa}, {&(0x7f0000000180)=""/176, 0xb0}, {&(0x7f00000002c0)=""/254, 0xfe}, {&(0x7f00000003c0)=""/134, 0x86}, {&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000240)=""/54, 0x36}], 0x7, &(0x7f0000003040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00040000200000000000d3eb0000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=r6, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000001e00)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/178, 0xb2}, {&(0x7f0000001880)=""/16, 0x10}, {&(0x7f00000018c0)=""/205, 0xcd}, {&(0x7f00000019c0)=""/221, 0xdd}, {&(0x7f0000001ac0)=""/56, 0x38}, {&(0x7f0000001b00)=""/171, 0xab}, {&(0x7f0000001bc0)=""/242, 0xf2}, {&(0x7f0000001cc0)=""/152, 0x98}], 0x9}}, {{&(0x7f0000001ec0), 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001f40)=""/219, 0xdb}, {&(0x7f0000002040)=""/152, 0x98}, {&(0x7f0000002100)=""/33, 0x21}, {&(0x7f0000002140)=""/242, 0xf2}, {&(0x7f0000002240)=""/75, 0x4b}], 0x5, &(0x7f0000002340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002400)=""/105, 0x69}, {&(0x7f0000002480)=""/109, 0x6d}, {&(0x7f0000002500)=""/183, 0xb7}, {&(0x7f00000025c0)=""/127, 0x7f}, {&(0x7f0000002640)=""/106, 0x6a}, {&(0x7f00000026c0)=""/81, 0x51}, {&(0x7f0000002740)=""/151, 0x97}, {&(0x7f0000002800)=""/241, 0xf1}], 0x8}}, {{&(0x7f0000002980), 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002a00)=""/55, 0x37}, {&(0x7f0000002a40)=""/30, 0x1e}, {&(0x7f0000002a80)=""/197, 0xc5}, {&(0x7f0000002b80)=""/254, 0xfe}, {&(0x7f0000002c80)=""/248, 0xf8}], 0x5, &(0x7f0000002e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x5, 0x2000, &(0x7f0000002fc0)={0x0, 0x3938700}) perf_event_open(&(0x7f0000000000)={0x7, 0x80, 0x1, 0x31, 0x8, 0x1f, 0x0, 0x2, 0x10000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x100, 0x4, @perf_config_ext={0x400, 0x8}, 0x590, 0xff, 0x5, 0x6, 0x80000001, 0x7f, 0x1, 0x0, 0x8000, 0x0, 0x400}, r7, 0x9, 0xffffffffffffffff, 0x9) sendfile(r0, r5, 0x0, 0x100000001) 02:31:19 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000340)=""/224, 0xe0}], 0x2, 0x1a}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x7f, 0x3, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3, 0x6}, 0x1f) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f00000008c0)={r7, 0x5, 0x80000001}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b40)={0x4, 0x0, {0x2, @usage=0x7, 0x0, 0xe000000000000000, 0x3, 0x2, 0xffffffffffffff06, 0x9, 0xfaef12c9eb38b839, @struct={0x81, 0x100}, 0x2, 0x7fffffff, [0x7fff, 0xc556800000000000, 0xa3, 0x5, 0xa5b5, 0x2]}, {0xffffffffffffffc0, @usage=0x1, 0x0, 0x3, 0x8, 0x3, 0x10000, 0x6, 0x5, @struct={0x7, 0x9}, 0x2, 0x80000000, [0x4, 0x9, 0x80000000, 0x80, 0x10001, 0x18c]}, {0x15ac, @struct={0x7f, 0x7fff}, r7, 0x2, 0x0, 0x1b3, 0x9, 0x349, 0x40, @struct={0xfffffffe, 0x5}, 0xfffff696, 0x7, [0x0, 0x656, 0xfffffffffffffe01, 0x20, 0xfffffffffffffe01, 0x80000001]}, {0x7fffffff, 0x4, 0x9}}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2111.660228] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2111.661036] FAULT_INJECTION: forcing a failure. [ 2111.661036] name failslab, interval 1, probability 0, space 0, times 0 [ 2111.664826] CPU: 0 PID: 11457 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2111.666460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.668598] Call Trace: [ 2111.669236] dump_stack+0x107/0x167 [ 2111.670118] should_fail.cold+0x5/0xa [ 2111.671061] ? dst_alloc+0x9e/0x5d0 [ 2111.671966] should_failslab+0x5/0x20 [ 2111.672866] kmem_cache_alloc+0x5b/0x310 [ 2111.673849] dst_alloc+0x9e/0x5d0 [ 2111.674692] xfrm_lookup_with_ifid+0xb79/0x1b70 [ 2111.675819] ? xfrm_policy_lookup_bytype.constprop.0+0x1a70/0x1a70 [ 2111.677310] ? ip6_route_output_flags+0xf0/0x370 [ 2111.678447] ? ip6_dst_lookup_tail+0x63b/0xfc0 [ 2111.679556] icmpv6_route_lookup+0x385/0x470 [ 2111.680644] ? icmpv6_err+0x320/0x320 [ 2111.681722] ? dst_release+0x58/0x180 [ 2111.682671] icmp6_send+0xfdf/0x1f30 [ 2111.683597] ? icmpv6_push_pending_frames+0x470/0x470 [ 2111.684822] ? find_held_lock+0x2c/0x110 [ 2111.685826] ? ip6_dst_hoplimit+0x440/0x440 [ 2111.686888] ip6_pkt_drop+0x3d2/0x7f0 [ 2111.687792] ? ip6_pkt_discard+0x20/0x20 [ 2111.688759] ip6_local_out+0x29f/0x4c0 [ 2111.689691] ip6_send_skb+0x117/0x460 [ 2111.690615] udp_v6_send_skb+0x7b7/0x1620 [ 2111.691626] udpv6_sendmsg+0x216b/0x2b40 [ 2111.692598] ? ip_frag_init+0x350/0x350 [ 2111.693555] ? udp_v6_push_pending_frames+0x360/0x360 [ 2111.694795] ? SOFTIRQ_verbose+0x10/0x10 [ 2111.695777] ? __lockdep_reset_lock+0x180/0x180 [ 2111.696884] ? lock_acquire+0x197/0x470 [ 2111.697820] ? find_held_lock+0x2c/0x110 [ 2111.698819] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2111.700063] ? sock_has_perm+0x1ea/0x280 [ 2111.701051] ? __import_iovec+0x458/0x590 [ 2111.702058] ? udp_v6_push_pending_frames+0x360/0x360 [ 2111.703299] inet6_sendmsg+0x105/0x140 [ 2111.704218] ? inet6_compat_ioctl+0x320/0x320 [ 2111.705275] __sock_sendmsg+0xf2/0x190 [ 2111.706213] ____sys_sendmsg+0x334/0x870 [ 2111.707196] ? sock_write_iter+0x3d0/0x3d0 [ 2111.708194] ? do_recvmmsg+0x6d0/0x6d0 [ 2111.709117] ? find_held_lock+0x2c/0x110 [ 2111.710104] ___sys_sendmsg+0xf3/0x170 [ 2111.711046] ? sendmsg_copy_msghdr+0x160/0x160 [ 2111.712129] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2111.713364] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2111.714432] ? trace_hardirqs_on+0x5b/0x180 [ 2111.715460] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2111.716515] ? finish_task_switch+0x126/0x5d0 [ 2111.717560] ? finish_task_switch+0xef/0x5d0 [ 2111.718591] ? __switch_to+0x572/0xf70 [ 2111.719522] ? __switch_to_asm+0x3a/0x60 [ 2111.720469] ? __switch_to_asm+0x34/0x60 [ 2111.721427] ? __schedule+0x82c/0x1ea0 [ 2111.722364] ? io_schedule_timeout+0x140/0x140 [ 2111.723478] __sys_sendmmsg+0x195/0x470 [ 2111.724427] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2111.725442] ? lock_downgrade+0x6d0/0x6d0 [ 2111.726452] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2111.727599] ? wait_for_completion_io+0x270/0x270 [ 2111.728738] ? rcu_read_lock_any_held+0x75/0xa0 [ 2111.729824] ? vfs_write+0x354/0xb10 [ 2111.730709] ? fput_many+0x2f/0x1a0 [ 2111.731586] ? ksys_write+0x1a9/0x260 [ 2111.732488] ? __ia32_sys_read+0xb0/0xb0 [ 2111.733462] __x64_sys_sendmmsg+0x99/0x100 [ 2111.734462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2111.735686] do_syscall_64+0x33/0x40 [ 2111.736565] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2111.737761] RIP: 0033:0x7f9688118b19 [ 2111.738650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2111.743006] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2111.744796] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2111.746473] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2111.748168] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2111.749836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2111.751536] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 2111.759421] FAULT_INJECTION: forcing a failure. [ 2111.759421] name failslab, interval 1, probability 0, space 0, times 0 [ 2111.762118] CPU: 0 PID: 11461 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2111.763776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.765722] Call Trace: [ 2111.766361] dump_stack+0x107/0x167 [ 2111.767238] should_fail.cold+0x5/0xa [ 2111.768136] ? copy_process+0x3301/0x78b0 02:31:19 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x600, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2111.769293] should_failslab+0x5/0x20 [ 2111.770204] kmem_cache_alloc_node+0x55/0x330 [ 2111.771272] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2111.772545] copy_process+0x3301/0x78b0 [ 2111.773508] ? SOFTIRQ_verbose+0x10/0x10 [ 2111.774484] ? __lockdep_reset_lock+0x180/0x180 [ 2111.775603] ? mark_lock+0xf5/0x2df0 [ 2111.776495] ? lock_acquire+0x197/0x470 [ 2111.777432] ? find_held_lock+0x2c/0x110 [ 2111.778405] ? __cleanup_sighand+0xb0/0xb0 [ 2111.779449] ? _copy_from_user+0xfb/0x1b0 [ 2111.780437] kernel_clone+0xe7/0x980 [ 2111.781317] ? __lockdep_reset_lock+0x180/0x180 [ 2111.782408] ? create_io_thread+0xf0/0xf0 [ 2111.783500] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2111.783527] ? ksys_write+0x21a/0x260 [ 2111.783557] ? lock_downgrade+0x6d0/0x6d0 [ 2111.787264] __do_sys_clone3+0x1e5/0x320 [ 2111.788220] ? __do_sys_clone+0x110/0x110 [ 2111.789222] ? rcu_read_lock_any_held+0x75/0xa0 [ 2111.790318] ? vfs_write+0x354/0xb10 [ 2111.791224] ? fput_many+0x2f/0x1a0 [ 2111.792085] ? ksys_write+0x1a9/0x260 [ 2111.792990] ? __ia32_sys_read+0xb0/0xb0 [ 2111.793949] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2111.795217] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2111.796429] ? trace_hardirqs_on+0x5b/0x180 [ 2111.797452] do_syscall_64+0x33/0x40 [ 2111.798330] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2111.799554] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2111.799568] RIP: 0033:0x7f5655a9cb19 [ 2111.799592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2111.806633] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2111.808447] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2111.810120] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2111.810371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11468 comm=syz-executor.2 [ 2111.811801] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2111.811813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2111.811824] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:31:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xf0ffffff, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:31:20 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x9}}}, 0xb8}}, 0x0) 02:31:20 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x700, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2111.895098] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 02:31:20 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) [ 2111.994572] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2111.998161] FAULT_INJECTION: forcing a failure. [ 2111.998161] name failslab, interval 1, probability 0, space 0, times 0 [ 2112.001122] CPU: 0 PID: 11486 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2112.002746] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2112.004691] Call Trace: [ 2112.005310] dump_stack+0x107/0x167 [ 2112.006165] should_fail.cold+0x5/0xa [ 2112.007063] ? create_object.isra.0+0x3a/0xa20 [ 2112.008125] should_failslab+0x5/0x20 [ 2112.009014] kmem_cache_alloc+0x5b/0x310 [ 2112.009965] create_object.isra.0+0x3a/0xa20 [ 2112.010988] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2112.012176] kmem_cache_alloc_node+0x169/0x330 [ 2112.013245] copy_process+0x3301/0x78b0 [ 2112.014170] ? SOFTIRQ_verbose+0x10/0x10 [ 2112.015122] ? lock_chain_count+0x20/0x20 [ 2112.016090] ? __lockdep_reset_lock+0x180/0x180 [ 2112.017171] ? lock_chain_count+0x20/0x20 [ 2112.018136] ? lock_acquire+0x197/0x470 [ 2112.019063] ? find_held_lock+0x2c/0x110 [ 2112.020020] ? __cleanup_sighand+0xb0/0xb0 [ 2112.021002] ? __lock_acquire+0x1657/0x5b00 [ 2112.022016] ? _copy_from_user+0xfb/0x1b0 [ 2112.022984] kernel_clone+0xe7/0x980 [ 2112.023847] ? create_io_thread+0xf0/0xf0 [ 2112.024796] ? find_held_lock+0x2c/0x110 [ 2112.025742] ? lock_downgrade+0x6d0/0x6d0 [ 2112.026701] ? perf_event_sched_in.isra.0+0x80/0x80 [ 2112.027871] __do_sys_clone3+0x1e5/0x320 [ 2112.028811] ? __do_sys_clone+0x110/0x110 [ 2112.029771] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2112.030841] ? io_schedule_timeout+0x140/0x140 [ 2112.031901] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2112.032956] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2112.034216] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2112.035435] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2112.036619] ? trace_hardirqs_on+0x5b/0x180 [ 2112.037618] do_syscall_64+0x33/0x40 [ 2112.038479] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2112.039670] RIP: 0033:0x7f5655a9cb19 [ 2112.040532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2112.044726] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2112.046439] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2112.048060] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2112.049663] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2112.051278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2112.052874] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2112.063905] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2112.232853] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2112.243451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11468 comm=syz-executor.2 02:31:40 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x900, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:31:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xfcffffff, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:31:40 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ec}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800}, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() tkill(r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00']) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x2000003) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:31:40 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) 02:31:40 executing program 5: syz_io_uring_setup(0x0, &(0x7f00000008c0)={0x0, 0x0, 0x10, 0x20000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6859, &(0x7f0000000000)={0x0, 0x800c, 0x8, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 02:31:40 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0xa, 0x0, {0xe}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x3ffc, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000004c0), 0x85, 0x1c980) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r1, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x424, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0xc041) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) lseek(r0, 0x1, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000003c0)="2ec403e9e86e13859741f9c3425f824a486c84c89d66597f414f1f278e341cda1b87bcfea26908791b82f57342a0728f496dd1ea82ec4182c1c7661d4eaa582d5a67bf49e30e4f7d62db3cfeac214493850b435f742b6515bd1fddc94259e7c0072b9108e415eed2f53155031210cd1c252993a36f8fad45d6f2a01c1ce06d66c7f1f98d4eea67c79b3cd8645eabe5b7a182ad917de7b50eb5c2e080cc78771f8dde903a73421c68f981682421d7684994923611c1634fa1e81408bb659d480f5a9ad90130f5f544d9c0d1d3ea4ca9f84e75109b1b5f59ca366bb32b9c8f1ee3adde377bb10243e87482cb2900b3892d997d967163e41309ce66e72e1166dd5c") setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x7}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2fe1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x403f}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x4f}, @val={0xc, 0x99, {0x800000, 0x60}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0xe12750e63600753d) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000005c0)={0x1, 0x1, 0x1000, 0xa1, &(0x7f0000000300)="8f5fe45076579a27474308f84a78398f8be4c22ec9ba63239f84e305e5e3ccd93faaf084b1d45d1f193a0437fb70f6e2abc9049ca0d30a197209c2154a0decd49e491a0ba26ed813b299578fe9d09e1c6886338449eb24a3e5e8ac232059d13209d94d1c2472f058be84afbd8e4bb7943f8b10ea04c1977532419403197e2555f908a1e7bcf04bfae7dc54c41bb81478b78407d5d0336bc3596b11a136ceb8cac6", 0x53, 0x0, &(0x7f0000000500)="3a54f46a74a03e2e67982124846bb1ef39b246cdec1c7b3c3ff7b1615a39a9951c5f3264e29d75c7d7f670f965f19001bc0d6d2e313d388e956fbe83d726fdccd9e81da2eab9fd94f8b134ea60e80f39d97fb5"}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) 02:31:40 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 76) 02:31:40 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xf}}}, 0xb8}}, 0x0) [ 2132.722140] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2132.725943] FAULT_INJECTION: forcing a failure. [ 2132.725943] name failslab, interval 1, probability 0, space 0, times 0 [ 2132.727617] CPU: 1 PID: 11500 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2132.728580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2132.729731] Call Trace: [ 2132.730106] dump_stack+0x107/0x167 [ 2132.730617] should_fail.cold+0x5/0xa [ 2132.731158] ? create_object.isra.0+0x3a/0xa20 [ 2132.731793] should_failslab+0x5/0x20 [ 2132.732321] kmem_cache_alloc+0x5b/0x310 [ 2132.732885] ? xfrm_policy_get_afinfo+0x21/0x2b0 [ 2132.733545] create_object.isra.0+0x3a/0xa20 [ 2132.734154] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2132.734874] kmem_cache_alloc+0x159/0x310 [ 2132.735468] dst_alloc+0x9e/0x5d0 [ 2132.735957] xfrm_lookup_with_ifid+0xb79/0x1b70 [ 2132.736607] ? xfrm_policy_lookup_bytype.constprop.0+0x1a70/0x1a70 [ 2132.737475] ? ip6_route_output_flags+0xf0/0x370 [ 2132.738133] ? ip6_dst_lookup_tail+0x63b/0xfc0 [ 2132.738773] icmpv6_route_lookup+0x385/0x470 [ 2132.739391] ? icmpv6_err+0x320/0x320 [ 2132.739926] ? dst_release+0x58/0x180 [ 2132.740476] icmp6_send+0xfdf/0x1f30 [ 2132.741008] ? icmpv6_push_pending_frames+0x470/0x470 [ 2132.741736] ? find_held_lock+0x2c/0x110 [ 2132.742333] ? ip6_dst_hoplimit+0x440/0x440 [ 2132.742950] ip6_pkt_drop+0x3d2/0x7f0 [ 2132.743500] ? ip6_pkt_discard+0x20/0x20 [ 2132.744067] ip6_local_out+0x29f/0x4c0 [ 2132.744612] ip6_send_skb+0x117/0x460 [ 2132.745004] FAULT_INJECTION: forcing a failure. [ 2132.745004] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2132.745154] udp_v6_send_skb+0x7b7/0x1620 [ 2132.748859] udpv6_sendmsg+0x216b/0x2b40 [ 2132.749422] ? ip_frag_init+0x350/0x350 [ 2132.749978] ? udp_v6_push_pending_frames+0x360/0x360 [ 2132.750686] ? SOFTIRQ_verbose+0x10/0x10 [ 2132.751266] ? __lockdep_reset_lock+0x180/0x180 [ 2132.751912] ? lock_acquire+0x197/0x470 [ 2132.752459] ? find_held_lock+0x2c/0x110 [ 2132.753028] ? lock_chain_count+0x20/0x20 [ 2132.753608] ? sock_has_perm+0x1ea/0x280 [ 2132.754190] ? __import_iovec+0x458/0x590 [ 2132.754763] ? udp_v6_push_pending_frames+0x360/0x360 [ 2132.755481] inet6_sendmsg+0x105/0x140 [ 2132.756016] ? inet6_compat_ioctl+0x320/0x320 [ 2132.756629] __sock_sendmsg+0xf2/0x190 [ 2132.757167] ____sys_sendmsg+0x334/0x870 [ 2132.757728] ? sock_write_iter+0x3d0/0x3d0 [ 2132.758308] ? do_recvmmsg+0x6d0/0x6d0 [ 2132.758845] ? __lock_acquire+0x1657/0x5b00 [ 2132.759466] ___sys_sendmsg+0xf3/0x170 [ 2132.760006] ? sendmsg_copy_msghdr+0x160/0x160 [ 2132.760638] ? __lockdep_reset_lock+0x180/0x180 [ 2132.761282] ? lock_acquire+0x197/0x470 [ 2132.761826] ? find_held_lock+0x2c/0x110 [ 2132.762390] ? __might_fault+0xd3/0x180 [ 2132.762936] ? lock_downgrade+0x6d0/0x6d0 [ 2132.763534] __sys_sendmmsg+0x195/0x470 [ 2132.764087] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2132.764680] ? lock_downgrade+0x6d0/0x6d0 [ 2132.765265] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2132.765928] ? wait_for_completion_io+0x270/0x270 [ 2132.766594] ? rcu_read_lock_any_held+0x75/0xa0 [ 2132.767242] ? vfs_write+0x354/0xb10 [ 2132.767753] ? fput_many+0x2f/0x1a0 [ 2132.768264] ? ksys_write+0x1a9/0x260 [ 2132.768785] ? __ia32_sys_read+0xb0/0xb0 [ 2132.769348] __x64_sys_sendmmsg+0x99/0x100 [ 2132.769928] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2132.770632] do_syscall_64+0x33/0x40 [ 2132.771151] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2132.771848] RIP: 0033:0x7f9688118b19 [ 2132.772356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2132.774855] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2132.775900] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2132.776870] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2132.777843] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2132.778816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2132.779794] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 2132.780799] CPU: 0 PID: 11505 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2132.782366] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2132.784238] Call Trace: [ 2132.784841] dump_stack+0x107/0x167 [ 2132.785669] should_fail.cold+0x5/0xa [ 2132.786523] __alloc_pages_nodemask+0x182/0x600 [ 2132.787584] ? lock_downgrade+0x6d0/0x6d0 [ 2132.788511] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2132.789856] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2132.791030] ? kmem_cache_alloc_node+0x2bc/0x330 [ 2132.792097] copy_process+0x62b/0x78b0 [ 2132.792978] ? SOFTIRQ_verbose+0x10/0x10 [ 2132.793898] ? __lockdep_reset_lock+0x180/0x180 [ 2132.794932] ? mark_lock+0xf5/0x2df0 [ 2132.795789] ? lock_acquire+0x197/0x470 [ 2132.796683] ? find_held_lock+0x2c/0x110 [ 2132.797601] ? __cleanup_sighand+0xb0/0xb0 [ 2132.798573] ? _copy_from_user+0xfb/0x1b0 [ 2132.799521] kernel_clone+0xe7/0x980 [ 2132.800349] ? __lockdep_reset_lock+0x180/0x180 [ 2132.801383] ? create_io_thread+0xf0/0xf0 [ 2132.802322] ? ksys_write+0x21a/0x260 [ 2132.803189] ? lock_downgrade+0x6d0/0x6d0 [ 2132.804134] __do_sys_clone3+0x1e5/0x320 [ 2132.805041] ? __do_sys_clone+0x110/0x110 [ 2132.805992] ? rcu_read_lock_any_held+0x75/0xa0 [ 2132.807038] ? vfs_write+0x354/0xb10 [ 2132.807880] ? fput_many+0x2f/0x1a0 [ 2132.808694] ? ksys_write+0x1a9/0x260 [ 2132.809547] ? __ia32_sys_read+0xb0/0xb0 [ 2132.810463] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2132.811655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2132.812803] ? trace_hardirqs_on+0x5b/0x180 [ 2132.813773] do_syscall_64+0x33/0x40 [ 2132.814602] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2132.815750] RIP: 0033:0x7f5655a9cb19 [ 2132.816578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2132.820683] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2132.822391] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2132.824004] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2132.825616] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2132.827231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2132.828828] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2132.832031] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:31:40 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff01c2000000810000000800450000240000000000029078ac1e0001ac1414bb11009078ac1414bb2b2020f42e4c000000"], 0x0) 02:31:41 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2f}}}, 0xb8}}, 0x0) 02:31:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xa00, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2132.931391] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:31:41 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xfffff000, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2132.933059] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 02:31:41 executing program 5: r0 = semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d91e31b7892f71f3ac842db783e431d605372ea606c253e7c4ff3d013e13614b38210b49077cca3b953d867fd849b8fe2ff2f49a2849f897aa0aa580d9181e218f7c241c047d0a0ef6ba946c262de8447d2ec926ffc3aaadd9660fff9cea9b11f2ff3704df391d2bdb33465bfa785d15ef405e901c59cb0dfc75ae84a5ce85db5f2f363979cb753db1587", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=loose,noextend,nodevmap,dont_appraise,dont_measure,subj_type=,dont_measure,fscontext=system_u,fsmagic=0x000000000000008c,uid=', @ANYRESDEC=r2, @ANYBLOB=',audit,rootcoNtexu,\x00\x00\x00\x00\x00\x00\x00\x00']) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r2, 0x0, 0x39, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) semctl$IPC_RMID(0x0, 0x0, 0x0) r3 = semget(0x2, 0x0, 0x20b) r4 = getuid() stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000002c0)={{0x1, r4, r1, r5, 0x0, 0x39, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) semctl$IPC_RMID(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000080)=[{0x0, 0x4, 0x1000}], 0x1, &(0x7f0000000100)={r6, r7+10000000}) semctl$SEM_INFO(0x0, 0x935a4533181df21f, 0x13, &(0x7f0000001e00)=""/4096) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000000)=""/35) unshare(0x48020200) 02:31:41 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 77) 02:31:41 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xf0}}}, 0xb8}}, 0x0) 02:31:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xf00, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2133.028280] FAULT_INJECTION: forcing a failure. [ 2133.028280] name failslab, interval 1, probability 0, space 0, times 0 [ 2133.029749] CPU: 1 PID: 11620 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2133.030629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2133.031699] Call Trace: [ 2133.032045] dump_stack+0x107/0x167 [ 2133.032517] should_fail.cold+0x5/0xa [ 2133.033014] ? __alloc_skb+0x6d/0x5b0 [ 2133.033507] should_failslab+0x5/0x20 [ 2133.033996] kmem_cache_alloc_node+0x55/0x330 [ 2133.034572] ? mark_lock+0xf5/0x2df0 [ 2133.035066] __alloc_skb+0x6d/0x5b0 [ 2133.035534] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2133.036219] alloc_skb_with_frags+0x92/0x570 [ 2133.036780] ? mark_lock+0xf5/0x2df0 [ 2133.037252] ? mark_lock+0xf5/0x2df0 [ 2133.037725] sock_alloc_send_pskb+0x7af/0x930 [ 2133.038302] ? sk_alloc+0x350/0x350 [ 2133.038763] ? perf_trace_lock+0xac/0x490 [ 2133.039294] ? SOFTIRQ_verbose+0x10/0x10 [ 2133.039815] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2133.040455] ? rawv6_exit+0x20/0x20 [ 2133.040910] ? SOFTIRQ_verbose+0x10/0x10 [ 2133.041429] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2133.042034] ? ip6_mtu+0x1e9/0x3d0 [ 2133.042480] ? ip6_setup_cork+0xfb7/0x1740 [ 2133.043031] ip6_append_data+0x1e6/0x330 [ 2133.043541] ? rawv6_exit+0x20/0x20 [ 2133.044006] ? rawv6_exit+0x20/0x20 [ 2133.044469] icmp6_send+0x1250/0x1f30 [ 2133.044965] ? icmpv6_push_pending_frames+0x470/0x470 [ 2133.045621] ? find_held_lock+0x2c/0x110 [ 2133.046167] ? ip6_dst_hoplimit+0x440/0x440 [ 2133.046719] ip6_pkt_drop+0x3d2/0x7f0 [ 2133.047209] ? ip6_pkt_discard+0x20/0x20 [ 2133.047722] ip6_local_out+0x29f/0x4c0 [ 2133.048218] ip6_send_skb+0x117/0x460 [ 2133.048700] udp_v6_send_skb+0x7b7/0x1620 [ 2133.049233] udpv6_sendmsg+0x216b/0x2b40 [ 2133.049750] ? ip_frag_init+0x350/0x350 [ 2133.050258] ? udp_v6_push_pending_frames+0x360/0x360 [ 2133.050908] ? SOFTIRQ_verbose+0x10/0x10 [ 2133.051443] ? __lockdep_reset_lock+0x180/0x180 [ 2133.052037] ? lock_acquire+0x197/0x470 [ 2133.052539] ? find_held_lock+0x2c/0x110 [ 2133.053059] ? lock_chain_count+0x20/0x20 [ 2133.053579] ? sock_has_perm+0x1ea/0x280 [ 2133.054115] ? __import_iovec+0x458/0x590 [ 2133.054635] ? udp_v6_push_pending_frames+0x360/0x360 [ 2133.055297] inet6_sendmsg+0x105/0x140 [ 2133.055761] ? inet6_compat_ioctl+0x320/0x320 [ 2133.056304] __sock_sendmsg+0xf2/0x190 [ 2133.056769] ____sys_sendmsg+0x334/0x870 [ 2133.057256] ? sock_write_iter+0x3d0/0x3d0 [ 2133.057761] ? do_recvmmsg+0x6d0/0x6d0 [ 2133.058226] ? __lock_acquire+0x1657/0x5b00 [ 2133.058750] ___sys_sendmsg+0xf3/0x170 [ 2133.059225] ? sendmsg_copy_msghdr+0x160/0x160 [ 2133.059770] ? __lockdep_reset_lock+0x180/0x180 [ 2133.060337] ? lock_acquire+0x197/0x470 [ 2133.060810] ? find_held_lock+0x2c/0x110 [ 2133.061316] ? __might_fault+0xd3/0x180 [ 2133.061788] ? lock_downgrade+0x6d0/0x6d0 [ 2133.062306] __sys_sendmmsg+0x195/0x470 [ 2133.062786] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2133.063310] ? lock_downgrade+0x6d0/0x6d0 [ 2133.063815] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2133.064395] ? wait_for_completion_io+0x270/0x270 [ 2133.064974] ? rcu_read_lock_any_held+0x75/0xa0 [ 2133.065532] ? vfs_write+0x354/0xb10 [ 2133.065981] ? fput_many+0x2f/0x1a0 [ 2133.066416] ? ksys_write+0x1a9/0x260 [ 2133.066866] ? __ia32_sys_read+0xb0/0xb0 [ 2133.067359] __x64_sys_sendmmsg+0x99/0x100 [ 2133.067862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2133.068471] do_syscall_64+0x33/0x40 [ 2133.068920] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2133.069524] RIP: 0033:0x7f9688118b19 [ 2133.069971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2133.072147] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2133.073051] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2133.073892] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2133.074736] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2133.075609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2133.076469] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:31:41 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xffffff7f, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2133.087810] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:31:41 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000040)={@private0, r0}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0x58f, 0x0, 0x400}, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x799181, 0x120) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="a81900001000010400000000000000050000000005000077bc0800000c0040802b001000da469d86f2669dc235ccc7038ca6c78856fa22a3ac9d41c05761e11494f426038a075e5d168bd8e209a2eb2129c08982185397d8a643317d775c0d78d73198f136fc4cd5a0b5fcbf82a431130a2c35f3c76c696994ce8251b1b82db82c94faa0932028fbfa9df317450d6d8b725894881205a3124fb7dd410ed7b28e5a5153389a0a4247816e7bbc46f6aa9b558c3a80db5a17932460e5b804feb7a8ef2877b294031426e83e060f2ccde7888d6d297ad9295420ccd1a2bc3a3921fa23fb3050efa4b94498e29a97283dfdb3a337", @ANYRES32=r3, @ANYBLOB="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"], 0x28}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1001, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00'}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x2, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8914, &(0x7f0000000140)={'lo\x00'}) r8 = gettid() r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r5) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000425bd7000fcdbdf250100000008000600000000000000020040000000b1575cdb0788a65183b494439eab9e81c70f208e242ad96a02f2539e3c46c95ab5a8d5e01fbdb69dce2720eaef85d72250b352792eaf1bfa30ca702c61c5c66bbd6bd8bbda8c2f95d57a88b4a374a63d693e5f1b8f61a96adda80e1c92e492003f963f83b2852c428c71336e8b50930863f757e89439b01c8437cc0195be7f6adc01da3daf999f80b25b6d0587cd4cdffa7017dbd53bd212faf16b8aa1c2d51dbf546bff047c6bf7b06799042234ba5dfc807bbc750a372ba13bb1024eb0de7cedaa24ae40c79ded91f7f3bf029b1b53cbf4c4563a5cbf8618beef96941a74cef00376f87e847464e5a1550aadef14589ae4cdaeedecc8af1a10621b04c506ecbcca61ba4f324eaa3dd6c329f99024c0a8f232024126fca1f6074425d9725cd5fbec405b19"], 0x24}, 0x1, 0x0, 0x0, 0xc080}, 0x80) rt_sigqueueinfo(r8, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100}) 02:31:57 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xf1c, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:31:57 executing program 5: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa}) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x48, r0) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844", 0x22}, 0x48, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, r2) r5 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0, 0x2}, &(0x7f0000000440)='\xe8\xff\xff\xff\xff\xff\xff\xff\x00\x9d\x00\xf1\xad\xa2.\x803\x7f\xb5U\x18w\xae\x91mLO\x85\xc1D\xf8/\x19Vc\xb0\xc8\xaba\xa9T\xb2\xa4\x9d8\x13kc|Lgj V{\xddKF\xbb6\xf5\xa2\xe5\\/\xf0] \x0e2\xb5o4\xba\x98\x1e{\xcfZ\x1d\x84\xe0\xa5V\x1c3\xd78A\x9eK\x16\xfcXD\xe3\x9a,W\xb3\xc0\xeb\xcd\xf6\x89\x95\x9e\xa9\xc2H\xc5\xaa\xd8\x101!\xa3\x83\x1b\x83m\xe3RK8\xeby\xaa\x88\x94a\xea\xab#\xce*\x0f\xa0\x8c\xca\x15\xea\xdaf:\xf6\x1b\xbf\x9fR\xba\xb5\xb0\xf7\xf5g\xb1\xdcU;\x1bL\xbd\v\xc4\xf8\xf5\xd8\xd3\xba\x8a5\xa0\x00\xc2\xd7\xe0Y\xd3\xa27\xb4S\xb1bd\x05\x9bD\x01\x85b5U\xb4\x8c\x17\xf4f0P\x9f\xe9`W\xb4\xe0\xf0\x19\xc2\x87P><\xb48\xd2Jb,7\xdc2/\xdd_\xdbXT\xffZ\x12p\xac\xdb[\x00\x00\x00\xf1\xdc\xd4\x99C9\x90\x10T\xf4:\xd6\x15\xff\xe06\x99iM;\xd6\x8c\x96\xdes\xa2\xa7v>\xd8W\xf6B\x9e-*\x83\x1c\xe1\x04\x15E\xa2\xe2S\xee\xb1\x97B\xa7\x9cKN\xfb\x14m\x84\x85A\xb7\x10g\x86\x04\x148{\vh\x14\x94\x81?\x14\xc7\xb5\xd9\xc1\x8f\x9e\xb9l\xbb\xb1H\xa3e\x7f-\xfb\xc2L\xe5\xf6p\xc5\x82\xcb\x85\xe80\xaf6\xf3\xd5\xa1\xe0\xc9\xe6\xb0', r4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f00000007c0)="4759cc578bfb7c3ef7c4512698622757c3026c0f26a5d8bbff990d186ca79bab73a0a38fff5380968ebc3fe225d5912f3717d3bf219ece7bdac5a78fdb6ca5ea988e542f2154937286cfdf381f78a67941cc6a00e0740de59e6b27b78ab1dc9917c60286e58c948af0bff0d28519ab2b0b30f6cb24134f9ebf4de9133f270adcdcfdf24ecaa88a76e480b219a4983b9f78f5903e32ae9e8868b6de2e8c2903c7b44ba3e36f7265aea27273412863890e9018beac1828178b539e74f8d90ea4c9dd8040b3e886936f98b1ae2dbacf0303f12937b986f44db43f2921ad0622c6e6c85899e167ad1fab36a4f3cf04590d4f61da9ffffa592c631d", 0xf9, 0x0) request_key(&(0x7f0000000700)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000180)='-]\x1ab\xe6\x06\\]\x00', r5) add_key$keyring(&(0x7f0000000200), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r4) r6 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "3339b7878a1c91bbd7511e9f0230d3de41391b9b52b98b015a8460bbb4be26f73d7663f703da9b7df7c4c66762b16e6eb6231ce5c27f841f14881a9ebc769b6e"}, 0x48, 0xfffffffffffffffd) keyctl$update(0x2, 0x0, &(0x7f0000000b40)="04bd75484a67094d42dd39da3f37e3e9cd88a9153a37faef082bddd84aef8fff511e105852bf23c9a57b68eb1918514159511a195672aef1b2e36341df6b4263d82237f585b0a9a13fa51318693514cd68c7bf1646273b483b6af067dc3ab784bd4ce5a6507fbedcbfa249897f34eaf5435efbdfd4de9f4c06e9c4ac1241c9d16a0000004e9135636cfa2654d93fb57bc8f2ec43418e0763e33ac271301868a9ef43c83736edd10639a144e70350cf203c4d33b33b1193e0e44971b85fc941a7bb79c40728e599", 0xc7) keyctl$KEYCTL_MOVE(0x1e, r0, r6, r3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x42) 02:31:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xffffff80, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:31:57 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5) 02:31:57 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_io_uring_setup(0x3783, &(0x7f0000000180)={0x0, 0x808b, 0x20, 0x2, 0x223, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r6}}, 0x0) pipe2(&(0x7f0000000040), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r7, 0x4) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:31:57 executing program 0: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002800000000000028252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f00000001c0)="2257d91baee4986466774672e8d215f9b897bdf78462b7160adf", 0x1a, 0xf000}], 0x0, &(0x7f0000000000)={[{@utf8}]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000500)=[{&(0x7f0000000200)="5d728f36dd8e2707086636f21322ba88d3dbaf2371faa16004e77f25a84148d1cb94d9d16ddd8095b2652105808ced3fd4f288b47e174ce63a479667c74cd1b722bf5aa5b709bb7b53450dc55b401a5bc0d087eca6a02df3a43522265718aabe61b296ca430d0af20c4460f0c76ec8e9b1793843daf13953ff47f97e40bb6ee62855c94162498c6bde05425e253afd1ed47ad687c4728f3b5b9b9dede6c52ad2d85588be7e67e026163dc4fa8040b201e868e91a", 0xb4, 0xfffffffffffff362}, {&(0x7f0000000180)="29550ea4c3b8dde4a6146be80a139c8501f99cb9768e8f13975e517ba12470bbbcadfd6b76ee82f2b8d004fdd00b307d38e14b", 0x33, 0x5}, {&(0x7f00000002c0)="d9c651d1bf017eb503630f2e377fba4aed", 0x11}, {&(0x7f0000000300)="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", 0xfa, 0x1ff}, {&(0x7f0000000400)="256b82f908b1c7dd01a9237c21c59743b0760af6e4e8989cd4c1ffd79ff8ba91b513f0a036358da5375c7b87e63ed0c95675f2d3c007c2c9198668f3528581a4ca91517c2958e8923a151c0233291962948da966dccdd6bd4d52552674a22bf8e44d23905cc1f670687a7f8301fb0310e32e35159578720a49ceb4ecd6097ceb477d7ad9f1f7b78465697fd4d570ca54c6300b2ac0e5ba4582908b252bfd788ef5c55dfc02a51105a9aeaab6839405e04c49615819fe252ef493ee0f48022fbff17639dcaa91d2249484bcacf46d6dcbe031f5209f335db934bfb0b6fd", 0xdd, 0x7}], 0x2b408a, &(0x7f00000006c0)={[{@uni_xlate}, {@numtail}, {@uni_xlate}], [{@euid_gt={'euid>', r0}}]}) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x0) openat(r2, &(0x7f0000000700)='./file0\x00', 0x40000, 0xb8) 02:31:57 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 78) 02:31:57 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x162}}}, 0xb8}}, 0x0) [ 2149.253271] FAULT_INJECTION: forcing a failure. [ 2149.253271] name failslab, interval 1, probability 0, space 0, times 0 [ 2149.255138] CPU: 1 PID: 11751 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2149.256211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2149.257183] FAULT_INJECTION: forcing a failure. [ 2149.257183] name failslab, interval 1, probability 0, space 0, times 0 [ 2149.257508] Call Trace: [ 2149.257536] dump_stack+0x107/0x167 [ 2149.261024] should_fail.cold+0x5/0xa [ 2149.261624] ? __alloc_skb+0x6d/0x5b0 [ 2149.262215] should_failslab+0x5/0x20 [ 2149.262807] kmem_cache_alloc_node+0x55/0x330 [ 2149.263520] ? mark_lock+0xf5/0x2df0 [ 2149.264107] __alloc_skb+0x6d/0x5b0 [ 2149.264684] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2149.265510] alloc_skb_with_frags+0x92/0x570 [ 2149.266197] ? mark_lock+0xf5/0x2df0 [ 2149.266777] ? mark_lock+0xf5/0x2df0 [ 2149.267381] sock_alloc_send_pskb+0x7af/0x930 [ 2149.268092] ? sk_alloc+0x350/0x350 [ 2149.268685] ? perf_trace_lock+0xac/0x490 [ 2149.269364] ? SOFTIRQ_verbose+0x10/0x10 [ 2149.270010] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2149.270829] ? rawv6_exit+0x20/0x20 [ 2149.271416] ? SOFTIRQ_verbose+0x10/0x10 [ 2149.272073] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2149.272822] ? ip6_mtu+0x1e9/0x3d0 [ 2149.273378] ? ip6_setup_cork+0xfb7/0x1740 [ 2149.274034] ip6_append_data+0x1e6/0x330 [ 2149.274673] ? rawv6_exit+0x20/0x20 [ 2149.275240] ? rawv6_exit+0x20/0x20 [ 2149.275823] icmp6_send+0x1250/0x1f30 [ 2149.276437] ? icmpv6_push_pending_frames+0x470/0x470 [ 2149.277230] ? find_held_lock+0x2c/0x110 [ 2149.277911] ? ip6_dst_hoplimit+0x440/0x440 [ 2149.278581] ip6_pkt_drop+0x3d2/0x7f0 [ 2149.279198] ? ip6_pkt_discard+0x20/0x20 [ 2149.279848] ip6_local_out+0x29f/0x4c0 [ 2149.280471] ip6_send_skb+0x117/0x460 [ 2149.281075] udp_v6_send_skb+0x7b7/0x1620 [ 2149.281744] udpv6_sendmsg+0x216b/0x2b40 [ 2149.282381] ? ip_frag_init+0x350/0x350 [ 2149.283015] ? udp_v6_push_pending_frames+0x360/0x360 [ 2149.283824] ? SOFTIRQ_verbose+0x10/0x10 [ 2149.284473] ? __lockdep_reset_lock+0x180/0x180 [ 2149.285216] ? lock_acquire+0x197/0x470 [ 2149.285824] ? find_held_lock+0x2c/0x110 [ 2149.286474] ? lock_chain_count+0x20/0x20 [ 2149.287138] ? sock_has_perm+0x1ea/0x280 [ 2149.287810] ? __import_iovec+0x458/0x590 [ 2149.288466] ? udp_v6_push_pending_frames+0x360/0x360 [ 2149.289299] inet6_sendmsg+0x105/0x140 [ 2149.289915] ? inet6_compat_ioctl+0x320/0x320 [ 2149.290622] __sock_sendmsg+0xf2/0x190 [ 2149.291252] ____sys_sendmsg+0x334/0x870 [ 2149.291900] ? sock_write_iter+0x3d0/0x3d0 [ 2149.292570] ? do_recvmmsg+0x6d0/0x6d0 [ 2149.293184] ? find_held_lock+0x2c/0x110 [ 2149.293836] ___sys_sendmsg+0xf3/0x170 [ 2149.294453] ? sendmsg_copy_msghdr+0x160/0x160 [ 2149.295184] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2149.296007] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2149.296701] ? trace_hardirqs_on+0x5b/0x180 [ 2149.297377] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2149.298081] ? finish_task_switch+0x126/0x5d0 [ 2149.298780] ? finish_task_switch+0xef/0x5d0 [ 2149.299522] ? __switch_to+0x572/0xf70 [ 2149.300137] ? __switch_to_asm+0x3a/0x60 [ 2149.300774] ? __switch_to_asm+0x34/0x60 [ 2149.301413] ? __schedule+0x82c/0x1ea0 [ 2149.302033] ? io_schedule_timeout+0x140/0x140 [ 2149.302745] __sys_sendmmsg+0x195/0x470 [ 2149.303384] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2149.304041] ? lock_downgrade+0x6d0/0x6d0 [ 2149.304718] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2149.305474] ? wait_for_completion_io+0x270/0x270 [ 2149.306224] ? rcu_read_lock_any_held+0x75/0xa0 [ 2149.306950] ? vfs_write+0x354/0xb10 [ 2149.307546] ? fput_many+0x2f/0x1a0 [ 2149.308114] ? ksys_write+0x1a9/0x260 [ 2149.308705] ? __ia32_sys_read+0xb0/0xb0 [ 2149.309347] __x64_sys_sendmmsg+0x99/0x100 [ 2149.310004] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2149.310808] do_syscall_64+0x33/0x40 [ 2149.311387] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2149.312192] RIP: 0033:0x7f9688118b19 [ 2149.312756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2149.315632] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2149.316820] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2149.317947] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2149.319055] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2149.320179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2149.321281] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 2149.322420] CPU: 0 PID: 11757 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2149.324089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2149.325985] Call Trace: [ 2149.326593] dump_stack+0x107/0x167 [ 2149.327438] should_fail.cold+0x5/0xa [ 2149.328302] ? prepare_creds+0x25/0x5e0 [ 2149.329202] should_failslab+0x5/0x20 [ 2149.330070] kmem_cache_alloc+0x5b/0x310 [ 2149.330993] ? lock_downgrade+0x6d0/0x6d0 [ 2149.331931] prepare_creds+0x25/0x5e0 [ 2149.332795] copy_creds+0x72/0x580 [ 2149.333608] copy_process+0xfef/0x78b0 [ 2149.334484] ? SOFTIRQ_verbose+0x10/0x10 [ 2149.335421] ? __lockdep_reset_lock+0x180/0x180 [ 2149.336485] ? mark_lock+0xf5/0x2df0 [ 2149.337344] ? lock_acquire+0x197/0x470 [ 2149.338241] ? find_held_lock+0x2c/0x110 [ 2149.339180] ? __cleanup_sighand+0xb0/0xb0 [ 2149.340163] ? _copy_from_user+0xfb/0x1b0 [ 2149.341110] kernel_clone+0xe7/0x980 [ 2149.341956] ? __lockdep_reset_lock+0x180/0x180 [ 2149.343009] ? create_io_thread+0xf0/0xf0 [ 2149.343981] ? ksys_write+0x21a/0x260 [ 2149.344843] ? lock_downgrade+0x6d0/0x6d0 [ 2149.345790] __do_sys_clone3+0x1e5/0x320 [ 2149.346708] ? __do_sys_clone+0x110/0x110 02:31:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xffffff9e, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2149.347678] ? rcu_read_lock_any_held+0x75/0xa0 [ 2149.348927] ? vfs_write+0x354/0xb10 [ 2149.349781] ? fput_many+0x2f/0x1a0 [ 2149.350607] ? ksys_write+0x1a9/0x260 [ 2149.351493] ? __ia32_sys_read+0xb0/0xb0 [ 2149.352421] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2149.353620] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2149.354783] ? trace_hardirqs_on+0x5b/0x180 [ 2149.355780] do_syscall_64+0x33/0x40 [ 2149.356623] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2149.357789] RIP: 0033:0x7f5655a9cb19 [ 2149.358630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2149.362792] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2149.364523] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2149.366137] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2149.367760] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2149.369377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2149.371003] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2149.374042] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2149.418732] cgroup: fork rejected by pids controller in /syz2 02:31:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xfffffff0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:31:57 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x300}}}, 0xb8}}, 0x0) 02:31:57 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x1c0f, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2149.476423] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:31:57 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) r0 = gettid() timer_create(0x3, &(0x7f00000003c0)={0x0, 0x0, 0x2, @thr={&(0x7f0000000400)="8963d86310c7ec95e5d86628dc8248d7c2ec286e07e6846a3ef145c246b5cc58358bd418a2fca1a546abf9c3d59bb93d4715f7bd8c2ff48232df6b54677abb949c23f9d3c04fe2ec2ff459fdb9a95f4dee7657830de3c0dcce546e90df24855f00d5d85214a9bbab74ed8836892ba06697ca02775b0c54b165fa5c9db90212d0fb8909ed42c8ad9faab6ba2e8625d72faa8da238b816fbd63cdb921316e2fbfa3f6e11ccae7fab23fa7091e3bb60508ce7f75efb41a865d06a941ba638453ffee211b2b57b79a7451b7e8a9da23d69ef32e014", &(0x7f0000000180)="a2543454eff81bf1da083d71c8fe22229a80326a4530571929f97afe33584c9cc304f3befe8fa30cb2a0c2320357bc145e68d416f2ffcb5360c367db93c40755d92d53d0292bd1fc922df48cc9b58709fd84a63dcfffe78361b79b6d4b42fea11718fe840de2d11ed0c8972e85bb1071dd"}}, &(0x7f0000000340)) capset(&(0x7f0000000a80)={0x20080522, r0}, &(0x7f0000000ac0)={0x400, 0x77, 0x6, 0x100, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x3, &(0x7f0000000200)=0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) capset(&(0x7f0000000240)={0x20080522, r0}, &(0x7f00000002c0)={0x40, 0x5, 0x502b, 0x7fffffff, 0x6, 0x3}) io_submit(r2, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg$nl_generic(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x29, 0x1, 0x70bd25, 0x25dfdbff, {0x1d}, [@generic="4c631b2f4a70fdb1f1bf6dfc7b905d6e8504921d506e3f6ac371402bc72c0074aad793ebf0642bebddaaf4b9c1e0782470c5964f6f6fd60969f7b0d5a27097"]}, 0x54}, 0x1, 0x0, 0x0, 0x8084}, 0x4000040) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001600010d0000000000000000000479ab0112e771690c2d4170de34389fdbd32aeb4714c1fc51288770d4d9edc67bc0cb27f8850900000099794b77f35767d8b56772508252927d186e0e290ebdba5ac2d3adaa4a30505d1ab49f33277a377a311d5e076013a3e0dd01f7307960956b7f2c960c3f20a007d7ac7376ca6ccca0d89ac3964fb07d68cd0d6ac799cf15ebcd835d85d11aec110276758cf4014436e6640cf05b24d12b2ac6307cd016a92cc48a"], 0x14}}, 0x0) pwritev(r1, &(0x7f0000000a00)=[{&(0x7f0000000640)="6c8572cf1eb4388e1ad690c99f27853789f888e77a24e6167e21701ee51294a37ecd4d7ab6fdf6ef961badc0261c9569906d081a132108c607878887b4a29b386f2987e53e91f5404e8aa4816e2f6e0d19657ba6af3f3b3c1d70c05a5fba3eb6b2651ddd2a61e6e34d9a8fa155cb1bb9e7faaee8aa0b480985dc4efee2777511025dcb83bc89093f6802e264f73f3d6e5c9555a57f7a4af2ea20999ba706fc24a5616b261f1099d818f6c1bca45573a7cdb3bd314504e7e8a153ad9983c55f677deecbd274df407ac08042d46f5b76ae4a0316150dd674c084001cc2aeba", 0xde}, {&(0x7f0000000300)="20aa77b257ff296f92602c4c24032ac3c50076a061e503", 0x17}, {&(0x7f0000000740)="dc57d3297009a20bc2454b6fd8eff0f25c38411fc5d83f45c2b10be32ce818903a28ed15fb8e0c066ba756f33a850f0195a445136a7bd0e2f7366171e477cca4d9608db4606c08c8146fc4860322a5408a99849d24415d6c5093dd3cabfa7d11c9589ed9fcb0511d92a2867c17cf3087a35559faadc87f149c894e5b57753156eff1e1b21317e23c574e", 0x8a}, {&(0x7f0000000800)="242c14933de05986c4b7d9452b01a487ca05a51fcee6711d828f65c647d3ae9ee1e23c8a76b0436eeda4838dc0a043041d494edbe69ecf71da26ff59f449f8a6e630f6ba4b2387916bd4aadf30dcb4566cc04b963532c251410e0a6bee3b2a44e9afd11955dbaf9978cda7b47437fd3df86f7ae38d04bf717606c3a28eb85f6a11626fa8ac206a57f5c4b37da00ed16ac877ee794882b3bfcb266187519929ba6c297d7285ebdcc89e1f3bf42ddf80c354fb8fcc644334c0c9f5cf9e968ee84c98b76a3abbbb9f99df005a92516848228e0322ee0d3c6309aab42c8b04", 0xdd}, {&(0x7f0000000500)="828b46b1f1ded563f4393897b6889cfa38404f6db5eafc787b16faca997f3df27222f17d0c864b43801ffd4f7857417e64acb4c935d819c9b04c9d17d62042f2126e87134f3cf48b83fe3615058310cb0fa23d9c45b4", 0x56}, {&(0x7f0000000900)="0a81aeeea684909eadeaa3a60257b66c880fa9653d527e83352ed932c1358aef375767693a1c1c594f2442d572a01fe696b389e6382e1465834b791f520054fbe4f3c6c50e0f1633ba2b1e3801ab8d25333708a776a101bdbefcf36e0b87e845c197275ce08991ea0a4c5ed4bf30fdc2e13b6f5dc55aadbb89eb2c2d939bf4e84996ee4b2c08f056b527dbf0686ef785ca6c70007b9169eb2293c20ee42ba93ceac39fddc1413713805f5a302d023b49f076de96e8f7546e12c56f9e07d96470fba5e0edaac3210a39d5f3b2c95578485d0d302c", 0xd4}], 0x6, 0x858b, 0x8) 02:31:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xfffffffc, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:31:57 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x4800, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:31:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x188, r1, 0x329, 0x0, 0x0, {{0x6b}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x5f, 0xc5, "874872128c7d84f34d6054954b42749aa4ca80d2fd1e6ec7c868c40903f4daa8bc0c8846ec055ee5639417cf40ee33a3435bd0bed03de7542943f6978f7cc04697756866145ec3279264ff45785ecfa6d6fdf09729346c8a451b83"}, @NL80211_ATTR_VENDOR_DATA={0xec, 0xc5, "4a56e7cdc8437468d071aae413abf09fc8127f9197c4b06b15e25bedeb6db25243ca0950b51bd3d3f82f17faf91d8931bda9f663f9c947c5b7dead820347702c5f675182d26b5510b0b759a11ef660d77624ba76e030490304a3a47ff41b5d12e80e356c25328b502440eff9a1f8008c87def70bd459199ef3e81c7988a380f814f3c655da55adab8abfbb1c33c03c1baa4f653c00e4de8335e5d21bfadbf434b5dc8b50e7255e24fc89a4c1a3c52c1ef4d1c3440f0de2f048f80e6d5600b3e4c81240290a8938a1854e263ea102e3d1a0ac1bc0519addd6d7144331164ae61400d2395cb0afecf1"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xabd}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x188}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x11000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}, {&(0x7f0000010d00)="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", 0x200, 0xc000}, {&(0x7f0000010f00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0xc800}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xd000}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0xd800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x10800}], 0x0, &(0x7f0000011700)) [ 2149.602139] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:32:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}], 0x1) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) poll(&(0x7f0000000080)=[{r0, 0xc2}, {r3, 0xc1}], 0x2, 0x140) ioctl$SG_GET_NUM_WAITING(r2, 0x227c, 0x0) 02:32:16 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x900}}}, 0xb8}}, 0x0) 02:32:16 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 79) 02:32:16 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x4c00, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:32:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xffffffff, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:32:16 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x5453, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FIONCLEX(r0, 0x5450) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x1e, 0xc21}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x9, 0x8, 0x7, 0x0, 0x0, 0x2, 0x2000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080)}, 0x8008, 0x9, 0x1, 0x1, 0x80000000, 0xea9a, 0x8, 0x0, 0x100, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0xb) clock_gettime(0x7, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x46e2, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=0x0) r5 = openat$cgroup(r3, &(0x7f0000000b00)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000b40)={0x800, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000200), {0x23}, &(0x7f00000004c0)=""/167, 0xa7, &(0x7f0000000580)=""/219, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x0], 0x6, {r5}}, 0x58) openat(r1, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x5c80, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000380)=@generic={0xa, "ddf7c27c14c74783790922c4a27e15ae186699528fdc2eb0b6988ecdbc3ac7563f9d06aa68ae63a00065dfd076177c20be9f7d54f5095f9253771e502e3663b2565d4145d7012771e10a566c6208c31fe82ce7bc7ceac1d0e5a493dbc3660de03e0893ae1528e456e7fb809d544f405c4ba98d6c9401b08a07860a2b3b1e"}}, 0x62a) io_submit(0x0, 0x1, &(0x7f00000015c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 02:32:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000380)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181", 0xaf, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f"]) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) openat(r1, &(0x7f0000000680)='./file0\x00', 0x101000, 0x20) r2 = open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x8000) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x82) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x1) mkdirat(r3, &(0x7f0000000140)='./file0\x00', 0x42) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000340)=0x0) syz_io_uring_setup(0x68d2, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x4}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000700)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x1, 0x1, 0x1, {0x0, r7}}, 0x4) rmdir(&(0x7f0000000640)='./file0\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000440)) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x2, 0xfe, 0x7, 0x3, 0x0, 0x9dbc, 0x10000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0xdd}, 0x30, 0xf3f, 0x0, 0x6, 0x0, 0xff, 0x4, 0x0, 0x7, 0x0, 0xfffffffffffffffe}, r4, 0x3, r3, 0x8) 02:32:16 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6) [ 2168.565201] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2168.572957] FAULT_INJECTION: forcing a failure. [ 2168.572957] name failslab, interval 1, probability 0, space 0, times 0 [ 2168.576129] CPU: 0 PID: 11903 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2168.577717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2168.579599] Call Trace: [ 2168.580201] dump_stack+0x107/0x167 [ 2168.581034] should_fail.cold+0x5/0xa [ 2168.581905] ? create_object.isra.0+0x3a/0xa20 [ 2168.582937] should_failslab+0x5/0x20 [ 2168.583803] kmem_cache_alloc+0x5b/0x310 [ 2168.584726] create_object.isra.0+0x3a/0xa20 [ 2168.585716] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2168.586868] kmem_cache_alloc+0x159/0x310 [ 2168.587822] prepare_creds+0x25/0x5e0 [ 2168.588685] copy_creds+0x72/0x580 [ 2168.589500] copy_process+0xfef/0x78b0 [ 2168.590379] ? SOFTIRQ_verbose+0x10/0x10 [ 2168.591311] ? __lockdep_reset_lock+0x180/0x180 [ 2168.592359] ? mark_lock+0xf5/0x2df0 [ 2168.593209] ? lock_acquire+0x197/0x470 [ 2168.594103] ? find_held_lock+0x2c/0x110 [ 2168.595033] ? __cleanup_sighand+0xb0/0xb0 [ 2168.596021] ? _copy_from_user+0xfb/0x1b0 [ 2168.596964] kernel_clone+0xe7/0x980 [ 2168.597803] ? __lockdep_reset_lock+0x180/0x180 [ 2168.598860] ? create_io_thread+0xf0/0xf0 [ 2168.599817] ? ksys_write+0x21a/0x260 [ 2168.600675] ? lock_downgrade+0x6d0/0x6d0 [ 2168.601614] __do_sys_clone3+0x1e5/0x320 [ 2168.602530] ? __do_sys_clone+0x110/0x110 [ 2168.603496] ? rcu_read_lock_any_held+0x75/0xa0 [ 2168.604543] ? vfs_write+0x354/0xb10 [ 2168.605391] ? fput_many+0x2f/0x1a0 [ 2168.606220] ? ksys_write+0x1a9/0x260 [ 2168.607087] ? __ia32_sys_read+0xb0/0xb0 [ 2168.608014] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2168.609201] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2168.610363] ? trace_hardirqs_on+0x5b/0x180 [ 2168.611353] do_syscall_64+0x33/0x40 [ 2168.612189] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2168.613350] RIP: 0033:0x7f5655a9cb19 [ 2168.614199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2168.618372] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2168.620120] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2168.621739] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2168.623360] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2168.624980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2168.626596] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:32:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xf, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:32:16 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xf00}}}, 0xb8}}, 0x0) [ 2168.653728] FAULT_INJECTION: forcing a failure. [ 2168.653728] name failslab, interval 1, probability 0, space 0, times 0 [ 2168.656202] CPU: 1 PID: 11901 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2168.657674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2168.659450] Call Trace: [ 2168.660019] dump_stack+0x107/0x167 [ 2168.660804] should_fail.cold+0x5/0xa [ 2168.661631] should_failslab+0x5/0x20 [ 2168.662447] __kmalloc_node_track_caller+0x74/0x3b0 [ 2168.663516] ? alloc_skb_with_frags+0x92/0x570 [ 2168.664484] ? mark_lock+0xf5/0x2df0 [ 2168.665288] __alloc_skb+0xb1/0x5b0 [ 2168.666071] alloc_skb_with_frags+0x92/0x570 [ 2168.667014] ? mark_lock+0xf5/0x2df0 [ 2168.667813] ? mark_lock+0xf5/0x2df0 [ 2168.668615] sock_alloc_send_pskb+0x7af/0x930 [ 2168.669586] ? sk_alloc+0x350/0x350 [ 2168.670368] ? perf_trace_lock+0xac/0x490 [ 2168.671249] ? SOFTIRQ_verbose+0x10/0x10 [ 2168.672144] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2168.673226] ? rawv6_exit+0x20/0x20 [ 2168.673998] ? SOFTIRQ_verbose+0x10/0x10 [ 2168.674878] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2168.675912] ? ip6_mtu+0x1e9/0x3d0 [ 2168.676668] ? ip6_setup_cork+0xfb7/0x1740 [ 2168.677575] ip6_append_data+0x1e6/0x330 [ 2168.678435] ? rawv6_exit+0x20/0x20 [ 2168.679218] ? rawv6_exit+0x20/0x20 [ 2168.680019] icmp6_send+0x1250/0x1f30 [ 2168.680858] ? icmpv6_push_pending_frames+0x470/0x470 [ 2168.681959] ? find_held_lock+0x2c/0x110 [ 2168.682876] ? ip6_dst_hoplimit+0x440/0x440 [ 2168.683811] ip6_pkt_drop+0x3d2/0x7f0 [ 2168.684625] ? ip6_pkt_discard+0x20/0x20 [ 2168.685491] ip6_local_out+0x29f/0x4c0 [ 2168.686328] ip6_send_skb+0x117/0x460 [ 2168.687145] udp_v6_send_skb+0x7b7/0x1620 [ 2168.688056] udpv6_sendmsg+0x216b/0x2b40 [ 2168.688926] ? ip_frag_init+0x350/0x350 [ 2168.689788] ? udp_v6_push_pending_frames+0x360/0x360 [ 2168.690878] ? SOFTIRQ_verbose+0x10/0x10 [ 2168.691766] ? __lockdep_reset_lock+0x180/0x180 [ 2168.692773] ? lock_acquire+0x197/0x470 [ 2168.693619] ? find_held_lock+0x2c/0x110 [ 2168.694498] ? lock_chain_count+0x20/0x20 [ 2168.695396] ? sock_has_perm+0x1ea/0x280 [ 2168.696291] ? __import_iovec+0x458/0x590 [ 2168.697178] ? udp_v6_push_pending_frames+0x360/0x360 [ 2168.698281] inet6_sendmsg+0x105/0x140 [ 2168.699102] ? inet6_compat_ioctl+0x320/0x320 [ 2168.700062] __sock_sendmsg+0xf2/0x190 [ 2168.700900] ____sys_sendmsg+0x334/0x870 [ 2168.701768] ? sock_write_iter+0x3d0/0x3d0 [ 2168.702662] ? do_recvmmsg+0x6d0/0x6d0 [ 2168.703501] ? __lock_acquire+0x1657/0x5b00 [ 2168.704436] ___sys_sendmsg+0xf3/0x170 [ 2168.705268] ? sendmsg_copy_msghdr+0x160/0x160 [ 2168.706241] ? __lockdep_reset_lock+0x180/0x180 [ 2168.707242] ? lock_acquire+0x197/0x470 [ 2168.708093] ? find_held_lock+0x2c/0x110 [ 2168.708970] ? __might_fault+0xd3/0x180 [ 2168.709814] ? lock_downgrade+0x6d0/0x6d0 [ 2168.710721] __sys_sendmmsg+0x195/0x470 [ 2168.711583] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2168.712502] ? lock_downgrade+0x6d0/0x6d0 [ 2168.713410] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2168.714439] ? wait_for_completion_io+0x270/0x270 [ 2168.715485] ? rcu_read_lock_any_held+0x75/0xa0 [ 2168.716473] ? vfs_write+0x354/0xb10 [ 2168.717266] ? fput_many+0x2f/0x1a0 [ 2168.718041] ? ksys_write+0x1a9/0x260 [ 2168.718853] ? __ia32_sys_read+0xb0/0xb0 [ 2168.719735] __x64_sys_sendmmsg+0x99/0x100 [ 2168.720642] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2168.721734] do_syscall_64+0x33/0x40 [ 2168.722524] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2168.723619] RIP: 0033:0x7f9688118b19 [ 2168.724408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2168.728315] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2168.729938] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2168.731462] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2168.732971] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2168.734479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2168.735997] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:32:16 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 7) 02:32:16 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x6800, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:32:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000012000)='PMM', 0x3, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x10a) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x80) 02:32:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0xee) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000080), 0x0, 0x0, 0x3) [ 2168.798062] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:32:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRESDEC]) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f00000002c0)=0x2c8, 0xffffffffffffffff, &(0x7f0000000300)=0x1, 0x4, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = openat$hpet(0xffffffffffffff9c, 0x0, 0x1a30c2, 0x0) creat(&(0x7f0000000000)='./file2\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000000c0)={0x6200, 0x1f, 0x1}) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000180)) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x3}, 0x494, 0x81, 0x200, 0x0, 0x0, 0x4, 0x5c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xd5) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) 02:32:16 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2f00}}}, 0xb8}}, 0x0) 02:32:17 executing program 5: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x24508) mkdirat(r0, &(0x7f0000001440)='./file1\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000180)) getpeername(r1, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80) rmdir(&(0x7f0000000080)='./file1\x00') 02:32:17 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2168.883776] FAULT_INJECTION: forcing a failure. [ 2168.883776] name failslab, interval 1, probability 0, space 0, times 0 [ 2168.886561] CPU: 0 PID: 12023 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2168.888152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2168.890024] Call Trace: [ 2168.890630] dump_stack+0x107/0x167 [ 2168.891465] should_fail.cold+0x5/0xa [ 2168.892337] ? security_prepare_creds+0x112/0x190 [ 2168.893428] should_failslab+0x5/0x20 [ 2168.894287] __kmalloc+0x72/0x390 [ 2168.895088] security_prepare_creds+0x112/0x190 [ 2168.896155] prepare_creds+0x452/0x5e0 [ 2168.897046] copy_creds+0x72/0x580 [ 2168.897854] copy_process+0xfef/0x78b0 [ 2168.898731] ? SOFTIRQ_verbose+0x10/0x10 [ 2168.899668] ? __lockdep_reset_lock+0x180/0x180 [ 2168.900720] ? mark_lock+0xf5/0x2df0 [ 2168.901567] ? lock_acquire+0x197/0x470 [ 2168.902465] ? find_held_lock+0x2c/0x110 [ 2168.903415] ? __cleanup_sighand+0xb0/0xb0 [ 2168.904410] ? _copy_from_user+0xfb/0x1b0 [ 2168.905356] kernel_clone+0xe7/0x980 [ 2168.906199] ? __lockdep_reset_lock+0x180/0x180 [ 2168.907267] ? create_io_thread+0xf0/0xf0 [ 2168.908227] ? ksys_write+0x21a/0x260 [ 2168.909095] ? lock_downgrade+0x6d0/0x6d0 [ 2168.910042] __do_sys_clone3+0x1e5/0x320 [ 2168.910958] ? __do_sys_clone+0x110/0x110 [ 2168.911928] ? rcu_read_lock_any_held+0x75/0xa0 [ 2168.912986] ? vfs_write+0x354/0xb10 [ 2168.913838] ? fput_many+0x2f/0x1a0 [ 2168.914662] ? ksys_write+0x1a9/0x260 [ 2168.915538] ? __ia32_sys_read+0xb0/0xb0 [ 2168.916466] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2168.917653] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2168.918815] ? trace_hardirqs_on+0x5b/0x180 [ 2168.919799] do_syscall_64+0x33/0x40 [ 2168.920642] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2168.921802] RIP: 0033:0x7f5655a9cb19 [ 2168.922644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2168.926843] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2168.928583] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2168.930204] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2168.931836] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2168.933468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2168.935100] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:32:33 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 8) 02:32:33 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x6c00, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:32:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x2c0, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:32:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x17, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x48020200) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x22, 0x1c, 0x0, 0x0, 0x4, 0x2, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffeffff, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x40000, 0x9, 0x7fffffff, 0x4, 0x6, 0x401, 0x81, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xc, r1, 0x0) 02:32:33 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x6201}}}, 0xb8}}, 0x0) 02:32:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2f00}}}, 0xb8}}, 0x0) 02:32:33 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 80) [ 2185.661902] FAULT_INJECTION: forcing a failure. [ 2185.661902] name failslab, interval 1, probability 0, space 0, times 0 [ 2185.664572] CPU: 1 PID: 12146 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2185.666034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2185.667789] Call Trace: [ 2185.668354] dump_stack+0x107/0x167 [ 2185.669131] should_fail.cold+0x5/0xa [ 2185.669942] ? create_object.isra.0+0x3a/0xa20 [ 2185.670909] should_failslab+0x5/0x20 [ 2185.671727] kmem_cache_alloc+0x5b/0x310 [ 2185.672593] create_object.isra.0+0x3a/0xa20 [ 2185.673526] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2185.674605] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2185.675683] ? alloc_skb_with_frags+0x92/0x570 [ 2185.676656] __alloc_skb+0xb1/0x5b0 [ 2185.677437] alloc_skb_with_frags+0x92/0x570 [ 2185.678374] ? mark_lock+0xf5/0x2df0 [ 2185.679166] ? mark_lock+0xf5/0x2df0 [ 2185.679967] sock_alloc_send_pskb+0x7af/0x930 [ 2185.680929] ? sk_alloc+0x350/0x350 [ 2185.681704] ? perf_trace_lock+0xac/0x490 [ 2185.682579] ? SOFTIRQ_verbose+0x10/0x10 [ 2185.683465] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2185.684531] ? rawv6_exit+0x20/0x20 [ 2185.685295] ? SOFTIRQ_verbose+0x10/0x10 [ 2185.686167] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2185.687182] ? ip6_mtu+0x1e9/0x3d0 [ 2185.687945] ? ip6_setup_cork+0xfb7/0x1740 [ 2185.688844] ip6_append_data+0x1e6/0x330 [ 2185.689697] ? rawv6_exit+0x20/0x20 [ 2185.690465] ? rawv6_exit+0x20/0x20 [ 2185.691242] icmp6_send+0x1250/0x1f30 [ 2185.692080] ? icmpv6_push_pending_frames+0x470/0x470 [ 2185.693167] ? find_held_lock+0x2c/0x110 [ 2185.694078] ? ip6_dst_hoplimit+0x440/0x440 [ 2185.695003] ip6_pkt_drop+0x3d2/0x7f0 [ 2185.695815] ? ip6_pkt_discard+0x20/0x20 [ 2185.696674] ip6_local_out+0x29f/0x4c0 [ 2185.697503] ip6_send_skb+0x117/0x460 [ 2185.698316] udp_v6_send_skb+0x7b7/0x1620 [ 2185.699210] udpv6_sendmsg+0x216b/0x2b40 [ 2185.700079] ? ip_frag_init+0x350/0x350 [ 2185.700934] ? udp_v6_push_pending_frames+0x360/0x360 [ 2185.702017] ? SOFTIRQ_verbose+0x10/0x10 [ 2185.702890] ? __lockdep_reset_lock+0x180/0x180 [ 2185.703895] ? lock_acquire+0x197/0x470 [ 2185.704734] ? find_held_lock+0x2c/0x110 [ 2185.705609] ? lock_chain_count+0x20/0x20 [ 2185.706484] ? sock_has_perm+0x1ea/0x280 [ 2185.707384] ? __import_iovec+0x458/0x590 [ 2185.708268] ? udp_v6_push_pending_frames+0x360/0x360 [ 2185.709358] inet6_sendmsg+0x105/0x140 [ 2185.710185] ? inet6_compat_ioctl+0x320/0x320 [ 2185.711130] __sock_sendmsg+0xf2/0x190 [ 2185.711965] ____sys_sendmsg+0x334/0x870 [ 2185.712834] ? sock_write_iter+0x3d0/0x3d0 [ 2185.713727] ? do_recvmmsg+0x6d0/0x6d0 [ 2185.714551] ? __lock_acquire+0x1657/0x5b00 [ 2185.715486] ___sys_sendmsg+0xf3/0x170 [ 2185.716314] ? sendmsg_copy_msghdr+0x160/0x160 [ 2185.717284] ? __lockdep_reset_lock+0x180/0x180 [ 2185.718280] ? lock_acquire+0x197/0x470 [ 2185.719117] ? find_held_lock+0x2c/0x110 [ 2185.719998] ? __might_fault+0xd3/0x180 [ 2185.720839] ? lock_downgrade+0x6d0/0x6d0 [ 2185.721744] __sys_sendmmsg+0x195/0x470 [ 2185.722598] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2185.723517] ? lock_downgrade+0x6d0/0x6d0 [ 2185.724424] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2185.725446] ? wait_for_completion_io+0x270/0x270 [ 2185.726474] ? rcu_read_lock_any_held+0x75/0xa0 [ 2185.727463] ? vfs_write+0x354/0xb10 [ 2185.728250] ? fput_many+0x2f/0x1a0 [ 2185.729023] ? ksys_write+0x1a9/0x260 [ 2185.729833] ? __ia32_sys_read+0xb0/0xb0 [ 2185.730704] __x64_sys_sendmmsg+0x99/0x100 [ 2185.731612] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2185.732704] do_syscall_64+0x33/0x40 [ 2185.733488] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2185.734571] RIP: 0033:0x7f9688118b19 [ 2185.735355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2185.739226] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2185.740838] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2185.742337] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2185.743845] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2185.745353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2185.746859] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 2185.753578] FAULT_INJECTION: forcing a failure. [ 2185.753578] name failslab, interval 1, probability 0, space 0, times 0 [ 2185.756315] CPU: 0 PID: 12152 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2185.757878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2185.759756] Call Trace: [ 2185.760355] dump_stack+0x107/0x167 [ 2185.761179] should_fail.cold+0x5/0xa [ 2185.762047] ? create_object.isra.0+0x3a/0xa20 02:32:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) sendmmsg$inet(r0, &(0x7f0000003600)=[{{&(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000440)='7x', 0x2}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000780)="4ded", 0x2}], 0x1}}], 0x2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x8200, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)={0x1238, r2, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x120c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}, @ETHTOOL_A_BITSET_MASK={0x61, 0x5, "95198ee6c63e1d92dd2cfe31f1f2ebb8e57c5cc1971750e9c6d4eb7d145c0da1bea15ad2ccc5284d02adaee4eb458c746bf578e9378d4feff34065212e3eacf9ae2b728133b96613523f7cfe503488555d1dabfe7c318e7c6d342a676a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xe9^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x97cd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xf0, 0x4, "88c2d88ad5867a7576cae190404144026a8011ab86dbe5a000d64d11b016bffba635e192c1b2356c18d82d01428cfe50a4c4a7c8b7d358a45d051f64c1b45f2f7b3889c7d585bc3865dd25df58f9726239e5e3266b42e9cf7bd4d465c3759166eb5463d3a262d60a97fd4e72feb16e23687ba3033e6cf73061977b0c15d9183177f830e40fdee670fb83bd85382905a47e799fb5a5bfe961c6ded19d386d7a31b3ebbf4ee524ad713d45c9de59f2461e1809da045fcdd485fab5c3c6afa2a241337a5877623967e19e661f8e95fea8b66c350e450be0057a16a1f461263b2810e37ff4d8991352d0e53e66c8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x1238}, 0x1, 0x0, 0x0, 0x4080}, 0x4040000) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000080)=0xd05, 0x4) [ 2185.763090] should_failslab+0x5/0x20 [ 2185.764181] kmem_cache_alloc+0x5b/0x310 [ 2185.765106] create_object.isra.0+0x3a/0xa20 [ 2185.766105] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2185.767260] __kmalloc+0x16e/0x390 [ 2185.768090] security_prepare_creds+0x112/0x190 [ 2185.769152] prepare_creds+0x452/0x5e0 [ 2185.770041] copy_creds+0x72/0x580 [ 2185.770857] copy_process+0xfef/0x78b0 [ 2185.771739] ? SOFTIRQ_verbose+0x10/0x10 [ 2185.772661] ? __lockdep_reset_lock+0x180/0x180 [ 2185.773721] ? mark_lock+0xf5/0x2df0 [ 2185.774577] ? lock_acquire+0x197/0x470 [ 2185.775482] ? find_held_lock+0x2c/0x110 [ 2185.776411] ? __cleanup_sighand+0xb0/0xb0 [ 2185.777395] ? _copy_from_user+0xfb/0x1b0 [ 2185.778343] kernel_clone+0xe7/0x980 [ 2185.779182] ? __lockdep_reset_lock+0x180/0x180 [ 2185.780238] ? create_io_thread+0xf0/0xf0 [ 2185.781190] ? ksys_write+0x21a/0x260 [ 2185.782050] ? lock_downgrade+0x6d0/0x6d0 [ 2185.782988] __do_sys_clone3+0x1e5/0x320 [ 2185.783912] ? __do_sys_clone+0x110/0x110 [ 2185.784866] ? rcu_read_lock_any_held+0x75/0xa0 [ 2185.785916] ? vfs_write+0x354/0xb10 [ 2185.786761] ? fput_many+0x2f/0x1a0 [ 2185.787590] ? ksys_write+0x1a9/0x260 [ 2185.788452] ? __ia32_sys_read+0xb0/0xb0 [ 2185.789374] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2185.790578] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2185.791749] ? trace_hardirqs_on+0x5b/0x180 [ 2185.792734] do_syscall_64+0x33/0x40 [ 2185.793577] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2185.794740] RIP: 0033:0x7f5655a9cb19 [ 2185.795580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2185.799763] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2185.801465] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2185.803078] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2185.804700] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2185.806320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2185.807943] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:32:33 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xf000}}}, 0xb8}}, 0x0) 02:32:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xec0, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:32:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0xeffb, 0x0, 0x9, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x10000) setresuid(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x0}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x3ff, 0x4, &(0x7f0000000500)=[{&(0x7f0000000240)="ac170b46de1aebfc6326c6424815b9f7d0ce46f94f155edb77a282e6ab258597561ce43ab530a8429764a88fd73aaf6d0474805be5916088ec023de8a8aa4cd57c574f6103472904fad6c632dbba1c5e87d69f6af548938c7e4ac038c4e1", 0x5e, 0x4}, {&(0x7f00000003c0)="2f3abe8a1fe414c15416f15ca4b8f0f3c3bdb6a7b4f12ccd36c33cce4012ecf83b9554e01f6ed2aa521bf8aecc9d091d76a597b8cfd0b3f7a7e8045cbc1558438ba53b475c8a9730087d5ceb150dcbffed8c8a2abc4983b0dbdca7ccf9833e375da615064ef3bbf759630f6fd27ca314d1466009937e797d5f38b1e4f2549ddaf965bb992e3493353d743ff6a34d63c8644a496bbf24e2", 0x97, 0x8001}, {&(0x7f00000002c0)="5a73c81ab704e6da6578481a0bedca32dc9d8b9f4c2331d52503ec9d1ae1895bdf70175e5ecef66bedd97b8b95d9498726fe7f626fa943963b68940c3642ac293c61e321ff09c3688788fe845feeda112b4633a8ebc287aa70e9ff26ba5b", 0x5e, 0x80000001}, {&(0x7f00000001c0)="f389fce09f4307302e55c45ae4edb2b7d4edf81e7d3aa237ade137a66164051125049a11c360ab6f2a7426d9182b7f7d4d2d08f0c83683e6f2305f", 0x3b, 0x3}], 0x1000, &(0x7f00000005c0)={[{@grpquota}], [{@appraise_type}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt}, {@dont_measure}, {@euid_lt={'euid<', r1}}, {@hash}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x101) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)="3e75d00aab4a04f836dfee7ddecd8867c80f3ac1bb1d7ec4353e50fab267e724aa96e1980eef2e46fcb7e6ac0e6576efb4b5b12f2e3abbc222d862e41c9eb3958ee966383d0340249957832b8140bbb7d78a970b811235dee44685b47b094ffb4000f1c0d815ecd2272a01b9d55e7ce88964b1be05752781faf45048c60276625644", 0x82, 0x4008005, 0x1}, 0x1) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 02:32:52 executing program 2: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000480)=""/4096) r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x1002, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/37) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x403}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000001680)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001600)=ANY=[]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000001c00)) msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000001c0)=""/14) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)) setresuid(0x0, 0x0, 0x0) r2 = msgget$private(0x0, 0x400) syz_io_uring_submit(0x0, 0x0, &(0x7f00000015c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, r1, &(0x7f0000001580)={0x2000}, r1}, 0x8001) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r2, 0x0) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000300)=""/197) msgctl$IPC_RMID(0x0, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000001480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) msgctl$IPC_INFO(r2, 0x3, &(0x7f00000014c0)=""/190) getpgrp(0x0) getpgid(r0) 02:32:52 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x80000}}}, 0xb8}}, 0x0) 02:32:52 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 81) 02:32:52 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 9) 02:32:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x33fe0, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:32:52 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x7400, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:32:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="6c917d5068143eb537a96c21228cd247", 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x2) r3 = inotify_init1(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6d00) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000001000000180000002714d83d3059633acbece7795a038b749e383619a0c95598112140882a0692e6e20c62cda297ce32add0857c4b57142ff4120e40ac333c00000000933b7c6b947f311f9d9ce001e6c4f7a74eee91122b3288d2901843714bffc064523058b9b203e41b8bcba1485ad6fbfc55bf220cb4f005bd7a8e4171d304ceaaaf45b6234dc2abc42629277f1903527e0c20c309e17b3667869317b8bcf23d188a5a1db59ba7000000007fffffff1d6720d7d61463f1f9c8a1", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="6c6531001ad0c04920d25d4615d3597b56a7e4a68ed38425031f42fca0a326d52db0e7c787aaca8f29bdd24f613899018038f56cebcc7b10a798bdde7df352dff911692f69bb288e05e06bcc839b65f136a9f942cc2398c0dae77f6dee5542e86dd051fc61392c1487ce9fc0ef0507fb43a9fa940dbc17409c0b38496cff64c07e8f10671df8b53437499410329a5804a2ae961f61d46cbfb700f90a970fec4490bab7894e1ac6645248931923f69999b5306bd89231dbc05e67d2c356d7c2c7a0a5d6f47295f612052f07c77c24f4002484376d35b2886ac10f93"]) r6 = inotify_init1(0x180000) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000240)) r7 = fcntl$dupfd(r4, 0x0, r4) lseek(r0, 0x4202, 0x3) sendmmsg$inet6(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)='6', 0x1}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000000780)='7', 0x1}], 0x1}}], 0x2, 0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(r1, r2, 0x0, 0x100000001) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080)) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) 02:32:52 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @remote}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) [ 2204.317324] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2204.323998] FAULT_INJECTION: forcing a failure. [ 2204.323998] name failslab, interval 1, probability 0, space 0, times 0 [ 2204.326573] CPU: 0 PID: 12282 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2204.328153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2204.330027] Call Trace: [ 2204.330628] dump_stack+0x107/0x167 [ 2204.331464] should_fail.cold+0x5/0xa [ 2204.332340] ? __delayacct_tsk_init+0x1b/0x80 [ 2204.333353] should_failslab+0x5/0x20 [ 2204.334210] kmem_cache_alloc+0x5b/0x310 [ 2204.335128] ? prepare_creds+0x466/0x5e0 [ 2204.336057] __delayacct_tsk_init+0x1b/0x80 [ 2204.337032] copy_process+0x3395/0x78b0 [ 2204.337930] ? SOFTIRQ_verbose+0x10/0x10 [ 2204.338854] ? __lockdep_reset_lock+0x180/0x180 [ 2204.339910] ? mark_lock+0xf5/0x2df0 [ 2204.340430] FAULT_INJECTION: forcing a failure. [ 2204.340430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2204.340759] ? lock_acquire+0x197/0x470 [ 2204.340777] ? find_held_lock+0x2c/0x110 [ 2204.340809] ? __cleanup_sighand+0xb0/0xb0 [ 2204.340851] ? _copy_from_user+0xfb/0x1b0 [ 2204.340879] kernel_clone+0xe7/0x980 [ 2204.340898] ? __lockdep_reset_lock+0x180/0x180 [ 2204.340919] ? create_io_thread+0xf0/0xf0 [ 2204.340955] ? ksys_write+0x21a/0x260 [ 2204.340974] ? lock_downgrade+0x6d0/0x6d0 [ 2204.340998] __do_sys_clone3+0x1e5/0x320 [ 2204.341017] ? __do_sys_clone+0x110/0x110 [ 2204.341057] ? rcu_read_lock_any_held+0x75/0xa0 [ 2204.341075] ? vfs_write+0x354/0xb10 [ 2204.341104] ? fput_many+0x2f/0x1a0 [ 2204.356132] ? ksys_write+0x1a9/0x260 [ 2204.356993] ? __ia32_sys_read+0xb0/0xb0 [ 2204.357917] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2204.359109] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2204.360276] ? trace_hardirqs_on+0x5b/0x180 [ 2204.361252] do_syscall_64+0x33/0x40 [ 2204.362100] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2204.363259] RIP: 0033:0x7f5655a9cb19 [ 2204.364109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2204.368261] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2204.369978] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2204.371611] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2204.373227] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2204.374847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2204.376465] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2204.378110] CPU: 1 PID: 12284 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2204.379624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2204.381393] Call Trace: [ 2204.381955] dump_stack+0x107/0x167 [ 2204.382735] should_fail.cold+0x5/0xa [ 2204.383546] _copy_from_user+0x2e/0x1b0 [ 2204.384419] __copy_msghdr_from_user+0x91/0x4b0 [ 2204.385408] ? __ia32_sys_shutdown+0x80/0x80 [ 2204.386356] ? udp_v6_push_pending_frames+0x360/0x360 [ 2204.387458] ? inet6_sendmsg+0xbd/0x140 [ 2204.388313] ? inet6_compat_ioctl+0x320/0x320 [ 2204.389261] ? __sock_sendmsg+0x55/0x190 [ 2204.390144] sendmsg_copy_msghdr+0xa1/0x160 [ 2204.391066] ? do_recvmmsg+0x6d0/0x6d0 [ 2204.391896] ? __lock_acquire+0x1657/0x5b00 [ 2204.392825] ___sys_sendmsg+0xc6/0x170 [ 2204.393652] ? sendmsg_copy_msghdr+0x160/0x160 [ 2204.394622] ? __lockdep_reset_lock+0x180/0x180 [ 2204.395624] ? lock_acquire+0x197/0x470 [ 2204.396464] ? find_held_lock+0x2c/0x110 [ 2204.397331] ? __might_fault+0xd3/0x180 [ 2204.398173] ? lock_downgrade+0x6d0/0x6d0 [ 2204.399074] __sys_sendmmsg+0x195/0x470 [ 2204.399934] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2204.400843] ? lock_downgrade+0x6d0/0x6d0 [ 2204.401737] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2204.402755] ? wait_for_completion_io+0x270/0x270 [ 2204.403780] ? rcu_read_lock_any_held+0x75/0xa0 [ 2204.404759] ? vfs_write+0x354/0xb10 [ 2204.405544] ? fput_many+0x2f/0x1a0 [ 2204.406311] ? ksys_write+0x1a9/0x260 [ 2204.407116] ? __ia32_sys_read+0xb0/0xb0 [ 2204.407999] __x64_sys_sendmmsg+0x99/0x100 [ 2204.408896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2204.409985] do_syscall_64+0x33/0x40 [ 2204.410774] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2204.411863] RIP: 0033:0x7f9688118b19 [ 2204.412652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2204.416541] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2204.418159] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2204.419676] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2204.421182] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2204.422699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2204.424223] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:32:52 executing program 0: modify_ldt$read_default(0x2, &(0x7f0000000800)=""/4096, 0x1000) unshare(0x28020600) r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x8000000) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000040)=""/44, 0x2c) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x110, r0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x72d, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:32:52 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x7a00, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:32:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x200005f8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:32:52 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xc9ffff}}}, 0xb8}}, 0x0) [ 2204.516129] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:32:52 executing program 5: r0 = mmap$IORING_OFF_SQES(&(0x7f000078f000/0x3000)=nil, 0x3000, 0x3000018, 0x1010, 0xffffffffffffffff, 0x10000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r3 = syz_io_uring_complete(r2) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8, 0x1}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB]) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r4, 0x3, 0x0, 0x6, 0x0, 0x1, {0x0, r5}}, 0x101) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r5}}, 0x10000) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000100)) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c65310acbc31f822ab809edd1a2b00ad585d667ad3b04e29a4506b151170473f1e249845a1609c2427080a5191ac499204e64eb0eb555861fee68baa1348005eba6f5f1efaba7e5a523e2383056fc6dcce0f23801971ab44d206610c60a2c4f8fdd6d43b1d963f294d8b53c432d2b7a38c219a80eb7b14ad41d6c16355ceed9817e0c1493eb6ae2a7462d695e1e0ffdbae7c9193d7d915eef2afd5fb0ba03e649c1f3169be8a8153aa61376ccb1b5c006784e73a64336a0a96b"], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r6, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00') 02:32:52 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 82) 02:32:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x7ffff000, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:32:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000005a0011cd008008000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) 02:32:52 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xe701, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2204.668462] FAULT_INJECTION: forcing a failure. [ 2204.668462] name failslab, interval 1, probability 0, space 0, times 0 [ 2204.671030] CPU: 0 PID: 12301 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2204.672563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2204.674381] Call Trace: [ 2204.674964] dump_stack+0x107/0x167 [ 2204.675773] should_fail.cold+0x5/0xa [ 2204.676619] ? __alloc_skb+0x6d/0x5b0 [ 2204.677463] should_failslab+0x5/0x20 [ 2204.678302] kmem_cache_alloc_node+0x55/0x330 [ 2204.679311] __alloc_skb+0x6d/0x5b0 [ 2204.680125] alloc_skb_with_frags+0x92/0x570 [ 2204.681112] sock_alloc_send_pskb+0x7af/0x930 [ 2204.682128] ? sk_alloc+0x350/0x350 [ 2204.682937] ? perf_trace_lock+0xac/0x490 [ 2204.683862] ? SOFTIRQ_verbose+0x10/0x10 [ 2204.684792] ? lock_chain_count+0x20/0x20 [ 2204.685721] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2204.686514] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2204.686837] ? ip_frag_init+0x350/0x350 [ 2204.686873] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2204.690587] ? ip6_mtu+0x1e9/0x3d0 [ 2204.691371] ? ip6_setup_cork+0xfb7/0x1740 [ 2204.692312] ip6_make_skb+0x2df/0x4e0 [ 2204.693144] ? ip_frag_init+0x350/0x350 [ 2204.694028] ? ip_frag_init+0x350/0x350 [ 2204.694919] ? ip6_push_pending_frames+0xf0/0xf0 [ 2204.695976] ? ip6_dst_hoplimit+0x199/0x440 [ 2204.696927] ? lock_downgrade+0x6d0/0x6d0 [ 2204.697858] udpv6_sendmsg+0x2128/0x2b40 [ 2204.698757] ? ip_frag_init+0x350/0x350 [ 2204.699656] ? udp_v6_push_pending_frames+0x360/0x360 [ 2204.700784] ? SOFTIRQ_verbose+0x10/0x10 [ 2204.701696] ? __lockdep_reset_lock+0x180/0x180 [ 2204.702721] ? lock_acquire+0x197/0x470 [ 2204.703606] ? find_held_lock+0x2c/0x110 [ 2204.704500] ? lock_chain_count+0x20/0x20 [ 2204.705407] ? sock_has_perm+0x1ea/0x280 [ 2204.706324] ? __import_iovec+0x458/0x590 [ 2204.707235] ? udp_v6_push_pending_frames+0x360/0x360 [ 2204.708380] inet6_sendmsg+0x105/0x140 [ 2204.709222] ? inet6_compat_ioctl+0x320/0x320 [ 2204.710201] __sock_sendmsg+0xf2/0x190 [ 2204.711049] ____sys_sendmsg+0x334/0x870 [ 2204.711946] ? sock_write_iter+0x3d0/0x3d0 [ 2204.712863] ? do_recvmmsg+0x6d0/0x6d0 [ 2204.713717] ? __lock_acquire+0x1657/0x5b00 [ 2204.714686] ___sys_sendmsg+0xf3/0x170 [ 2204.715538] ? sendmsg_copy_msghdr+0x160/0x160 [ 2204.716557] ? __lockdep_reset_lock+0x180/0x180 [ 2204.717581] ? lock_acquire+0x197/0x470 [ 2204.718446] ? find_held_lock+0x2c/0x110 [ 2204.719337] ? __might_fault+0xd3/0x180 [ 2204.720228] ? lock_downgrade+0x6d0/0x6d0 [ 2204.721162] __sys_sendmmsg+0x195/0x470 [ 2204.722046] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2204.722992] ? lock_downgrade+0x6d0/0x6d0 [ 2204.723924] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2204.724981] ? wait_for_completion_io+0x270/0x270 [ 2204.726048] ? rcu_read_lock_any_held+0x75/0xa0 [ 2204.727070] ? vfs_write+0x354/0xb10 [ 2204.727894] ? fput_many+0x2f/0x1a0 [ 2204.728690] ? ksys_write+0x1a9/0x260 [ 2204.729526] ? __ia32_sys_read+0xb0/0xb0 [ 2204.730430] __x64_sys_sendmmsg+0x99/0x100 [ 2204.731358] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2204.732497] do_syscall_64+0x33/0x40 [ 2204.733303] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2204.734417] RIP: 0033:0x7f9688118b19 [ 2204.735223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2204.739227] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2204.740879] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2204.742435] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2204.743988] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2204.745539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2204.747087] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 2204.759643] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2204.763764] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 02:32:52 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xf000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:32:52 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xf0ffff}}}, 0xb8}}, 0x0) 02:32:52 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 10) 02:32:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xfffffdef, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2204.820461] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:32:53 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1000000}}}, 0xb8}}, 0x0) [ 2204.887246] FAULT_INJECTION: forcing a failure. [ 2204.887246] name failslab, interval 1, probability 0, space 0, times 0 [ 2204.889790] CPU: 0 PID: 12375 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2204.891266] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2204.893074] Call Trace: [ 2204.893646] dump_stack+0x107/0x167 [ 2204.894426] should_fail.cold+0x5/0xa [ 2204.895240] ? create_object.isra.0+0x3a/0xa20 [ 2204.896223] should_failslab+0x5/0x20 [ 2204.897026] kmem_cache_alloc+0x5b/0x310 [ 2204.897892] create_object.isra.0+0x3a/0xa20 [ 2204.898820] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2204.899919] kmem_cache_alloc+0x159/0x310 [ 2204.900793] ? prepare_creds+0x466/0x5e0 [ 2204.901665] __delayacct_tsk_init+0x1b/0x80 [ 2204.902580] copy_process+0x3395/0x78b0 [ 2204.903416] ? SOFTIRQ_verbose+0x10/0x10 [ 2204.904304] ? __lockdep_reset_lock+0x180/0x180 [ 2204.905289] ? mark_lock+0xf5/0x2df0 [ 2204.906086] ? lock_acquire+0x197/0x470 [ 2204.906921] ? find_held_lock+0x2c/0x110 [ 2204.907810] ? __cleanup_sighand+0xb0/0xb0 [ 2204.908725] ? _copy_from_user+0xfb/0x1b0 [ 2204.909607] kernel_clone+0xe7/0x980 [ 2204.910394] ? __lockdep_reset_lock+0x180/0x180 [ 2204.911376] ? create_io_thread+0xf0/0xf0 [ 2204.912289] ? ksys_write+0x21a/0x260 [ 2204.913094] ? lock_downgrade+0x6d0/0x6d0 02:32:53 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x80000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2204.913977] __do_sys_clone3+0x1e5/0x320 [ 2204.914966] ? __do_sys_clone+0x110/0x110 [ 2204.915872] ? rcu_read_lock_any_held+0x75/0xa0 [ 2204.916844] ? vfs_write+0x354/0xb10 [ 2204.917624] ? fput_many+0x2f/0x1a0 [ 2204.918388] ? ksys_write+0x1a9/0x260 [ 2204.919182] ? __ia32_sys_read+0xb0/0xb0 [ 2204.920033] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2204.921124] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2204.922207] ? trace_hardirqs_on+0x5b/0x180 [ 2204.923111] do_syscall_64+0x33/0x40 [ 2204.923903] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2204.924967] RIP: 0033:0x7f5655a9cb19 [ 2204.925739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2204.929569] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2204.931154] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2204.932646] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2204.934124] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2204.935610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2204.937094] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:32:53 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x81, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8000, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x596a, 0xeddc, 0x401, 0x2, 0xffffffffffff12a4, 0x9, 0x200, 0x0, 0x28, 0x0, 0x9}, 0xffffffffffffffff, 0x9, r0, 0x3) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_uring_enter(r3, 0x6a81, 0x22a8, 0x3, &(0x7f00000004c0)={[0x9]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000a40)=ANY=[@ANYRESDEC]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000240)=ANY=[]}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x20000004}}, 0x81) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close(0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"/413], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) unshare(0x48020200) [ 2204.996383] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:32:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0xf, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:32:53 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) creat(&(0x7f0000000040)='./file0\x00', 0x87) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000640)={0x0, 0x9, 0x4}) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2205.035635] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=12427 comm=syz-executor.1 02:32:53 executing program 5: listen(0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB='\x00'/16]) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000000100), 0xfe0f) bind(r0, &(0x7f0000000040)=@sco, 0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001d00210c00000000000000000400020014001180809801a7b0c7dba00675f251c743092f2000008008000000a3f97fdfcf359d2dd707ffe6d140482348a9138cc3d99f0bac35bc7c04a100d781cc38791410081de5028f1ca7bca53cd7dc7897927aa5a21eff6432d55962029fadd16834e9a926", @ANYRES32=r2, @ANYBLOB="14000000fe8000000000000000000000000000bb"], 0x48}}, 0x0) 02:32:53 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2000000}}}, 0xb8}}, 0x0) 02:32:53 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xe0ffff, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2205.118150] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2205.193033] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2205.234176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2205.235524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2205.236907] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2205.256291] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:33:09 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 83) 02:33:09 executing program 0: sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x40811) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000007280)={0x0, 0x13, &(0x7f0000007240)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x80) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f0000000000)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x9, 0x1000}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x60, r5, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004810}, 0x4010) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)}, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r4) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f0000000580)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000540)='./file0\x00', 0x100, 0x101000, 0x12345}, 0x2) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:33:09 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x3000000}}}, 0xb8}}, 0x0) 02:33:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:33:09 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 11) 02:33:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) 02:33:09 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000100001010000000000000096000009000500000000000000050000804800000091a4f55db35e005c9c8eabbae99f484902bcfa74a7acf67d74b2a0a1e55297dd60ddba"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000700)=ANY=[@ANYBLOB="e28f98b90e10d62116a6af0a61d136269618efa16ca7d5bc2c2eb5", @ANYRES32=r0, @ANYBLOB="04a50300000000002e2f66696c6531008ba146574692ab4e8f7a456d2c91581edfd5b518e2b85360a9985cc79ba06bad190243f5e5dfb1283e3c03ecf3bc4f5e70fe2c947cd32623d24abb93f8fdbc0aaadfca647b46df09bc0cce0e4216d7c655028860e41caa25861601b236891e05ef83642041dc1b7dca89a2c3a037a11a5e5f01e94fd47dd1fb7de8c7b11a2b21165cabb1108129ca663c4994e0ed0227e66c1da4227702c92eac9c1b68bef9d0ba1cfdb7f23e286fdbb4da256a84372c5753ed2f2644bc822b0fab18bc9ee954f82cd6910b7360fcd3e3818b55ce984e6892cb3133731cb3a7dd"]) fcntl$lock(r1, 0x5, &(0x7f0000000300)={0x2, 0x2, 0x2, 0x4}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)="01", 0x1) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) creat(&(0x7f0000000200)='./file0\x00', 0x8) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x10242, 0x4) read(r3, &(0x7f0000000500)=""/122, 0x7a) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x34004840) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 02:33:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xf0ffff, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2221.245397] FAULT_INJECTION: forcing a failure. [ 2221.245397] name failslab, interval 1, probability 0, space 0, times 0 [ 2221.248019] CPU: 0 PID: 12555 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2221.248608] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2221.249582] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2221.249590] Call Trace: [ 2221.249617] dump_stack+0x107/0x167 [ 2221.249643] should_fail.cold+0x5/0xa [ 2221.255088] ? dup_fd+0x89/0xf40 [ 2221.255870] should_failslab+0x5/0x20 [ 2221.256733] kmem_cache_alloc+0x5b/0x310 [ 2221.257659] dup_fd+0x89/0xf40 [ 2221.258392] ? audit_filter_inodes+0x40/0x40 [ 2221.259408] ? security_task_alloc+0xe6/0x260 [ 2221.260444] copy_process+0x197c/0x78b0 [ 2221.261347] ? SOFTIRQ_verbose+0x10/0x10 [ 2221.262272] ? __lockdep_reset_lock+0x180/0x180 [ 2221.263337] ? mark_lock+0xf5/0x2df0 [ 2221.264224] ? __cleanup_sighand+0xb0/0xb0 [ 2221.265208] ? _copy_from_user+0xfb/0x1b0 [ 2221.266145] kernel_clone+0xe7/0x980 [ 2221.266996] ? __lockdep_reset_lock+0x180/0x180 [ 2221.268064] ? create_io_thread+0xf0/0xf0 [ 2221.269027] ? ksys_write+0x21a/0x260 [ 2221.269896] ? lock_downgrade+0x6d0/0x6d0 [ 2221.270845] __do_sys_clone3+0x1e5/0x320 [ 2221.271770] ? __do_sys_clone+0x110/0x110 [ 2221.272731] ? rcu_read_lock_any_held+0x75/0xa0 [ 2221.273779] ? vfs_write+0x354/0xb10 [ 2221.274627] ? fput_many+0x2f/0x1a0 [ 2221.275448] ? ksys_write+0x1a9/0x260 [ 2221.276312] ? __ia32_sys_read+0xb0/0xb0 [ 2221.277236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2221.278419] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2221.279579] ? trace_hardirqs_on+0x5b/0x180 [ 2221.280553] do_syscall_64+0x33/0x40 [ 2221.281389] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2221.282541] RIP: 0033:0x7f5655a9cb19 [ 2221.283387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2221.287573] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 02:33:09 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x9000000}}}, 0xb8}}, 0x0) 02:33:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x11, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2221.289299] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2221.291045] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2221.292666] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2221.294273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2221.295890] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2221.305153] FAULT_INJECTION: forcing a failure. [ 2221.305153] name failslab, interval 1, probability 0, space 0, times 0 [ 2221.307861] CPU: 0 PID: 12546 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2221.309431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2221.311329] Call Trace: [ 2221.311936] dump_stack+0x107/0x167 [ 2221.312769] should_fail.cold+0x5/0xa [ 2221.313627] ? create_object.isra.0+0x3a/0xa20 [ 2221.314671] should_failslab+0x5/0x20 [ 2221.315543] kmem_cache_alloc+0x5b/0x310 [ 2221.316485] ? __is_insn_slot_addr+0x14c/0x290 [ 2221.317533] create_object.isra.0+0x3a/0xa20 02:33:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x1000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2221.318539] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2221.319829] kmem_cache_alloc_node+0x169/0x330 [ 2221.320897] __alloc_skb+0x6d/0x5b0 [ 2221.321736] alloc_skb_with_frags+0x92/0x570 [ 2221.322751] sock_alloc_send_pskb+0x7af/0x930 [ 2221.323792] ? sk_alloc+0x350/0x350 [ 2221.324631] ? perf_trace_lock+0xac/0x490 [ 2221.325578] ? SOFTIRQ_verbose+0x10/0x10 [ 2221.326500] ? lock_chain_count+0x20/0x20 [ 2221.327460] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2221.328633] ? ip_frag_init+0x350/0x350 [ 2221.329558] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2221.330660] ? ip6_mtu+0x1e9/0x3d0 [ 2221.331463] ? ip6_setup_cork+0xfb7/0x1740 [ 2221.332437] ip6_make_skb+0x2df/0x4e0 [ 2221.333297] ? ip_frag_init+0x350/0x350 [ 2221.334206] ? ip_frag_init+0x350/0x350 [ 2221.335106] ? ip6_push_pending_frames+0xf0/0xf0 [ 2221.336200] ? ip6_dst_hoplimit+0x199/0x440 [ 2221.337181] ? lock_downgrade+0x6d0/0x6d0 [ 2221.338144] udpv6_sendmsg+0x2128/0x2b40 [ 2221.339071] ? ip_frag_init+0x350/0x350 [ 2221.340007] ? udp_v6_push_pending_frames+0x360/0x360 [ 2221.341187] ? SOFTIRQ_verbose+0x10/0x10 [ 2221.342137] ? __lockdep_reset_lock+0x180/0x180 [ 2221.343211] ? lock_acquire+0x197/0x470 [ 2221.344121] ? find_held_lock+0x2c/0x110 [ 2221.345064] ? lock_chain_count+0x20/0x20 [ 2221.345666] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2221.346012] ? sock_has_perm+0x1ea/0x280 [ 2221.346061] ? __import_iovec+0x458/0x590 [ 2221.349219] ? udp_v6_push_pending_frames+0x360/0x360 [ 2221.350402] inet6_sendmsg+0x105/0x140 [ 2221.351298] ? inet6_compat_ioctl+0x320/0x320 [ 2221.352336] __sock_sendmsg+0xf2/0x190 [ 2221.353230] ____sys_sendmsg+0x334/0x870 [ 2221.354164] ? sock_write_iter+0x3d0/0x3d0 [ 2221.355115] ? do_recvmmsg+0x6d0/0x6d0 [ 2221.356020] ? __lock_acquire+0x1657/0x5b00 [ 2221.357028] ___sys_sendmsg+0xf3/0x170 [ 2221.357926] ? sendmsg_copy_msghdr+0x160/0x160 [ 2221.358981] ? __lockdep_reset_lock+0x180/0x180 [ 2221.360061] ? lock_acquire+0x197/0x470 [ 2221.360963] ? find_held_lock+0x2c/0x110 [ 2221.361909] ? __might_fault+0xd3/0x180 [ 2221.362818] ? lock_downgrade+0x6d0/0x6d0 [ 2221.363802] __sys_sendmmsg+0x195/0x470 [ 2221.364722] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2221.365709] ? lock_downgrade+0x6d0/0x6d0 [ 2221.366685] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2221.367802] ? wait_for_completion_io+0x270/0x270 [ 2221.368909] ? rcu_read_lock_any_held+0x75/0xa0 [ 2221.369970] ? vfs_write+0x354/0xb10 [ 2221.370823] ? fput_many+0x2f/0x1a0 [ 2221.371657] ? ksys_write+0x1a9/0x260 [ 2221.372538] ? __ia32_sys_read+0xb0/0xb0 [ 2221.373478] __x64_sys_sendmmsg+0x99/0x100 [ 2221.374441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2221.375422] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2221.375604] do_syscall_64+0x33/0x40 [ 2221.375631] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2221.378872] RIP: 0033:0x7f9688118b19 [ 2221.379712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2221.383950] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2221.385701] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2221.387318] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2221.388942] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2221.390549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2221.392167] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 2221.402485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:33:09 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xf000000}}}, 0xb8}}, 0x0) 02:33:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x12, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:33:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x2000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:33:09 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) syz_io_uring_setup(0xc20, &(0x7f0000000340)={0x0, 0x7edd, 0x4, 0x3, 0x2b2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) syz_io_uring_submit(r4, r2, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x8, &(0x7f00000004c0)={r5, r6+60000000}, 0x1, 0x1, 0x1}, 0x3f) ftruncate(r3, 0x1) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x8, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000040), 0x80000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000000800)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ff01000077139a073700000000000000000700000200000000000000000000000000e0ffffffffffffff00000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00"/159], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r8, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b861}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2221.471666] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2221.483590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2221.484743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2221.485908] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2221.509290] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2221.512342] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:33:09 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 12) [ 2221.588515] FAULT_INJECTION: forcing a failure. [ 2221.588515] name failslab, interval 1, probability 0, space 0, times 0 [ 2221.591579] CPU: 0 PID: 12579 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2221.593355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2221.595490] Call Trace: [ 2221.596179] dump_stack+0x107/0x167 [ 2221.597107] should_fail.cold+0x5/0xa [ 2221.598085] ? create_object.isra.0+0x3a/0xa20 [ 2221.599256] should_failslab+0x5/0x20 [ 2221.600231] kmem_cache_alloc+0x5b/0x310 [ 2221.601273] create_object.isra.0+0x3a/0xa20 [ 2221.602399] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2221.603686] kmem_cache_alloc+0x159/0x310 [ 2221.604763] dup_fd+0x89/0xf40 [ 2221.605584] ? audit_filter_inodes+0x40/0x40 [ 2221.606699] ? security_task_alloc+0xe6/0x260 [ 2221.607861] copy_process+0x197c/0x78b0 [ 2221.608874] ? SOFTIRQ_verbose+0x10/0x10 [ 2221.609918] ? __lockdep_reset_lock+0x180/0x180 [ 2221.611092] ? mark_lock+0xf5/0x2df0 [ 2221.612076] ? __cleanup_sighand+0xb0/0xb0 [ 2221.613182] ? _copy_from_user+0xfb/0x1b0 [ 2221.614251] kernel_clone+0xe7/0x980 [ 2221.615201] ? __lockdep_reset_lock+0x180/0x180 [ 2221.616399] ? create_io_thread+0xf0/0xf0 [ 2221.617471] ? ksys_write+0x21a/0x260 [ 2221.618425] ? lock_downgrade+0x6d0/0x6d0 [ 2221.619483] __do_sys_clone3+0x1e5/0x320 [ 2221.620519] ? __do_sys_clone+0x110/0x110 [ 2221.621613] ? rcu_read_lock_any_held+0x75/0xa0 [ 2221.622764] ? vfs_write+0x354/0xb10 [ 2221.623705] ? fput_many+0x2f/0x1a0 [ 2221.624631] ? ksys_write+0x1a9/0x260 [ 2221.625592] ? __ia32_sys_read+0xb0/0xb0 [ 2221.626609] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2221.627946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2221.629233] ? trace_hardirqs_on+0x5b/0x180 [ 2221.630332] do_syscall_64+0x33/0x40 [ 2221.631275] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2221.632585] RIP: 0033:0x7f5655a9cb19 [ 2221.633524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2221.638207] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2221.640110] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2221.641909] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2221.643696] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2221.645483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2221.647296] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2237.236288] FAULT_INJECTION: forcing a failure. [ 2237.236288] name failslab, interval 1, probability 0, space 0, times 0 [ 2237.237751] CPU: 0 PID: 12690 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2237.238600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2237.239645] Call Trace: [ 2237.239994] dump_stack+0x107/0x167 [ 2237.240459] should_fail.cold+0x5/0xa [ 2237.240939] ? alloc_fdtable+0x84/0x280 [ 2237.241449] should_failslab+0x5/0x20 [ 2237.241932] kmem_cache_alloc_trace+0x55/0x320 [ 2237.242503] ? rwlock_bug.part.0+0x90/0x90 [ 2237.243029] alloc_fdtable+0x84/0x280 [ 2237.243496] dup_fd+0x92e/0xf40 [ 2237.243920] copy_process+0x197c/0x78b0 [ 2237.244411] ? SOFTIRQ_verbose+0x10/0x10 [ 2237.244913] ? __lockdep_reset_lock+0x180/0x180 [ 2237.245477] ? mark_lock+0xf5/0x2df0 [ 2237.245950] ? __cleanup_sighand+0xb0/0xb0 [ 2237.246485] ? _copy_from_user+0xfb/0x1b0 [ 2237.246999] kernel_clone+0xe7/0x980 [ 2237.247456] ? __lockdep_reset_lock+0x180/0x180 [ 2237.248043] ? create_io_thread+0xf0/0xf0 [ 2237.248556] ? ksys_write+0x21a/0x260 [ 2237.249019] ? lock_downgrade+0x6d0/0x6d0 [ 2237.249527] __do_sys_clone3+0x1e5/0x320 [ 2237.250020] ? __do_sys_clone+0x110/0x110 [ 2237.250542] ? rcu_read_lock_any_held+0x75/0xa0 [ 2237.251112] ? vfs_write+0x354/0xb10 [ 2237.251570] ? fput_many+0x2f/0x1a0 [ 2237.252020] ? ksys_write+0x1a9/0x260 [ 2237.252483] ? __ia32_sys_read+0xb0/0xb0 [ 2237.252987] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2237.253632] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2237.254266] ? trace_hardirqs_on+0x5b/0x180 [ 2237.254795] do_syscall_64+0x33/0x40 [ 2237.255248] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2237.255885] RIP: 0033:0x7f5655a9cb19 [ 2237.256581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2237.258832] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2237.259764] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2237.260646] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2237.261517] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2237.262399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2237.263276] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:33:25 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2f000000}}}, 0xb8}}, 0x0) 02:33:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:33:25 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x3000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:33:25 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x800000000003fe) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/138, 0x8a}, {&(0x7f0000000980)=""/192, 0xc0}], 0x4, 0x800, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000800)={0x0, 0x0, "17f042"}) fallocate(0xffffffffffffffff, 0x52, 0x2, 0x10000000fdffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 02:33:25 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0x0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x30000, 0x109) 02:33:25 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 84) 02:33:25 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 13) 02:33:25 executing program 5: r0 = fork() perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff8100c0e8}}, r0, 0xa, 0xffffffffffffffff, 0x0) [ 2237.271940] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2237.273925] FAT-fs (loop2): bogus logical sector size 22820 [ 2237.275469] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2237.283124] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2237.289078] FAULT_INJECTION: forcing a failure. [ 2237.289078] name failslab, interval 1, probability 0, space 0, times 0 [ 2237.291691] CPU: 1 PID: 12688 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2237.293285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2237.295173] Call Trace: [ 2237.295772] dump_stack+0x107/0x167 [ 2237.296617] should_fail.cold+0x5/0xa [ 2237.297489] ? create_object.isra.0+0x3a/0xa20 [ 2237.298539] should_failslab+0x5/0x20 [ 2237.299406] kmem_cache_alloc+0x5b/0x310 [ 2237.300342] ? __is_insn_slot_addr+0x14c/0x290 [ 2237.301396] create_object.isra.0+0x3a/0xa20 [ 2237.302384] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2237.303551] kmem_cache_alloc_node+0x169/0x330 [ 2237.304611] __alloc_skb+0x6d/0x5b0 [ 2237.305452] alloc_skb_with_frags+0x92/0x570 [ 2237.306471] sock_alloc_send_pskb+0x7af/0x930 [ 2237.307513] ? sk_alloc+0x350/0x350 [ 2237.308372] ? perf_trace_lock+0xac/0x490 [ 2237.309317] ? SOFTIRQ_verbose+0x10/0x10 [ 2237.310240] ? lock_chain_count+0x20/0x20 [ 2237.311199] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2237.312362] ? ip_frag_init+0x350/0x350 [ 2237.313279] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2237.314369] ? ip6_mtu+0x1e9/0x3d0 [ 2237.315178] ? ip6_setup_cork+0xfb7/0x1740 [ 2237.316153] ip6_make_skb+0x2df/0x4e0 [ 2237.317021] ? ip_frag_init+0x350/0x350 [ 2237.317942] ? ip_frag_init+0x350/0x350 [ 2237.318860] ? ip6_push_pending_frames+0xf0/0xf0 [ 2237.319959] ? ip6_dst_hoplimit+0x199/0x440 [ 2237.320949] ? lock_downgrade+0x6d0/0x6d0 [ 2237.321919] udpv6_sendmsg+0x2128/0x2b40 [ 2237.322848] ? ip_frag_init+0x350/0x350 [ 2237.323767] ? udp_v6_push_pending_frames+0x360/0x360 [ 2237.324719] FAULT_INJECTION: forcing a failure. [ 2237.324719] name failslab, interval 1, probability 0, space 0, times 0 [ 2237.324929] ? SOFTIRQ_verbose+0x10/0x10 [ 2237.327196] ? __lockdep_reset_lock+0x180/0x180 [ 2237.328284] ? lock_acquire+0x197/0x470 [ 2237.329191] ? find_held_lock+0x2c/0x110 [ 2237.330128] ? lock_chain_count+0x20/0x20 [ 2237.331072] ? sock_has_perm+0x1ea/0x280 [ 2237.332035] ? __import_iovec+0x458/0x590 [ 2237.332982] ? udp_v6_push_pending_frames+0x360/0x360 [ 2237.334156] inet6_sendmsg+0x105/0x140 [ 2237.335046] ? inet6_compat_ioctl+0x320/0x320 [ 2237.336074] __sock_sendmsg+0xf2/0x190 [ 2237.336968] ____sys_sendmsg+0x334/0x870 [ 2237.337893] ? sock_write_iter+0x3d0/0x3d0 [ 2237.338847] ? do_recvmmsg+0x6d0/0x6d0 [ 2237.339736] ? __lock_acquire+0x1657/0x5b00 [ 2237.340744] ___sys_sendmsg+0xf3/0x170 [ 2237.341631] ? sendmsg_copy_msghdr+0x160/0x160 [ 2237.342677] ? __lockdep_reset_lock+0x180/0x180 [ 2237.343736] ? lock_acquire+0x197/0x470 [ 2237.344644] ? find_held_lock+0x2c/0x110 [ 2237.345574] ? __might_fault+0xd3/0x180 [ 2237.346473] ? lock_downgrade+0x6d0/0x6d0 [ 2237.347444] __sys_sendmmsg+0x195/0x470 [ 2237.348363] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2237.349344] ? lock_downgrade+0x6d0/0x6d0 [ 2237.350288] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2237.351385] ? wait_for_completion_io+0x270/0x270 [ 2237.352522] ? rcu_read_lock_any_held+0x75/0xa0 [ 2237.353600] ? vfs_write+0x354/0xb10 [ 2237.354448] ? fput_many+0x2f/0x1a0 [ 2237.355277] ? ksys_write+0x1a9/0x260 [ 2237.356147] ? __ia32_sys_read+0xb0/0xb0 [ 2237.357089] __x64_sys_sendmmsg+0x99/0x100 [ 2237.358051] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2237.359219] do_syscall_64+0x33/0x40 [ 2237.360075] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2237.361240] RIP: 0033:0x7f9688118b19 [ 2237.362090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2237.366274] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2237.368005] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2237.369625] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2237.371237] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2237.372866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2237.374485] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 2237.376140] CPU: 0 PID: 12703 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2237.376991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2237.378007] Call Trace: [ 2237.378335] dump_stack+0x107/0x167 [ 2237.378787] should_fail.cold+0x5/0xa 02:33:25 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x4000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:33:25 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 14) [ 2237.379254] ? create_object.isra.0+0x3a/0xa20 [ 2237.379996] should_failslab+0x5/0x20 [ 2237.380459] kmem_cache_alloc+0x5b/0x310 [ 2237.380958] create_object.isra.0+0x3a/0xa20 [ 2237.381490] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2237.382110] kmem_cache_alloc_trace+0x151/0x320 [ 2237.382670] ? rwlock_bug.part.0+0x90/0x90 [ 2237.383195] alloc_fdtable+0x84/0x280 [ 2237.383657] dup_fd+0x92e/0xf40 [ 2237.384082] copy_process+0x197c/0x78b0 [ 2237.384568] ? SOFTIRQ_verbose+0x10/0x10 [ 2237.385064] ? __lockdep_reset_lock+0x180/0x180 [ 2237.385628] ? mark_lock+0xf5/0x2df0 [ 2237.386096] ? __cleanup_sighand+0xb0/0xb0 [ 2237.386624] ? _copy_from_user+0xfb/0x1b0 [ 2237.387133] kernel_clone+0xe7/0x980 [ 2237.387584] ? __lockdep_reset_lock+0x180/0x180 [ 2237.388152] ? create_io_thread+0xf0/0xf0 [ 2237.388663] ? ksys_write+0x21a/0x260 [ 2237.389125] ? lock_downgrade+0x6d0/0x6d0 [ 2237.389630] __do_sys_clone3+0x1e5/0x320 [ 2237.390119] ? __do_sys_clone+0x110/0x110 [ 2237.390637] ? rcu_read_lock_any_held+0x75/0xa0 [ 2237.391201] ? vfs_write+0x354/0xb10 [ 2237.391653] ? fput_many+0x2f/0x1a0 [ 2237.392104] ? ksys_write+0x1a9/0x260 [ 2237.392567] ? __ia32_sys_read+0xb0/0xb0 [ 2237.393070] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2237.393706] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2237.394332] ? trace_hardirqs_on+0x5b/0x180 [ 2237.394860] do_syscall_64+0x33/0x40 [ 2237.395314] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2237.395951] RIP: 0033:0x7f5655a9cb19 [ 2237.396403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2237.398620] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2237.399546] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2237.400421] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2237.401283] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2237.402196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2237.403061] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2237.417717] FAT-fs (loop2): bogus logical sector size 22820 [ 2237.419178] FAT-fs (loop2): Can't find a valid FAT filesystem 02:33:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2237.421228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2237.422991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2237.424869] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2237.433309] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2237.440375] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2237.452339] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:33:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2237.488689] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 02:33:41 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 85) 02:33:41 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x62010000}}}, 0xb8}}, 0x0) 02:33:41 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 15) 02:33:41 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0x0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x30000, 0x109) 02:33:41 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x16, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:33:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x5000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2253.815315] FAULT_INJECTION: forcing a failure. [ 2253.815315] name failslab, interval 1, probability 0, space 0, times 0 [ 2253.817060] CPU: 0 PID: 12825 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2253.818113] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2253.819369] Call Trace: [ 2253.819768] dump_stack+0x107/0x167 [ 2253.820331] should_fail.cold+0x5/0xa [ 2253.820903] ? kvmalloc_node+0x119/0x170 [ 2253.821511] should_failslab+0x5/0x20 [ 2253.822088] __kmalloc_node+0x76/0x420 [ 2253.822696] kvmalloc_node+0x119/0x170 [ 2253.823288] alloc_fdtable+0xd3/0x280 [ 2253.823869] dup_fd+0x92e/0xf40 [ 2253.824377] copy_process+0x197c/0x78b0 [ 2253.824964] ? SOFTIRQ_verbose+0x10/0x10 [ 2253.825570] ? __lockdep_reset_lock+0x180/0x180 [ 2253.826281] ? mark_lock+0xf5/0x2df0 [ 2253.826856] ? __cleanup_sighand+0xb0/0xb0 [ 2253.827499] ? _copy_from_user+0xfb/0x1b0 [ 2253.828130] kernel_clone+0xe7/0x980 [ 2253.828679] ? __lockdep_reset_lock+0x180/0x180 [ 2253.829368] ? create_io_thread+0xf0/0xf0 [ 2253.829991] ? ksys_write+0x21a/0x260 [ 2253.830748] ? lock_downgrade+0x6d0/0x6d0 [ 2253.831424] __do_sys_clone3+0x1e5/0x320 [ 2253.832019] ? __do_sys_clone+0x110/0x110 [ 2253.832666] ? rcu_read_lock_any_held+0x75/0xa0 [ 2253.833364] ? vfs_write+0x354/0xb10 [ 2253.833727] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2253.833927] ? fput_many+0x2f/0x1a0 [ 2253.836283] FAULT_INJECTION: forcing a failure. [ 2253.836283] name failslab, interval 1, probability 0, space 0, times 0 [ 2253.837898] ? ksys_write+0x1a9/0x260 [ 2253.838460] ? __ia32_sys_read+0xb0/0xb0 [ 2253.839071] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2253.839851] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2253.840620] ? trace_hardirqs_on+0x5b/0x180 [ 2253.841260] do_syscall_64+0x33/0x40 [ 2253.841809] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2253.842569] RIP: 0033:0x7f5655a9cb19 [ 2253.843134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2253.845841] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2253.846984] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2253.848052] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2253.849104] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2253.850152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2253.851199] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2253.852349] CPU: 1 PID: 12824 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2253.853856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2253.855616] Call Trace: [ 2253.856191] dump_stack+0x107/0x167 [ 2253.856964] should_fail.cold+0x5/0xa [ 2253.857771] ? create_object.isra.0+0x3a/0xa20 [ 2253.858739] should_failslab+0x5/0x20 02:33:41 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x0) openat(r2, &(0x7f00000002c0)='./file0\x00', 0x200000, 0x2a) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x20, 0x6, 0x96, 0x1c, 0x0, 0x3c8, 0x0, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7ffffffb, 0x4f0}, 0x40140, 0x0, 0x0, 0x9, 0x800, 0x10000, 0x3, 0x0, 0x6, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x1000003) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x238900, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000240), 0x80, 0x20001) splice(r3, &(0x7f00000001c0)=0x9, r4, &(0x7f0000000280)=0x3f00, 0x5, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0x8}) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000200)=""/49, 0x31, 0x3) 02:33:41 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYRES64=r0], 0x14}}, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="24000000100001000000000000000096000009000500000000000000050000804800000070f5a41b3220b00a754c5ecb40beab9b54667b49db577bc4f758d4400f80b197d4a08413c0974b82a94f4a3b560984007f170b4fe06a41362feb6a7331303a6e9d017fc0184e9e7c3e1356aa2bc6e4a3cb77ce34a7d07832221979e3daff9d4b1a3dfa298565f105e86121b59353a6"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001bc0)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYBLOB="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"]) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x305000, 0x0) openat(r3, &(0x7f0000000400)='./file1\x00', 0x0, 0x114) read(r2, &(0x7f00000006c0)=""/135, 0x87) r4 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x800, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000b40)={'#! ', './file1', [{0x20, 'security.capability\x00'}, {0x20, 'security.capability\x00'}, {0x20, '\xca.@/%'}, {}, {0x20, 'wlan1\x00'}, {0x20, '('}], 0xa, "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"}, 0x1045) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000300)={0x20000008}) setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100), &(0x7f0000000280)=@v1={0x1000000, [{0x5dd4, 0x6}]}, 0xc, 0x2) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x2000, 0x82) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57ea, 0x4) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2253.859814] kmem_cache_alloc+0x5b/0x310 [ 2253.860878] ? __is_insn_slot_addr+0x14c/0x290 [ 2253.861854] create_object.isra.0+0x3a/0xa20 [ 2253.862781] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2253.863861] kmem_cache_alloc_node+0x169/0x330 [ 2253.864847] __alloc_skb+0x6d/0x5b0 [ 2253.865628] alloc_skb_with_frags+0x92/0x570 [ 2253.866586] sock_alloc_send_pskb+0x7af/0x930 [ 2253.867269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2253.867554] ? sk_alloc+0x350/0x350 [ 2253.869539] ? perf_trace_lock+0xac/0x490 [ 2253.870417] ? SOFTIRQ_verbose+0x10/0x10 [ 2253.871276] ? lock_chain_count+0x20/0x20 [ 2253.872179] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2253.873263] ? ip_frag_init+0x350/0x350 [ 2253.874122] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2253.875143] ? ip6_mtu+0x1e9/0x3d0 [ 2253.875904] ? ip6_setup_cork+0xfb7/0x1740 [ 2253.876822] ip6_make_skb+0x2df/0x4e0 [ 2253.877633] ? ip_frag_init+0x350/0x350 [ 2253.878489] ? ip_frag_init+0x350/0x350 [ 2253.879348] ? ip6_push_pending_frames+0xf0/0xf0 [ 2253.880381] ? ip6_dst_hoplimit+0x199/0x440 [ 2253.881297] ? lock_downgrade+0x6d0/0x6d0 [ 2253.882201] udpv6_sendmsg+0x2128/0x2b40 [ 2253.883077] ? ip_frag_init+0x350/0x350 [ 2253.883932] ? udp_v6_push_pending_frames+0x360/0x360 [ 2253.885034] ? SOFTIRQ_verbose+0x10/0x10 [ 2253.885914] ? __lockdep_reset_lock+0x180/0x180 [ 2253.886908] ? lock_acquire+0x197/0x470 [ 2253.887761] ? find_held_lock+0x2c/0x110 [ 2253.888644] ? lock_chain_count+0x20/0x20 [ 2253.889521] ? sock_has_perm+0x1ea/0x280 [ 2253.890406] ? __import_iovec+0x458/0x590 [ 2253.891285] ? udp_v6_push_pending_frames+0x360/0x360 [ 2253.892390] inet6_sendmsg+0x105/0x140 [ 2253.893212] ? inet6_compat_ioctl+0x320/0x320 [ 2253.894162] __sock_sendmsg+0xf2/0x190 [ 2253.894987] ____sys_sendmsg+0x334/0x870 [ 2253.895856] ? sock_write_iter+0x3d0/0x3d0 [ 2253.896757] ? do_recvmmsg+0x6d0/0x6d0 [ 2253.897437] FAT-fs (loop2): bogus logical sector size 22820 [ 2253.897591] ? __lock_acquire+0x1657/0x5b00 [ 2253.898489] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2253.899340] ___sys_sendmsg+0xf3/0x170 [ 2253.899365] ? sendmsg_copy_msghdr+0x160/0x160 [ 2253.901983] ? __lockdep_reset_lock+0x180/0x180 [ 2253.902976] ? lock_acquire+0x197/0x470 [ 2253.903823] ? find_held_lock+0x2c/0x110 [ 2253.904700] ? __might_fault+0xd3/0x180 [ 2253.905545] ? lock_downgrade+0x6d0/0x6d0 [ 2253.906448] __sys_sendmmsg+0x195/0x470 [ 2253.907306] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2253.908239] ? lock_downgrade+0x6d0/0x6d0 [ 2253.909145] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2253.910204] ? wait_for_completion_io+0x270/0x270 [ 2253.911231] ? rcu_read_lock_any_held+0x75/0xa0 [ 2253.912231] ? vfs_write+0x354/0xb10 [ 2253.913023] ? fput_many+0x2f/0x1a0 [ 2253.913794] ? ksys_write+0x1a9/0x260 [ 2253.914604] ? __ia32_sys_read+0xb0/0xb0 [ 2253.915473] __x64_sys_sendmmsg+0x99/0x100 [ 2253.916383] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2253.917473] do_syscall_64+0x33/0x40 [ 2253.918264] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2253.919356] RIP: 0033:0x7f9688118b19 [ 2253.920176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2253.924077] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2253.925687] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2253.927211] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2253.928735] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2253.930235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2253.931748] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 2253.939388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2253.940940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2253.949030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2253.968596] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:33:56 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 86) 02:33:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x17, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:33:56 executing program 0: perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x72, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000014c0)=ANY=[@ANYBLOB="200100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f"], 0x120}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) fcntl$getown(r1, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x58, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3ff}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 02:33:56 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0x0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x30000, 0x109) 02:33:56 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 16) 02:33:56 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x80ffffff}}}, 0xb8}}, 0x0) 02:33:56 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x6000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:33:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) fdatasync(r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3f, 0x12}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x81) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2267.927328] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2267.936208] FAULT_INJECTION: forcing a failure. [ 2267.936208] name failslab, interval 1, probability 0, space 0, times 0 [ 2267.937393] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2267.938114] CPU: 0 PID: 12954 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2267.941082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2267.942129] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2267.942354] Call Trace: [ 2267.942375] dump_stack+0x107/0x167 [ 2267.942392] should_fail.cold+0x5/0xa [ 2267.942416] ? create_object.isra.0+0x3a/0xa20 [ 2267.946613] should_failslab+0x5/0x20 [ 2267.947216] kmem_cache_alloc+0x5b/0x310 [ 2267.947856] create_object.isra.0+0x3a/0xa20 [ 2267.948567] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2267.949365] __kmalloc_node+0x1ae/0x420 [ 2267.949998] kvmalloc_node+0x119/0x170 [ 2267.950620] alloc_fdtable+0xd3/0x280 [ 2267.951221] dup_fd+0x92e/0xf40 [ 2267.951748] copy_process+0x197c/0x78b0 [ 2267.952386] ? SOFTIRQ_verbose+0x10/0x10 [ 2267.953039] ? __lockdep_reset_lock+0x180/0x180 [ 2267.953756] ? mark_lock+0xf5/0x2df0 [ 2267.953794] ? __cleanup_sighand+0xb0/0xb0 [ 2267.955300] ? _copy_from_user+0xfb/0x1b0 [ 2267.955949] kernel_clone+0xe7/0x980 [ 2267.956551] ? __lockdep_reset_lock+0x180/0x180 [ 2267.957280] ? create_io_thread+0xf0/0xf0 [ 2267.957934] ? ksys_write+0x21a/0x260 [ 2267.957968] debugfs: Directory '€˜§°ÇÛ ”uòQÇC !' with parent 'ieee80211' already present! [ 2267.958530] ? lock_downgrade+0x6d0/0x6d0 [ 2267.958548] __do_sys_clone3+0x1e5/0x320 [ 2267.958560] ? __do_sys_clone+0x110/0x110 [ 2267.958591] ? rcu_read_lock_any_held+0x75/0xa0 [ 2267.963117] ? vfs_write+0x354/0xb10 [ 2267.963692] ? fput_many+0x2f/0x1a0 [ 2267.964271] ? ksys_write+0x1a9/0x260 [ 2267.964849] ? __ia32_sys_read+0xb0/0xb0 [ 2267.965469] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2267.966277] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2267.967076] ? trace_hardirqs_on+0x5b/0x180 [ 2267.967751] do_syscall_64+0x33/0x40 [ 2267.968320] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2267.969105] RIP: 0033:0x7f5655a9cb19 [ 2267.969679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2267.972489] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2267.973646] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2267.974731] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2267.975814] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2267.976906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2267.978010] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2267.987126] FAT-fs (loop2): bogus logical sector size 22820 [ 2267.988041] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2267.990211] FAULT_INJECTION: forcing a failure. [ 2267.990211] name failslab, interval 1, probability 0, space 0, times 0 [ 2267.991945] CPU: 0 PID: 12952 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2267.992995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2267.994269] Call Trace: [ 2267.994663] dump_stack+0x107/0x167 [ 2267.995218] should_fail.cold+0x5/0xa [ 2267.995805] ? create_object.isra.0+0x3a/0xa20 [ 2267.996504] should_failslab+0x5/0x20 [ 2267.997087] kmem_cache_alloc+0x5b/0x310 [ 2267.997708] create_object.isra.0+0x3a/0xa20 [ 2267.998359] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2267.999118] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2267.999872] ? alloc_skb_with_frags+0x92/0x570 [ 2268.000565] __alloc_skb+0xb1/0x5b0 [ 2268.001115] alloc_skb_with_frags+0x92/0x570 [ 2268.001785] sock_alloc_send_pskb+0x7af/0x930 [ 2268.002461] ? sk_alloc+0x350/0x350 [ 2268.003032] ? perf_trace_lock+0xac/0x490 [ 2268.003650] ? SOFTIRQ_verbose+0x10/0x10 [ 2268.004262] ? lock_chain_count+0x20/0x20 [ 2268.004885] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2268.005636] ? ip_frag_init+0x350/0x350 [ 2268.006229] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2268.006944] ? ip6_mtu+0x1e9/0x3d0 [ 2268.007468] ? ip6_setup_cork+0xfb7/0x1740 [ 2268.008095] ip6_make_skb+0x2df/0x4e0 [ 2268.008686] ? ip_frag_init+0x350/0x350 [ 2268.009280] ? ip_frag_init+0x350/0x350 [ 2268.009878] ? ip6_push_pending_frames+0xf0/0xf0 [ 2268.010589] ? ip6_dst_hoplimit+0x199/0x440 [ 2268.011227] ? lock_downgrade+0x6d0/0x6d0 [ 2268.011856] udpv6_sendmsg+0x2128/0x2b40 [ 2268.012470] ? ip_frag_init+0x350/0x350 [ 2268.013074] ? udp_v6_push_pending_frames+0x360/0x360 [ 2268.013834] ? SOFTIRQ_verbose+0x10/0x10 [ 2268.014443] ? __lockdep_reset_lock+0x180/0x180 [ 2268.015137] ? lock_acquire+0x197/0x470 [ 2268.015728] ? find_held_lock+0x2c/0x110 [ 2268.016342] ? lock_chain_count+0x20/0x20 [ 2268.016959] ? sock_has_perm+0x1ea/0x280 [ 2268.017580] ? __import_iovec+0x458/0x590 [ 2268.018191] ? udp_v6_push_pending_frames+0x360/0x360 [ 2268.018955] inet6_sendmsg+0x105/0x140 [ 2268.019529] ? inet6_compat_ioctl+0x320/0x320 [ 2268.020204] __sock_sendmsg+0xf2/0x190 [ 2268.020781] ____sys_sendmsg+0x334/0x870 [ 2268.021384] ? sock_write_iter+0x3d0/0x3d0 [ 2268.022010] ? do_recvmmsg+0x6d0/0x6d0 [ 2268.022618] ? find_held_lock+0x2c/0x110 [ 2268.023241] ___sys_sendmsg+0xf3/0x170 [ 2268.023837] ? sendmsg_copy_msghdr+0x160/0x160 [ 2268.024517] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2268.025284] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2268.025939] ? trace_hardirqs_on+0x5b/0x180 [ 2268.026573] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2268.027227] ? finish_task_switch+0x126/0x5d0 [ 2268.027882] ? finish_task_switch+0xef/0x5d0 [ 2268.028526] ? __switch_to+0x572/0xf70 [ 2268.029109] ? __switch_to_asm+0x3a/0x60 [ 2268.029741] ? __switch_to_asm+0x34/0x60 [ 2268.030352] ? __schedule+0x82c/0x1ea0 [ 2268.030937] ? io_schedule_timeout+0x140/0x140 [ 2268.031641] __sys_sendmmsg+0x195/0x470 [ 2268.032239] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2268.032905] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2268.033710] ? __switch_to_asm+0x34/0x60 [ 2268.034327] ? __schedule+0x82c/0x1ea0 [ 2268.034908] ? io_schedule_timeout+0x140/0x140 [ 2268.035598] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2268.036423] ? ksys_write+0x1a9/0x260 [ 2268.037009] __x64_sys_sendmmsg+0x99/0x100 [ 2268.037642] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2268.038429] do_syscall_64+0x33/0x40 [ 2268.038983] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2268.039750] RIP: 0033:0x7f9688118b19 [ 2268.040317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2268.043001] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2268.044103] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2268.045161] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2268.046202] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2268.047248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2268.048297] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 2268.059289] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 02:33:56 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x7000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:33:56 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x9effffff}}}, 0xb8}}, 0x0) 02:33:56 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0x0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x30000, 0x109) 02:33:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x18, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2268.125606] FAT-fs (loop2): bogus logical sector size 22820 [ 2268.126523] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2268.127544] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:33:56 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 17) 02:33:56 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0x0) 02:33:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x40, 0x7f, 0x3, 0x4, 0x0, 0x3, 0x202, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x81, 0x4, 0x100, 0x1, 0x10001, 0xfffffffa, 0x5, 0x0, 0x8001, 0x0, 0x4}, 0x0, 0x4, r1, 0x2) socket$packet(0x11, 0x2, 0x300) [ 2268.226327] FAT-fs (loop2): bogus logical sector size 22820 [ 2268.227151] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2268.234407] FAULT_INJECTION: forcing a failure. [ 2268.234407] name failslab, interval 1, probability 0, space 0, times 0 [ 2268.236026] CPU: 0 PID: 13061 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2268.236958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2268.238049] Call Trace: [ 2268.238413] dump_stack+0x107/0x167 [ 2268.238898] should_fail.cold+0x5/0xa [ 2268.239400] ? kvmalloc_node+0x119/0x170 [ 2268.239940] should_failslab+0x5/0x20 [ 2268.240468] __kmalloc_node+0x76/0x420 [ 2268.240978] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2268.241649] kvmalloc_node+0x119/0x170 [ 2268.242162] alloc_fdtable+0x13f/0x280 [ 2268.242683] dup_fd+0x92e/0xf40 [ 2268.243126] copy_process+0x197c/0x78b0 [ 2268.243659] ? SOFTIRQ_verbose+0x10/0x10 [ 2268.244205] ? __lockdep_reset_lock+0x180/0x180 [ 2268.244817] ? mark_lock+0xf5/0x2df0 [ 2268.245328] ? __cleanup_sighand+0xb0/0xb0 [ 2268.245914] ? _copy_from_user+0xfb/0x1b0 [ 2268.246471] kernel_clone+0xe7/0x980 [ 2268.246964] ? __lockdep_reset_lock+0x180/0x180 [ 2268.247577] ? create_io_thread+0xf0/0xf0 [ 2268.248132] ? ksys_write+0x21a/0x260 02:33:56 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xf0ffffff}}}, 0xb8}}, 0x0) [ 2268.248640] ? lock_downgrade+0x6d0/0x6d0 [ 2268.249385] __do_sys_clone3+0x1e5/0x320 [ 2268.249918] ? __do_sys_clone+0x110/0x110 [ 2268.250482] ? rcu_read_lock_any_held+0x75/0xa0 [ 2268.251101] ? vfs_write+0x354/0xb10 [ 2268.251593] ? fput_many+0x2f/0x1a0 [ 2268.252083] ? ksys_write+0x1a9/0x260 [ 2268.252594] ? __ia32_sys_read+0xb0/0xb0 [ 2268.253151] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2268.253845] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2268.254526] ? trace_hardirqs_on+0x5b/0x180 [ 2268.255100] do_syscall_64+0x33/0x40 [ 2268.255590] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2268.256276] RIP: 0033:0x7f5655a9cb19 [ 2268.256768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2268.259191] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2268.260197] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2268.261137] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2268.262073] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2268.263007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2268.263940] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:33:56 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 87) 02:33:56 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 02:33:56 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x9000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:33:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x1b, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2268.370471] FAT-fs (loop2): bogus logical sector size 22820 [ 2268.371246] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2268.412413] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2268.426467] FAULT_INJECTION: forcing a failure. [ 2268.426467] name failslab, interval 1, probability 0, space 0, times 0 [ 2268.427889] CPU: 0 PID: 13088 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2268.428751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2268.429767] Call Trace: [ 2268.430097] dump_stack+0x107/0x167 [ 2268.430551] should_fail.cold+0x5/0xa [ 2268.431024] ? create_object.isra.0+0x3a/0xa20 [ 2268.431585] should_failslab+0x5/0x20 [ 2268.432058] kmem_cache_alloc+0x5b/0x310 [ 2268.432566] ? xfrm_policy_get_afinfo+0x21/0x2b0 [ 2268.433149] create_object.isra.0+0x3a/0xa20 [ 2268.433688] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2268.434311] kmem_cache_alloc+0x159/0x310 [ 2268.434830] dst_alloc+0x9e/0x5d0 [ 2268.435259] xfrm_lookup_with_ifid+0xb79/0x1b70 [ 2268.435837] ? xfrm_policy_lookup_bytype.constprop.0+0x1a70/0x1a70 [ 2268.436870] ? ip6_dst_lookup_tail+0x63b/0xfc0 [ 2268.437435] icmpv6_route_lookup+0x2b3/0x470 [ 2268.437980] ? icmpv6_err+0x320/0x320 [ 2268.438448] ? dst_release+0x58/0x180 [ 2268.438914] ? icmpv6_xrlim_allow+0xbc/0x450 [ 2268.439452] ? icmpv6_sk_init+0x2a0/0x2a0 [ 2268.439959] ? projid_m_show+0x220/0x220 [ 2268.440460] ? ip6_pol_route_input+0x70/0x70 [ 2268.441013] icmp6_send+0xfdf/0x1f30 [ 2268.441476] ? icmpv6_push_pending_frames+0x470/0x470 [ 2268.442109] ? find_held_lock+0x2c/0x110 [ 2268.442633] ? ip6_dst_hoplimit+0x440/0x440 [ 2268.443164] ip6_pkt_drop+0x3d2/0x7f0 [ 2268.443634] ? ip6_pkt_discard+0x20/0x20 [ 2268.444133] ip6_local_out+0x29f/0x4c0 [ 2268.444622] ip6_send_skb+0x117/0x460 [ 2268.445092] udp_v6_send_skb+0x7b7/0x1620 [ 2268.445613] udpv6_sendmsg+0x216b/0x2b40 [ 2268.446117] ? ip_frag_init+0x350/0x350 [ 2268.446610] ? udp_v6_push_pending_frames+0x360/0x360 [ 2268.447239] ? SOFTIRQ_verbose+0x10/0x10 [ 2268.447749] ? __lockdep_reset_lock+0x180/0x180 [ 2268.448332] ? lock_acquire+0x197/0x470 [ 2268.448818] ? find_held_lock+0x2c/0x110 [ 2268.449325] ? lock_chain_count+0x20/0x20 [ 2268.449839] ? sock_has_perm+0x1ea/0x280 [ 2268.450356] ? __import_iovec+0x458/0x590 [ 2268.450865] ? udp_v6_push_pending_frames+0x360/0x360 [ 2268.451498] inet6_sendmsg+0x105/0x140 [ 2268.451974] ? inet6_compat_ioctl+0x320/0x320 [ 2268.452532] __sock_sendmsg+0xf2/0x190 [ 2268.453011] ____sys_sendmsg+0x334/0x870 [ 2268.453513] ? sock_write_iter+0x3d0/0x3d0 [ 2268.454029] ? do_recvmmsg+0x6d0/0x6d0 [ 2268.454510] ? __lock_acquire+0x1657/0x5b00 [ 2268.455050] ___sys_sendmsg+0xf3/0x170 [ 2268.455535] ? sendmsg_copy_msghdr+0x160/0x160 [ 2268.456099] ? __lockdep_reset_lock+0x180/0x180 [ 2268.456680] ? lock_acquire+0x197/0x470 [ 2268.457166] ? find_held_lock+0x2c/0x110 [ 2268.457672] ? __might_fault+0xd3/0x180 [ 2268.458158] ? lock_downgrade+0x6d0/0x6d0 [ 2268.458679] __sys_sendmmsg+0x195/0x470 [ 2268.459172] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2268.459701] ? lock_downgrade+0x6d0/0x6d0 [ 2268.460226] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2268.460819] ? wait_for_completion_io+0x270/0x270 [ 2268.461415] ? rcu_read_lock_any_held+0x75/0xa0 [ 2268.461985] ? vfs_write+0x354/0xb10 [ 2268.462444] ? fput_many+0x2f/0x1a0 [ 2268.462894] ? ksys_write+0x1a9/0x260 [ 2268.463366] ? __ia32_sys_read+0xb0/0xb0 [ 2268.463871] __x64_sys_sendmmsg+0x99/0x100 [ 2268.464396] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2268.465026] do_syscall_64+0x33/0x40 [ 2268.465485] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2268.466113] RIP: 0033:0x7f9688118b19 [ 2268.466576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2268.468838] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2268.469775] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2268.470650] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2268.471521] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2268.472399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2268.473273] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:33:56 executing program 0: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) renameat2(r1, &(0x7f0000000280)='./file1\x00', r1, &(0x7f00000002c0)='./file1\x00', 0x7) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000002e40)={{}, 0x0, 0x8, @inherit={0x50, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000098e4f33e000000000000010000000000000000000000e0ff210000000000000081000000000000107000000000002047702773d84ca316fc8b4d490000000000000000000000000000000000002000000000000000"]}, @devid}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, &(0x7f0000001980)) mount(&(0x7f0000000040)=@md0, &(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='cgroup\x00', 0x1000, &(0x7f0000000200)='port') chdir(&(0x7f0000000100)='./file1\x00') unlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x200) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3e00faec}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000600)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)={'trans=tcp,', {'port', 0x3d, 0xfffffffffffffffd}, 0x2c, {[{@mmap}], [{@dont_hash}, {@dont_hash}, {@fowner_lt={'fowner<', r2}}]}}) 02:33:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20a, 0x4, &(0x7f0000000340)=[{&(0x7f0000000680)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)={[{@usrjquota}]}) r0 = syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f00000003c0)="dbabb7188a0a359183fafdc709f98e3686344e3227dbc6282b70dd364b37de36e5386644360bb1f3d2af169a8ff4c5867c2efe7a14835e89291432f8bab0860fb4858f32b28e6ab97c27a84b0f09b225fc04223f93d4eff640042e28d4900ce2956275ca5e3e1c99bda3551fdab6729d5dab188d5523db7550bcb919db349ddfb4c237c9f562e3f0b632c695f43b5228934b753087def165eb67661659ba0d89dddd519346aafa3e7772b4fcda10a8fd4962982d90f28d8b3cac556f3c9f3c54c227705810b0d3580d40a5f5fd9a74172b7ec24b5cee", 0xd6, 0x4}, {0xfffffffffffffffd}, {&(0x7f0000000180)="716952cd8caacaa8a27de01eb82cc0f3dd427b66e085a6be06850a43547640e0a59f77e603f27e9f49a02be16e9643a3ac493be59a959d196db4978559f15a5a818f998034d388010a450949e463a909f6625d42e7448187d9bf276d09b151015f026d77afaac428ff49efcef3279f3d06eef72d89592385f5ea498c13444e4acc8dbbcbc6c3aaf826947a1cbb072bc73650f17f1d66e4", 0x97, 0x8}, {&(0x7f00000004c0)="a4db6371cca9a2fc559e7e13a54ec7df3d9c5e59da70b6f8b5c6895b88164ad979a5ffea0ea2a7d07ae795f27b4f9c053890c5055046997df925433520372256afdd786ba589c06b8f29dbffa1d1a47d9a27f6c39663e7291dc64110c826b8440c36553afe79a8a176b9850d33860207a572fc2434080ee9b3f5b67b03d9ab317c29243b6904729113233f766939d616e92dda48a6569fc11ede5a9f73da8c1cf14261989cb5eead9963158458605acf3f4223e4820d62ba324a99e542dcce354de7bbd42e9dcffdb3d7db41d884bfaeb0f8", 0xd2, 0x8}, {&(0x7f0000000280)="5f390ee1c6a99edfb7c8112488b18357eb8fef787f1247938171a853e3f636a0e1435d72b002f36d70fd4102e552cd7d7fd3b0e9ef788dd11ef0e7cf55d2b72f4e582e99b4024d6f704fedc394eddda001d5920ead124ffcb839d4d904e3acfea3bb26ff5de5fe7a03ef", 0x6a, 0x200}], 0xf5e893ffd7217657, &(0x7f0000000300)={[{'\'#(%@#'}, {'ext4\x00'}, {'.'}, {'usrjquota='}, {'ext4\x00'}]}) syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80, 0x5, &(0x7f0000000a80)=[{&(0x7f0000000700)="fe63e06613dcf5138a060bde3c9f50817ffa5b2e5762b5a94664a8", 0x1b, 0x6}, {&(0x7f0000000740)="2d63d5c87a04fb088f282b29363b0f2375bbb95ce5842cfa008f5598d5751bf7159ab30064f0505ced418b0003f7be1e4e9dc49f2674d1716ca114100b2888b77e38ab264da75614abfc63d35b84ea29d354573ffa1ef2a0ca8f30215e5f7f0096df2f9748fd8ddca28b755e471a4ded116296eb1e1e21f26199c946f59fa0c88ea424373543ba6511c6b154e0843f4fe8818f3b68f6069039a9d2aefe45e917301ba3bbaa5e6460c40313bdf7c95c7fcfdf790f4392aeca", 0xb8, 0x8000}, {&(0x7f0000000800)="f69d808e90b6c29c6f1f3e09ecb7ef79a6e1e5f0fe4556d2eb42155fa08961d149c28101af573b96267c05d5ef032781a7a724a41ccccf124134779dca29217114b364963cab4e0a1b63d4e17ec0f86b231950cb54af2c85b94d66933bada03699fa30c61f5b43e32e6a9d3e2b15dc15f4f553743f7d6c4e30a3249cb9e56cb7b1b249f887cfa1b0afc5f992188b42e9c9d2916929758b6193b83801f953e7ddab3098177edda151c2edbf3963f67a6af6183e790ea62bbb59538783cfcbd044fcf185639e316986e20b7199d895d7696fe882aae645add381c3f256c6d70c", 0xdf, 0x8}, {&(0x7f0000000900)="94615799ba7e5417a1477e74d2555f61b2d0345300818bb73920d0b50c1df0a5fdc6ece38e01d0b97f3183b2c37fec75b53d9f5f2460f2f0f5c291a6dc8dae9313c60e1ddf5c7a7b0687794ed31e8235bef1fa43d5ab5c091d173562248795d6d08a4ffe68a4012e3828fe27f37f53", 0x6f, 0x7fffffff}, {&(0x7f0000000980)="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", 0xfe, 0x3}], 0x4, &(0x7f0000000b00)={[{'.}$@'}, {'nfs4\x00'}], [{@fsmagic={'fsmagic', 0x3d, 0x100000000}}]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) vmsplice(r1, &(0x7f0000001c00)=[{&(0x7f0000000b40)="0633ce58c97e026ebecf3d25544e73aba49e8cf6936c353db96c9a3cdcbf0f5da14690b7bf01f3502a21b252629dc7cf3578875b0c9a4599ee4a3171000a716abdab35b9c5116bf70f63aea6cc205293a0c8d6c04ed094852f25647adee1a6ff5f9f8d5b84626f5618ca29cd5691bcbfcd3bb949fc", 0x75}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="e33139d03ebc", 0x6}], 0x3, 0xb) unlinkat(r0, &(0x7f0000000640)='./file0/file0\x00', 0x200) [ 2284.457306] FAULT_INJECTION: forcing a failure. [ 2284.457306] name failslab, interval 1, probability 0, space 0, times 0 [ 2284.459150] CPU: 0 PID: 13104 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2284.460200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2284.461461] Call Trace: [ 2284.461857] dump_stack+0x107/0x167 [ 2284.462401] should_fail.cold+0x5/0xa [ 2284.462981] ? create_object.isra.0+0x3a/0xa20 [ 2284.463666] should_failslab+0x5/0x20 [ 2284.464232] kmem_cache_alloc+0x5b/0x310 [ 2284.464856] create_object.isra.0+0x3a/0xa20 [ 2284.465520] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2284.466303] __kmalloc_node+0x1ae/0x420 [ 2284.466911] kvmalloc_node+0x119/0x170 [ 2284.467493] alloc_fdtable+0xd3/0x280 [ 2284.468068] dup_fd+0x92e/0xf40 [ 2284.468585] copy_process+0x197c/0x78b0 [ 2284.469189] ? SOFTIRQ_verbose+0x10/0x10 [ 2284.469796] ? __lockdep_reset_lock+0x180/0x180 [ 2284.470495] ? mark_lock+0xf5/0x2df0 [ 2284.471069] ? __cleanup_sighand+0xb0/0xb0 [ 2284.471719] ? _copy_from_user+0xfb/0x1b0 [ 2284.472357] kernel_clone+0xe7/0x980 [ 2284.472918] ? __lockdep_reset_lock+0x180/0x180 [ 2284.473622] ? create_io_thread+0xf0/0xf0 [ 2284.474255] ? ksys_write+0x21a/0x260 [ 2284.474832] ? lock_downgrade+0x6d0/0x6d0 [ 2284.475453] __do_sys_clone3+0x1e5/0x320 [ 2284.476063] ? __do_sys_clone+0x110/0x110 [ 2284.476531] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2284.476706] ? rcu_read_lock_any_held+0x75/0xa0 [ 2284.479155] ? vfs_write+0x354/0xb10 [ 2284.479715] ? fput_many+0x2f/0x1a0 [ 2284.480271] ? ksys_write+0x1a9/0x260 [ 2284.480849] ? __ia32_sys_read+0xb0/0xb0 [ 2284.481466] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2284.482259] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2284.483028] ? trace_hardirqs_on+0x5b/0x180 [ 2284.483669] do_syscall_64+0x33/0x40 [ 2284.484229] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2284.484662] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2284.485002] RIP: 0033:0x7f5655a9cb19 [ 2284.485014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2284.485021] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2284.485044] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2284.492516] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2284.493575] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2284.494627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2284.495685] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2284.502230] FAT-fs (loop2): bogus logical sector size 22820 [ 2284.503185] FAT-fs (loop2): Can't find a valid FAT filesystem 02:34:12 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 18) 02:34:12 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 88) 02:34:12 executing program 5: r0 = semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r1 = semget$private(0x0, 0x4000, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}, {0x1, 0x7fff, 0x1000}, {0x6, 0x2, 0x800}, {0x3, 0xff00}, {0x4, 0x6468}, {0x0, 0x5, 0x1000}, {0x3, 0x4, 0x1800}, {0x3, 0x9, 0x1800}], 0x8, &(0x7f0000000040)) semctl$SEM_STAT_ANY(r1, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_INFO(r1, 0x1, 0x3, &(0x7f0000000140)=""/16) r2 = semget$private(0x0, 0x0, 0x4) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000180)={{0x1, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0x40, 0xe2d4}, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9}) semctl$IPC_RMID(r0, 0x0, 0x0) semop(r2, &(0x7f0000000100)=[{0x2, 0xa0, 0x400}, {0x0, 0x2, 0x800}], 0x2) semget(0x0, 0x1, 0x202) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) semctl$SEM_INFO(r3, 0x5, 0x13, &(0x7f0000000080)=""/101) unshare(0x48020200) 02:34:12 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 02:34:12 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfcffffff}}}, 0xb8}}, 0x0) 02:34:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x1d, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:34:12 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xa000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:34:12 executing program 0: semget$private(0x0, 0x4, 0x100) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x40, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r2 = semget$private(0x0, 0x4000, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./file0\x00', 0x0) r4 = accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) semtimedop(r2, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}, {0x1, 0x7fff, 0x1000}, {0x6, 0x2, 0x800}, {0x3, 0xff00}, {0x4, 0x6468}, {0x0, 0x5, 0x1000}, {0x3, 0x4, 0x1800}, {0x3, 0x9, 0x1800}], 0x8, &(0x7f0000000040)) semctl$SEM_STAT_ANY(r2, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$IPC_RMID(r2, 0x0, 0x0) r5 = semget$private(0x0, 0x6, 0x0) semop(r5, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) semctl$SEM_INFO(r5, 0x5, 0x13, &(0x7f0000000080)=""/101) unshare(0x48020200) [ 2284.522728] FAULT_INJECTION: forcing a failure. [ 2284.522728] name failslab, interval 1, probability 0, space 0, times 0 [ 2284.525502] CPU: 1 PID: 13103 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2284.527170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2284.529157] Call Trace: [ 2284.529793] dump_stack+0x107/0x167 [ 2284.530673] should_fail.cold+0x5/0xa [ 2284.531590] ? dst_alloc+0x9e/0x5d0 [ 2284.532473] should_failslab+0x5/0x20 [ 2284.533393] kmem_cache_alloc+0x5b/0x310 [ 2284.534380] dst_alloc+0x9e/0x5d0 [ 2284.535227] xfrm_lookup_with_ifid+0xb79/0x1b70 [ 2284.536367] ? xfrm_policy_lookup_bytype.constprop.0+0x1a70/0x1a70 [ 2284.537863] ? ip6_route_output_flags+0xf0/0x370 [ 2284.539010] ? ip6_dst_lookup_tail+0x63b/0xfc0 [ 2284.540126] icmpv6_route_lookup+0x385/0x470 [ 2284.541191] ? icmpv6_err+0x320/0x320 [ 2284.542118] ? dst_release+0x58/0x180 [ 2284.543069] icmp6_send+0xfdf/0x1f30 [ 2284.544000] ? icmpv6_push_pending_frames+0x470/0x470 [ 2284.545243] ? find_held_lock+0x2c/0x110 [ 2284.546262] ? ip6_dst_hoplimit+0x440/0x440 [ 2284.547307] ip6_pkt_drop+0x3d2/0x7f0 [ 2284.548217] ? ip6_pkt_discard+0x20/0x20 [ 2284.549207] ip6_local_out+0x29f/0x4c0 [ 2284.550146] ip6_send_skb+0x117/0x460 [ 2284.551067] udp_v6_send_skb+0x7b7/0x1620 [ 2284.552078] udpv6_sendmsg+0x216b/0x2b40 [ 2284.553057] ? ip_frag_init+0x350/0x350 [ 2284.554022] ? udp_v6_push_pending_frames+0x360/0x360 [ 2284.555262] ? SOFTIRQ_verbose+0x10/0x10 [ 2284.556248] ? __lockdep_reset_lock+0x180/0x180 [ 2284.557375] ? lock_acquire+0x197/0x470 [ 2284.558324] ? find_held_lock+0x2c/0x110 [ 2284.559314] ? lock_chain_count+0x20/0x20 [ 2284.560316] ? sock_has_perm+0x1ea/0x280 [ 2284.561325] ? __import_iovec+0x458/0x590 [ 2284.562320] ? udp_v6_push_pending_frames+0x360/0x360 [ 2284.563547] inet6_sendmsg+0x105/0x140 [ 2284.564480] ? inet6_compat_ioctl+0x320/0x320 [ 2284.565534] __sock_sendmsg+0xf2/0x190 [ 2284.566459] ____sys_sendmsg+0x334/0x870 [ 2284.567425] ? sock_write_iter+0x3d0/0x3d0 [ 2284.568432] ? do_recvmmsg+0x6d0/0x6d0 [ 2284.569360] ? __lock_acquire+0x1657/0x5b00 [ 2284.570402] ___sys_sendmsg+0xf3/0x170 [ 2284.571330] ? sendmsg_copy_msghdr+0x160/0x160 [ 2284.572426] ? __lockdep_reset_lock+0x180/0x180 [ 2284.573541] ? lock_acquire+0x197/0x470 [ 2284.574482] ? find_held_lock+0x2c/0x110 [ 2284.575454] ? __might_fault+0xd3/0x180 [ 2284.576409] ? lock_downgrade+0x6d0/0x6d0 [ 2284.577425] __sys_sendmmsg+0x195/0x470 [ 2284.578382] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2284.579405] ? lock_downgrade+0x6d0/0x6d0 [ 2284.580439] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2284.581585] ? wait_for_completion_io+0x270/0x270 [ 2284.582730] ? rcu_read_lock_any_held+0x75/0xa0 [ 2284.583828] ? vfs_write+0x354/0xb10 [ 2284.584713] ? fput_many+0x2f/0x1a0 [ 2284.585569] ? ksys_write+0x1a9/0x260 [ 2284.586456] ? __ia32_sys_read+0xb0/0xb0 [ 2284.587441] __x64_sys_sendmmsg+0x99/0x100 [ 2284.588453] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2284.589658] do_syscall_64+0x33/0x40 [ 2284.590527] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2284.591730] RIP: 0033:0x7f9688118b19 [ 2284.592613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2284.596957] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2284.598743] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2284.600425] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2284.602085] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2284.603750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2284.605422] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:34:12 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 19) 02:34:12 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) [ 2284.631873] FAT-fs (loop2): bogus logical sector size 22820 [ 2284.633310] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2284.655755] FAULT_INJECTION: forcing a failure. [ 2284.655755] name failslab, interval 1, probability 0, space 0, times 0 [ 2284.657403] CPU: 0 PID: 13118 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2284.658370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2284.659524] Call Trace: [ 2284.659896] dump_stack+0x107/0x167 [ 2284.660413] should_fail.cold+0x5/0xa [ 2284.660943] ? copy_process+0x1ae7/0x78b0 [ 2284.661521] should_failslab+0x5/0x20 [ 2284.662048] kmem_cache_alloc+0x5b/0x310 [ 2284.662616] copy_process+0x1ae7/0x78b0 [ 2284.663165] ? SOFTIRQ_verbose+0x10/0x10 [ 2284.663727] ? __lockdep_reset_lock+0x180/0x180 [ 2284.664375] ? mark_lock+0xf5/0x2df0 [ 2284.664914] ? __cleanup_sighand+0xb0/0xb0 [ 2284.665516] ? _copy_from_user+0xfb/0x1b0 [ 2284.666098] kernel_clone+0xe7/0x980 [ 2284.666609] ? __lockdep_reset_lock+0x180/0x180 [ 2284.667256] ? create_io_thread+0xf0/0xf0 [ 2284.667835] ? ksys_write+0x21a/0x260 [ 2284.668365] ? lock_downgrade+0x6d0/0x6d0 [ 2284.668939] __do_sys_clone3+0x1e5/0x320 [ 2284.669493] ? __do_sys_clone+0x110/0x110 [ 2284.670071] ? rcu_read_lock_any_held+0x75/0xa0 [ 2284.670709] ? vfs_write+0x354/0xb10 [ 2284.671222] ? fput_many+0x2f/0x1a0 [ 2284.671725] ? ksys_write+0x1a9/0x260 [ 2284.672248] ? __ia32_sys_read+0xb0/0xb0 [ 2284.672821] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2284.673542] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2284.674242] ? trace_hardirqs_on+0x5b/0x180 [ 2284.674839] do_syscall_64+0x33/0x40 [ 2284.675350] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2284.676056] RIP: 0033:0x7f5655a9cb19 [ 2284.676580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2284.679107] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2284.680144] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2284.681138] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2284.682108] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2284.683071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2284.684058] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:34:27 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffff000}}}, 0xb8}}, 0x0) 02:34:27 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xf000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:34:27 executing program 5: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000440)=""/103, 0x67}, {&(0x7f0000000600)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}, {&(0x7f0000000380)=""/15, 0xf}, {&(0x7f00000004c0)=""/207, 0xcf}], 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='}\x00') ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000b40)={0x7fff, 0x3, 0x7fff}) 02:34:27 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 89) 02:34:27 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 02:34:27 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 20) 02:34:27 executing program 0: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000200)={0x400, 0x7f, 0x2, 0x400}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) capset(&(0x7f0000000180)={0x20080522, r0}, &(0x7f00000002c0)={0x40, 0x2, 0xfffffaf2, 0x6, 0xffffffff, 0x40}) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/key-users\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0x20) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='wlan1\x00', 0x10) sendfile(r1, r2, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}, 0x0, 0x0, 0x145, 0xf, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0790000000000000000000000020000000000"], 0x190) 02:34:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x28, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2299.309327] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2299.317396] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2299.323375] FAULT_INJECTION: forcing a failure. [ 2299.323375] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.324986] CPU: 1 PID: 13136 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2299.325947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2299.327098] Call Trace: [ 2299.327473] dump_stack+0x107/0x167 [ 2299.327989] should_fail.cold+0x5/0xa [ 2299.328553] ? create_object.isra.0+0x3a/0xa20 [ 2299.329202] should_failslab+0x5/0x20 [ 2299.329731] kmem_cache_alloc+0x5b/0x310 [ 2299.330301] ? xfrm_policy_get_afinfo+0x21/0x2b0 [ 2299.330956] create_object.isra.0+0x3a/0xa20 [ 2299.331559] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2299.332276] kmem_cache_alloc+0x159/0x310 [ 2299.332871] dst_alloc+0x9e/0x5d0 [ 2299.333354] xfrm_lookup_with_ifid+0xb79/0x1b70 [ 2299.334012] ? xfrm_policy_lookup_bytype.constprop.0+0x1a70/0x1a70 [ 2299.334868] ? ip6_route_output_flags+0xf0/0x370 [ 2299.335518] ? ip6_dst_lookup_tail+0x63b/0xfc0 [ 2299.336159] icmpv6_route_lookup+0x385/0x470 [ 2299.336778] ? icmpv6_err+0x320/0x320 [ 2299.337313] ? dst_release+0x58/0x180 [ 2299.337860] icmp6_send+0xfdf/0x1f30 [ 2299.338394] ? icmpv6_push_pending_frames+0x470/0x470 [ 2299.339088] FAULT_INJECTION: forcing a failure. [ 2299.339088] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.340597] ? find_held_lock+0x2c/0x110 [ 2299.341184] ? ip6_dst_hoplimit+0x440/0x440 [ 2299.341780] ip6_pkt_drop+0x3d2/0x7f0 [ 2299.342312] ? ip6_pkt_discard+0x20/0x20 [ 2299.342865] ip6_local_out+0x29f/0x4c0 [ 2299.343403] ip6_send_skb+0x117/0x460 [ 2299.343926] udp_v6_send_skb+0x7b7/0x1620 [ 2299.344517] udpv6_sendmsg+0x216b/0x2b40 [ 2299.345076] ? ip_frag_init+0x350/0x350 [ 2299.345628] ? udp_v6_push_pending_frames+0x360/0x360 [ 2299.346327] ? SOFTIRQ_verbose+0x10/0x10 [ 2299.346895] ? __lockdep_reset_lock+0x180/0x180 [ 2299.347537] ? lock_acquire+0x197/0x470 [ 2299.348078] ? find_held_lock+0x2c/0x110 [ 2299.348655] ? lock_chain_count+0x20/0x20 [ 2299.349234] ? sock_has_perm+0x1ea/0x280 [ 2299.349808] ? __import_iovec+0x458/0x590 [ 2299.350374] ? udp_v6_push_pending_frames+0x360/0x360 [ 2299.351087] inet6_sendmsg+0x105/0x140 [ 2299.351616] ? inet6_compat_ioctl+0x320/0x320 [ 2299.352231] __sock_sendmsg+0xf2/0x190 [ 2299.352765] ____sys_sendmsg+0x334/0x870 [ 2299.353324] ? sock_write_iter+0x3d0/0x3d0 [ 2299.353894] ? do_recvmmsg+0x6d0/0x6d0 [ 2299.354434] ? __lock_acquire+0x1657/0x5b00 [ 2299.355027] ___sys_sendmsg+0xf3/0x170 [ 2299.355555] ? sendmsg_copy_msghdr+0x160/0x160 [ 2299.356182] ? __lockdep_reset_lock+0x180/0x180 [ 2299.356826] ? lock_acquire+0x197/0x470 [ 2299.357364] ? find_held_lock+0x2c/0x110 [ 2299.357924] ? __might_fault+0xd3/0x180 [ 2299.358462] ? lock_downgrade+0x6d0/0x6d0 [ 2299.359043] __sys_sendmmsg+0x195/0x470 [ 2299.359595] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2299.360179] ? lock_downgrade+0x6d0/0x6d0 [ 2299.360767] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2299.361428] ? wait_for_completion_io+0x270/0x270 [ 2299.362090] ? rcu_read_lock_any_held+0x75/0xa0 [ 2299.362718] ? vfs_write+0x354/0xb10 [ 2299.363222] ? fput_many+0x2f/0x1a0 [ 2299.363715] ? ksys_write+0x1a9/0x260 [ 2299.364232] ? __ia32_sys_read+0xb0/0xb0 [ 2299.364802] __x64_sys_sendmmsg+0x99/0x100 [ 2299.365371] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2299.366064] do_syscall_64+0x33/0x40 [ 2299.366566] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2299.367256] RIP: 0033:0x7f9688118b19 [ 2299.367771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2299.370248] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2299.371277] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2299.372239] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2299.373202] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2299.374166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2299.375125] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 2299.376121] CPU: 0 PID: 13139 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2299.377923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2299.380066] Call Trace: [ 2299.380742] dump_stack+0x107/0x167 [ 2299.381040] FAT-fs (loop2): bogus logical sector size 22820 [ 2299.381669] should_fail.cold+0x5/0xa [ 2299.381693] ? create_object.isra.0+0x3a/0xa20 [ 2299.382460] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2299.383394] should_failslab+0x5/0x20 [ 2299.383420] kmem_cache_alloc+0x5b/0x310 [ 2299.387488] create_object.isra.0+0x3a/0xa20 [ 2299.388620] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2299.389933] kmem_cache_alloc+0x159/0x310 [ 2299.391017] copy_process+0x1ae7/0x78b0 [ 2299.392033] ? SOFTIRQ_verbose+0x10/0x10 [ 2299.393076] ? __lockdep_reset_lock+0x180/0x180 [ 2299.394248] ? mark_lock+0xf5/0x2df0 [ 2299.395217] ? __cleanup_sighand+0xb0/0xb0 [ 2299.396328] ? _copy_from_user+0xfb/0x1b0 [ 2299.397394] kernel_clone+0xe7/0x980 [ 2299.398342] ? create_io_thread+0xf0/0xf0 [ 2299.399408] ? perf_event_sched_in.isra.0+0x80/0x80 [ 2299.400699] __do_sys_clone3+0x1e5/0x320 [ 2299.401726] ? __do_sys_clone+0x110/0x110 [ 2299.402791] ? finish_task_switch+0x126/0x5d0 [ 2299.403931] ? finish_task_switch+0xef/0x5d0 [ 2299.405093] ? io_schedule_timeout+0x140/0x140 [ 2299.406229] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2299.407322] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2299.408711] ? ksys_write+0x1a9/0x260 [ 2299.409700] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2299.411049] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2299.412321] ? trace_hardirqs_on+0x5b/0x180 [ 2299.413294] do_syscall_64+0x33/0x40 [ 2299.414228] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2299.415536] RIP: 0033:0x7f5655a9cb19 [ 2299.416427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2299.420982] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2299.422832] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2299.424674] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2299.426447] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2299.428236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2299.430108] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:34:27 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffff7f}}}, 0xb8}}, 0x0) 02:34:27 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xf1c0000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:34:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x2, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:34:27 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) [ 2299.564082] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:34:27 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffff80}}}, 0xb8}}, 0x0) 02:34:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x3, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:34:27 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x48000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2299.650267] FAT-fs (loop2): bogus logical sector size 22820 [ 2299.651554] FAT-fs (loop2): Can't find a valid FAT filesystem 02:34:27 executing program 0: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000000c0), 0x80000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001e00)=ANY=[@ANYBLOB="041100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f2ef9b9d79bb827e8b023d973f9a9b317430606a5eb854dcf902b63643a28dfea2b84efeeb6dd5765d40299ce6e50190d9408877186bdf575b0c6c65b685d75e818361d6b1d17e3cf85df0b3de40dc1ec6c27fdc611b63c9c9d1c566dd4d417a0d86a6b907220885899fea9320188a414523d893995ae45cdc0276ce695fd4969066c7fe9dbabe7b9f1185eaa5447775b2f81f9484dc04a388b73b9313d8395bb5588a2d2d59aaee6064f9ea0235eebdd073e56f754222c96782a9720103f80100510e806efcc28dd66b48351e3c402c9406bb4c3aa5407fc4cfcfbfa6071b313b614667f46d2cd5a70fbd7c3cba91a6a2e5eaa33ab38704af8b010cc21ed3c1e7e5ff217305016dae14c21841d00f58e87d2959be5774468f37845400957ed5e2cb1c9b5cd168e97d5adc2274e83ea89550696367d33c6688c635e41e650a5f319979a0e84ca8529dbd8a2526feb66609fff1d9a16a7ba12499321dfa134182e984dc3b25d828d8ddb19dfef1c164af2c7411adb1ea62a3e06ff7b083ab0446b2bf90d594ab86b892a91ab66552da15ef6f299829a67c7b6a3835b825b07fd5135962931e48ee48db475b4aa1b9977ea539d0d636282e8ca82ce5cabe98c504b83af84534acbf4bebf6a53294ccb80b1c7b4ea5d62a677c6b497063b0726af0aa3dee5f586c9ba578042c762b7e34cca66ead50efd42b885edb2041a1cf5cfb4fe56cadf62990f84e33e42424af24f040a66ce221f66a6d9943f1350290335ed9ee5f69e468aade92480da51225063f8a6bfe4b1862ee1db0a6dde3de69bb27e44d4a2f62aafc63aa4d6ac67c05b7e74763c79ce5f45f932a7424f11ffdd46a0c60f7202d59a238eea51da146bf0722fbe8f2f539c4ee2f607853d1d27d5289c1ce6c41df5da06f41b97e604f78369c44d74299e973774e58b41ab28ff1907ef63125ce8005da64f300a2e2cba190d619efd71b02872494c5b62ecafbaf7139a641e67294698eaa233a7cbb20a0e8742aa6ca032e8086e1aafa0629d9d19cb37e95a1ac7db24d17783e896ad464890d4560a55017ac6feaa84c1a058fe29e03c6c869fab0f2357052826ac28ebbd869bba1080c76a8486d0a920a861e39879b47ab306dbb3b07018d85fca1566035515f26cbeef48440d8e1890f6142ccd755953a9a1f24d86f9e5207b3bc3d663190d0dc31a75c3841fc21167a256812b8add1ea9e7b23fa93da94373633c4e1e5ca593de40c318af7b6faf6f6edb0af97744c55974a69704415b3b488f940b8601d966d1b4dbac8cafb3b742e569ef81d9705b83f25c65ffc4d743cd28fccdf2339e8a7196276d29397ff1827919921ab80d7f3914186a3bbbdc6d3a0421c7e88f615e167ceab7d473038122c3e1fdfcd6c95d858a475d260e6e96b7db13e10944c44543a5d232644e6322e93ec34fa53e826dd9a5bcc830698106071ca7554f5e77669e6a2d8f9dd8ccb9d341469fd61123a91d7203b03406542d540934b22f1c2838cefdd1d07170db6b02ab959518cb0a0050cf64670ff8a49554971dc43671533f482f6aada5073cad82321f0fa0ca03e31bc15d2e4971d2c72c8397253529e0a8fe0c80c1c38d7bec85be568c5229c274b5fda769f244ba83ff987211f7985d3b639ffe548029c2368d6adff7032c46ad08c7de8a73c7538a64a9a6c56df54fadd45251a15e326b1a92de28d91393faaefc746cc291b723d0cc97e50a044a779cae8db0674c32c362ab582cf6ef85ac48233471c4bec98e9b6827bb6566c0233d8624227ed10b9ab041e0da2ce8f8a8d7a22ca530d9b37f6e5016f8dd5c06dd80df89cd2f117cc4e4f3b6d79e69eac396cec8b0c579400b7384854b542619bb8f4a505b0b1f4fb5f590f2a64d7d6606835395d8f5a1e8f4c402b0f1dd26ec22155552492b65b97d6635ac9547a573ded9def33f8e04aa306259aa1edd953c841363e32be1b4191af26f8e67309ee9a493aed9c03132db65dbb69a255ae2681c2f32a546ec76805d4b7a14c5408651eb07dc56ed854d65493d7151414211103a0ac87e8b63aa35d9bb2cba2ad14f4b13f9948691fadf0876de7ecf2d4636b926d8efbf8c1c3d0067923fa8a1de82490fd0105524b4a8a86e0bf13f63b2f8c8ec7dfdffe0fe747280d181d1173c3ed71ba72fe3892242a94e67d93dadcc6087821a6eca9acf6959a501e86aa9129669851694f8f309ebeeeaffe8147ebf2ecb49d913b88085397dc22e376682472aef76411a91ad811a8ee56dd0a3d4b09242ab4a2826c83d44050bde02c5ff961ba85afbba121a7a95e6bf8583dd02e5a51dd97c440b83dc66d16303a49f4af4eeb9e6a186669460e709476ffca440964dc722739080a932a20d4768864b303e26ec686dff970c55e41b15b1e398d8fbb2da9033364703928c8a12cc709160e10c14f355cc25acd4d47cfd063fc4df60fb30f31206154854875bf4fb9dd55c8070f92ddcd696297e60f884672bb2b99976e08472700fa9a5de6bdefb76d03766df3f76f545dc8953c5c8fce47a279785318e84f0f98185e855adc4e1460117c0605a367f8eda8c2b878c2a7198cd74ad5d0d0534a3445f3f3bae509557150b6d45da136d0e847d3e4ec8182a55f3cbe9084d2dfc653d107f8db43e274daad0bca83a194e76ce56a2f0c3745cf4faa35b9df8293a8488412cf75acbb33b5a7c6bd068b3a744f5d0fc1d7245e889eff3710ea94930f1e172b3af9dfed761a3f1befd544a760869764b1a96d149187828562a4801bdbf49c3720e62824a5e79df7e6f90b46e2775d5083dbced6c768e6ef61e91285739f80660eeee6f6d94a7f47e49a0c3a2ecc6477a30ed36ab96c2303ee88c2960821c83a0ffbd44fe7bf0f340ea62e761c95d95f70b27a9504db713487619493f73d03f33899f84289ea5f9e7d0458719778a7b64f0cb8c42b073484e7a8732263e1af7ca2cee1f6a193aacf7f76cde168ac8f908e8a9b941d4bbc703363158116cef83f1b0ce9999fc6c2f0ac124f45de0ef605228dc1b1764fa7730442b548718109dbffb96c55cc69d0d3ac5230fbd3277912c1ae159b4c7b91aaa361a42c660c47a097adfa07c4f0b371e6185ea64c29f638c42950acf7a35538400a99e739cd1a6bb512674d30f170f44ff8543bccfd9c45859cee70527605f849b480cf979aa523cd9a1c0910bc1835cb00433aebecd59ee69355e6b11d53e42466c13542296f8e9887856bcf6c700562b51f929f88f7268bc146f279654eca51a7a961da8cdf022821ef319e1ae99205c6a6f16641fa513af86a5c3ec7e05f517c4588e2fbfdf03bfe5c72a180cf3b847a86409bd689957c3b0554a1dd3d322d77cdf4e26336dd773c6a52f120c21a742ad269eedf54349b9acb213c193f161984515eede65d7b500ecbd61187cbbd88a7baae262a43b244c26075e2a3b4b6a48cb58b20292b7ccdb6b76b1c9d2275f854a87514bdd03c8d19309f5701bf5406c8e824fa2d21ef04180bc577a4bf2fbbe1af71441f373977fc58269ceb373ac3c28bfc7451105bbb224812360a4cc30ed4ef051ee4aa76fae1e8a4981ff329105f93525903081098b680cc00e61e358084302943b9691e21cbe98e1137f59c16e341f1e2b9f2d0eb872bb0180ca3e5fcda175d25b35cfe9bd937ed52ddf6f8a6aa74fa4b7b185c1a80e6b8093021ff43a6be1fc4f95db664454763910f1f6905dec484adc447108e6264008981507aed13b1013bd85bedda8acbb2b78ff1d16f2e6255498c08cec996e2c29cde83ed551b8bb7ac2a71f5e8c7859c9c7808d2f6dd561cb3560bda1e9fd596e67136b902198d63242d626e2e27bfc9b9f7594ad4b6c91d65d90de5bf440cfceb3976b2c06629f25b66460eb623e022447cc5c972152f17b372713a20f24dfb26f2d44224906dbed39d04be6f23fd63e209c0cd849dd7a4e024a301550156954214f4f9bd955b81d9316f05ef7c4f3bdc39e963787f5628794e534047fed65533339f42dd18644631eb0e2e9de9237135a4fb244872e00fa6da441c86367e5bbafcf9f01962b2bac54bce43480766859eac9618b0510a92343bba83089da4d60c18847b28725ed9e762d3e9a007698a8c4ac852f442527b52d381bdc86769cddae97f236f8a07f45b10230a251b91340d9548e01c1cfbeb09286ffae8e4c575d89ad48b7477ac91913dec4c65e5196b1311869b6adf56bf80abfb6750816e9d40f651ac4bf578e38180bb77c49ea841888604a7eee995401bdfc794ec9c716b7253389beb09e0eca05b2d1f604b46004ff9635a24c845246350428fee884f6a3198b13bea21c04d9d44dd281612d193225b559440bf54bf88922994000c9e2e4fe435aedb2d2e85e46aedc48467261fcd2f8bc5dfc84faf1a04670aa2ef098f2c67fd1d5a42bfa30e7bc9592b7ad0f5569cd59e982955ebdb24ef109c4b0f771e552d6219908a4e5bad49ec4ee22bc61e01b4ab5e7a643193da33cf70dbc771973020b52d1baf883eafd22d86f054bcabc1d215dde474537f736c4d8b1bc3aa743f848c96ca3cc0d456eed43030585674e7f3da5a48fc5a55e84e6abed9e592fc739c63af1bd08297dc99d5f21c34262d32c7c0dabe4ab26f8a4f751eb76135101c6359b37a91416a8dd5b06c72390de38b263f7941169442ac354bbf35e22c8176b26573a22b7941d5be60b7ae41f9519ad385e2a33f2626ab3a9c6c230fcccc990e25fa7ab1a025dea0dfb7f02ee2ab05bdb7c40a44e20855950ec6d2625d02a171b0564d87133c1eb2d62e9052eb88fd2581ab21e79fd7b18d2e5a8200131a5b869323e3bb2f1d4a2ace9ceb86ebb0f7b8a5e17fc8f39caeed81db25376ef9bd5491b3c2b0a61ca208c1b8a44cfd26825469381d1b465272cc5854055c0fa995b1fb78809f49af3db6a444f19162470a4834dd916c70fc9ee9e761d506547f09532c4cb912e3bd39d1ee72185471edc4c690b601873366299a523d5bea1f0f9c66274ad2b2a5c292947490bfeb6eda58fc8f66b00000000000000801f811a8b8069aa725d2b7c22ef8ab30c8a1054e08121d44ca61ac254d3d0ef2163b92efb3471f7b6b96b0b6d222ff2b14649852c130fd0f9fcacd7d7fed739d7c295ba145d3a1a8c1a4e6e54d3574f55a0ce2a246660ba678ab61ea638eaea15e6dfa84744a290fa36b7f84e4a4d993413c15227e6fefd74288a333c136de3adb3b19c6dff6a693c31ff5ad5e7a7371f90135049e85732459f361caaa83acabb0b2236955139faebbe7c029c22bcbf7c334fab2ac8f245a14ce6c6a6e8e5e52ff5478afb7647c61d557dfb81e367b38d98dab146633a4b196b0eab6cde0f942ca3999eba20e89f3ac6589b5e338471152920895d0e1a2340bcf2622193ee02f80545a6fae5ed5935993703a0158aeb8eeed887cf99c8260e3a37038900089a775166b9d78ea7bc129254cf988bf133f2b263c58c5a78411ddc62df64af64731a68c4984a4b61af477a0d1254b559dd00fb5373f2c6c132ae9d83929917271243b4c39742908db8f589424b3c021ef564fa0675c1f57c01bb2d29196301f4145c65108e1cb8c85ea51f428c9126216862afa1db4cc8dbe6a9e07f20df2f3893a545b5e47b60035d971e116ade96d59cb4c039dbc668aa54ad0938797db4f5a2689d348051e2312583ddffd89a4995ceb4e76402997701a5dd19e5b6c670bc8565e10eca4d1bac5587457670758c6b2a1f70736b07df677b200c7abec38af809b26be91b22b92dd2ac49b08c56fdfe3351111c69179f693b324b6147cc8eb40009df541f7765cb8df1a06972d6271ff0bcfd99849523f7b31c2b058b3232311508b05353be53bdecee4807be098df7ad7e191fb23eda13581a3dd4b5b0fc40432f207c6dff73306ca40cc9ffb488a1da1ecdc41877c3b162049ba4049f0fd30d16c7b33571f56774b8749934868531e6c6a2ae95ba2fc89857a1cb1a8a6860f92af869b53987e26700f84fd3f3367e8e347370da4bdb1a6be74d3cb8a2c881eb839469811f69f8a48b640186c4cb4e29b62aef5c674fe0a54d0d103cec072c0b00080013192f262f2d0000080000006401010008000a00ac1e0001"], 0x1104}}, 0x0) 02:34:27 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 90) 02:34:27 executing program 5: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x4, 0x1, 0x3f, 0xff, 0x0, 0xf0, 0xb4008, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xc8c4, 0x1, @perf_config_ext={0x3f, 0x7f}, 0x8, 0x1, 0x6, 0x1, 0x41, 0x82a, 0x3, 0x0, 0x4, 0x0, 0xe04f}, 0x0, 0x5, r1, 0x4) syz_mount_image$tmpfs(&(0x7f0000000140), 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00c98b46ea67520b86e3e313090095e07b1199392ee692818c02250a0a0675ede851cf2f29f7ea543e4c2d71e4fcc022b7035ed554c0e139fa699ea89e369cbe102ff51b8c0ad4b6e44f974257ac77a52300c45fd2c424d9374011c836c8f2eed50c3029e044906b9c954b60e4508ec35188c3b6791774ba4039bf6307ff2928834bc2f78695027b72d7f510728d60f1e7f865005b0f5dc0e374a5dd4864f405b890218567c281cb7f583936"]) [ 2299.694634] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2299.725474] netlink: 4316 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2299.765127] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2299.767252] CPU: 0 PID: 13262 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2299.768819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2299.770677] Call Trace: [ 2299.771276] dump_stack+0x107/0x167 [ 2299.772099] sysfs_warn_dup.cold+0x1c/0x29 [ 2299.773063] sysfs_do_create_link_sd+0x122/0x140 [ 2299.774132] sysfs_create_link+0x5f/0xc0 [ 2299.775054] device_add+0x703/0x1c50 [ 2299.775903] ? devlink_add_symlinks+0x970/0x970 [ 2299.776963] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2299.778152] wiphy_register+0x1da6/0x2850 [ 2299.779110] ? wiphy_unregister+0xb90/0xb90 [ 2299.780102] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2299.781310] ieee80211_register_hw+0x23c5/0x38b0 [ 2299.782393] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2299.783469] ? net_generic+0xdb/0x2b0 [ 2299.784334] ? lockdep_init_map_type+0x2c7/0x780 [ 2299.785410] ? memset+0x20/0x50 [ 2299.786156] ? __hrtimer_init+0x12c/0x270 [ 2299.787096] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2299.788242] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2299.789288] ? hwsim_new_radio_nl+0x967/0x1080 [ 2299.790313] ? memcpy+0x39/0x60 [ 2299.791062] hwsim_new_radio_nl+0x991/0x1080 [ 2299.792056] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2299.793245] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2299.794722] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2299.796192] genl_family_rcv_msg_doit+0x22d/0x330 [ 2299.797280] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2299.798760] ? cap_capable+0x1cd/0x230 [ 2299.799651] ? ns_capable+0xe2/0x110 [ 2299.800504] genl_rcv_msg+0x36a/0x5a0 [ 2299.801369] ? genl_get_cmd+0x480/0x480 [ 2299.802268] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2299.803443] ? lock_release+0x680/0x680 [ 2299.804340] ? __lockdep_reset_lock+0x180/0x180 [ 2299.805406] netlink_rcv_skb+0x14b/0x430 [ 2299.806317] ? genl_get_cmd+0x480/0x480 [ 2299.807215] ? netlink_ack+0xab0/0xab0 [ 2299.808101] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2299.809136] ? is_vmalloc_addr+0x7b/0xb0 [ 2299.810055] genl_rcv+0x24/0x40 [ 2299.810798] netlink_unicast+0x6ce/0xa00 [ 2299.811719] ? netlink_attachskb+0xab0/0xab0 [ 2299.812740] netlink_sendmsg+0x90f/0xe00 [ 2299.813666] ? netlink_unicast+0xa00/0xa00 [ 2299.814646] ? netlink_unicast+0xa00/0xa00 [ 2299.815602] __sock_sendmsg+0x154/0x190 [ 2299.816524] ____sys_sendmsg+0x70d/0x870 [ 2299.817447] ? sock_write_iter+0x3d0/0x3d0 [ 2299.818395] ? do_recvmmsg+0x6d0/0x6d0 [ 2299.819273] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2299.820463] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2299.821678] ? __lockdep_reset_lock+0x180/0x180 [ 2299.822738] ___sys_sendmsg+0xf3/0x170 [ 2299.823621] ? sendmsg_copy_msghdr+0x160/0x160 [ 2299.824669] ? __fget_files+0x2cf/0x520 [ 2299.825565] ? lock_downgrade+0x6d0/0x6d0 [ 2299.826517] ? __fget_files+0x2f8/0x520 [ 2299.827425] ? __fget_light+0xea/0x290 [ 2299.828323] __sys_sendmsg+0xe5/0x1b0 [ 2299.829193] ? __sys_sendmsg_sock+0x40/0x40 [ 2299.830173] ? io_schedule_timeout+0x140/0x140 [ 2299.831218] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2299.832403] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2299.833562] ? trace_hardirqs_on+0x5b/0x180 [ 2299.834534] do_syscall_64+0x33/0x40 [ 2299.835368] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2299.836524] RIP: 0033:0x7f1142b05b19 [ 2299.837357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2299.841490] RSP: 002b:00007f114007b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2299.843204] RAX: ffffffffffffffda RBX: 00007f1142c18f60 RCX: 00007f1142b05b19 [ 2299.844811] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 2299.846418] RBP: 00007f1142b5ff6d R08: 0000000000000000 R09: 0000000000000000 [ 2299.848015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2299.849623] R13: 00007ffe9e8fb5ff R14: 00007f114007b300 R15: 0000000000022000 [ 2299.859818] FAULT_INJECTION: forcing a failure. [ 2299.859818] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.862251] CPU: 1 PID: 13266 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2299.863704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2299.865450] Call Trace: [ 2299.866010] dump_stack+0x107/0x167 [ 2299.866780] should_fail.cold+0x5/0xa [ 2299.867593] ? __alloc_skb+0x6d/0x5b0 [ 2299.868402] should_failslab+0x5/0x20 [ 2299.869208] kmem_cache_alloc_node+0x55/0x330 [ 2299.870145] ? mark_lock+0xf5/0x2df0 [ 2299.870930] __alloc_skb+0x6d/0x5b0 [ 2299.871695] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2299.872834] alloc_skb_with_frags+0x92/0x570 [ 2299.873761] ? mark_lock+0xf5/0x2df0 [ 2299.874539] ? mark_lock+0xf5/0x2df0 [ 2299.875330] sock_alloc_send_pskb+0x7af/0x930 [ 2299.876292] ? sk_alloc+0x350/0x350 [ 2299.877074] ? perf_trace_lock+0xac/0x490 [ 2299.877935] ? SOFTIRQ_verbose+0x10/0x10 [ 2299.878801] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2299.879865] ? rawv6_exit+0x20/0x20 [ 2299.880642] ? SOFTIRQ_verbose+0x10/0x10 [ 2299.881505] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2299.882519] ? ip6_mtu+0x1e9/0x3d0 [ 2299.883276] ? ip6_setup_cork+0xfb7/0x1740 [ 2299.884163] ip6_append_data+0x1e6/0x330 [ 2299.885010] ? rawv6_exit+0x20/0x20 [ 2299.885771] ? rawv6_exit+0x20/0x20 [ 2299.886537] icmp6_send+0x1250/0x1f30 [ 2299.887362] ? icmpv6_push_pending_frames+0x470/0x470 [ 2299.888436] ? find_held_lock+0x2c/0x110 [ 2299.889358] ? ip6_dst_hoplimit+0x440/0x440 [ 2299.890276] ip6_pkt_drop+0x3d2/0x7f0 [ 2299.891073] ? ip6_pkt_discard+0x20/0x20 [ 2299.891928] ip6_local_out+0x29f/0x4c0 [ 2299.892766] ip6_send_skb+0x117/0x460 [ 2299.893584] udp_v6_send_skb+0x7b7/0x1620 [ 2299.894471] udpv6_sendmsg+0x216b/0x2b40 [ 2299.895328] ? ip_frag_init+0x350/0x350 [ 2299.896171] ? udp_v6_push_pending_frames+0x360/0x360 [ 2299.897256] ? SOFTIRQ_verbose+0x10/0x10 [ 2299.898121] ? __lockdep_reset_lock+0x180/0x180 [ 2299.899122] ? lock_acquire+0x197/0x470 [ 2299.899960] ? find_held_lock+0x2c/0x110 [ 2299.900836] ? lock_chain_count+0x20/0x20 [ 2299.901703] ? sock_has_perm+0x1ea/0x280 [ 2299.902583] ? __import_iovec+0x458/0x590 [ 2299.903461] ? udp_v6_push_pending_frames+0x360/0x360 [ 2299.904552] inet6_sendmsg+0x105/0x140 [ 2299.905367] ? inet6_compat_ioctl+0x320/0x320 [ 2299.906307] __sock_sendmsg+0xf2/0x190 [ 2299.907122] ____sys_sendmsg+0x334/0x870 [ 2299.907983] ? sock_write_iter+0x3d0/0x3d0 [ 2299.908872] ? do_recvmmsg+0x6d0/0x6d0 [ 2299.909694] ? find_held_lock+0x2c/0x110 [ 2299.910566] ___sys_sendmsg+0xf3/0x170 [ 2299.911388] ? sendmsg_copy_msghdr+0x160/0x160 [ 2299.912351] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2299.913444] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2299.914392] ? trace_hardirqs_on+0x5b/0x180 [ 2299.915309] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2299.916256] ? finish_task_switch+0x126/0x5d0 [ 2299.917205] ? finish_task_switch+0xef/0x5d0 [ 2299.918127] ? __switch_to+0x572/0xf70 [ 2299.918937] ? __switch_to_asm+0x3a/0x60 [ 2299.919784] ? __switch_to_asm+0x34/0x60 [ 2299.920640] ? __schedule+0x82c/0x1ea0 [ 2299.921470] ? io_schedule_timeout+0x140/0x140 [ 2299.922455] __sys_sendmmsg+0x195/0x470 [ 2299.923304] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2299.924218] ? lock_downgrade+0x6d0/0x6d0 [ 2299.925118] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2299.926129] ? wait_for_completion_io+0x270/0x270 [ 2299.927150] ? rcu_read_lock_any_held+0x75/0xa0 [ 2299.928123] ? vfs_write+0x354/0xb10 [ 2299.928909] ? fput_many+0x2f/0x1a0 [ 2299.929670] ? ksys_write+0x1a9/0x260 [ 2299.930477] ? __ia32_sys_read+0xb0/0xb0 [ 2299.931342] __x64_sys_sendmmsg+0x99/0x100 [ 2299.932231] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2299.933315] do_syscall_64+0x33/0x40 [ 2299.934091] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2299.935161] RIP: 0033:0x7f9688118b19 [ 2299.935946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2299.940058] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2299.941661] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2299.943138] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2299.944630] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2299.946121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2299.947611] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 2300.047576] netlink: 4316 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2300.059481] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2300.061266] CPU: 1 PID: 13269 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2300.062724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2300.064481] Call Trace: [ 2300.065034] dump_stack+0x107/0x167 [ 2300.065800] sysfs_warn_dup.cold+0x1c/0x29 [ 2300.066689] sysfs_do_create_link_sd+0x122/0x140 [ 2300.067699] sysfs_create_link+0x5f/0xc0 [ 2300.068568] device_add+0x703/0x1c50 [ 2300.069365] ? devlink_add_symlinks+0x970/0x970 [ 2300.070341] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2300.071447] wiphy_register+0x1da6/0x2850 [ 2300.072334] ? wiphy_unregister+0xb90/0xb90 [ 2300.073262] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2300.074379] ieee80211_register_hw+0x23c5/0x38b0 [ 2300.075393] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2300.076396] ? net_generic+0xdb/0x2b0 [ 2300.077218] ? lockdep_init_map_type+0x2c7/0x780 [ 2300.078225] ? memset+0x20/0x50 [ 2300.078919] ? __hrtimer_init+0x12c/0x270 [ 2300.079810] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2300.080891] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2300.081871] ? hwsim_new_radio_nl+0x967/0x1080 [ 2300.082824] ? memcpy+0x39/0x60 [ 2300.083520] hwsim_new_radio_nl+0x991/0x1080 [ 2300.084456] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2300.085569] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2300.086944] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2300.088317] genl_family_rcv_msg_doit+0x22d/0x330 [ 2300.089343] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2300.090737] ? cap_capable+0x1cd/0x230 [ 2300.091571] ? ns_capable+0xe2/0x110 [ 2300.092362] genl_rcv_msg+0x36a/0x5a0 [ 2300.093172] ? genl_get_cmd+0x480/0x480 [ 2300.094004] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2300.095095] ? lock_release+0x680/0x680 [ 2300.095925] ? __lockdep_reset_lock+0x180/0x180 [ 2300.096919] netlink_rcv_skb+0x14b/0x430 [ 2300.097778] ? genl_get_cmd+0x480/0x480 [ 2300.098624] ? netlink_ack+0xab0/0xab0 [ 2300.099459] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2300.100435] ? is_vmalloc_addr+0x7b/0xb0 [ 2300.101313] genl_rcv+0x24/0x40 [ 2300.102018] netlink_unicast+0x6ce/0xa00 [ 2300.102886] ? netlink_attachskb+0xab0/0xab0 [ 2300.103835] netlink_sendmsg+0x90f/0xe00 [ 2300.104725] ? netlink_unicast+0xa00/0xa00 [ 2300.105635] ? netlink_unicast+0xa00/0xa00 [ 2300.106534] __sock_sendmsg+0x154/0x190 [ 2300.107381] ____sys_sendmsg+0x70d/0x870 [ 2300.108247] ? sock_write_iter+0x3d0/0x3d0 [ 2300.109151] ? do_recvmmsg+0x6d0/0x6d0 [ 2300.109980] ? SOFTIRQ_verbose+0x10/0x10 [ 2300.110849] ? __lockdep_reset_lock+0x180/0x180 [ 2300.111840] ___sys_sendmsg+0xf3/0x170 [ 2300.112674] ? sendmsg_copy_msghdr+0x160/0x160 [ 2300.113648] ? __fget_files+0x2cf/0x520 [ 2300.114492] ? lock_downgrade+0x6d0/0x6d0 [ 2300.115370] ? __lockdep_reset_lock+0x180/0x180 [ 2300.116362] ? futex_exit_release+0x220/0x220 [ 2300.117339] ? __fget_files+0x2f8/0x520 [ 2300.118193] ? __fget_light+0xea/0x290 [ 2300.119031] __sys_sendmsg+0xe5/0x1b0 [ 2300.119843] ? __sys_sendmsg_sock+0x40/0x40 [ 2300.120769] ? __do_sys_futex+0x2bb/0x480 [ 2300.121668] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2300.122780] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.123871] ? trace_hardirqs_on+0x5b/0x180 [ 2300.124793] do_syscall_64+0x33/0x40 [ 2300.125588] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2300.126673] RIP: 0033:0x7f1142b05b19 [ 2300.127465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2300.131358] RSP: 002b:00007f114005a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2300.132979] RAX: ffffffffffffffda RBX: 00007f1142c19020 RCX: 00007f1142b05b19 [ 2300.134484] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 2300.135990] RBP: 00007f1142b5ff6d R08: 0000000000000000 R09: 0000000000000000 [ 2300.137508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2300.139021] R13: 00007ffe9e8fb5ff R14: 00007f114005a300 R15: 0000000000022000 02:34:44 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x4c000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:34:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000180)=0x80, &(0x7f00000001c0)=@un=@abs, 0x0, 0x80c00, 0x0, {0x0, r2}}, 0x10) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) fchdir(r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x81403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x8}, 0x4, 0x3, 0xfffffffc, 0x2, 0x3, 0x400, 0xfffe, 0x0, 0xfffffffc, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r4}, 0x14}}, 0x0) write$binfmt_elf64(r1, &(0x7f00000008c0)=ANY=[], 0x629) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0xf9, 0x4) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000000)={0x390, 0x9, 0xaa9, 0x6}) pwrite64(r5, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) 02:34:44 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffff9e}}}, 0xb8}}, 0x0) 02:34:44 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 91) 02:34:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x8, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:34:44 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:34:44 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 21) 02:34:44 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) [ 2316.004203] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2316.007456] FAT-fs (loop2): bogus logical sector size 22820 [ 2316.008764] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2316.037376] FAULT_INJECTION: forcing a failure. [ 2316.037376] name failslab, interval 1, probability 0, space 0, times 0 [ 2316.039842] CPU: 1 PID: 13286 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2316.041333] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2316.043118] Call Trace: [ 2316.043692] dump_stack+0x107/0x167 [ 2316.044471] should_fail.cold+0x5/0xa [ 2316.045294] ? create_object.isra.0+0x3a/0xa20 [ 2316.046270] should_failslab+0x5/0x20 [ 2316.047081] kmem_cache_alloc+0x5b/0x310 [ 2316.047952] create_object.isra.0+0x3a/0xa20 [ 2316.048910] FAULT_INJECTION: forcing a failure. [ 2316.048910] name failslab, interval 1, probability 0, space 0, times 0 [ 2316.048926] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2316.048958] kmem_cache_alloc_node+0x169/0x330 [ 2316.053540] ? mark_lock+0xf5/0x2df0 [ 2316.054351] __alloc_skb+0x6d/0x5b0 [ 2316.055138] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2316.056267] alloc_skb_with_frags+0x92/0x570 [ 2316.057206] ? mark_lock+0xf5/0x2df0 [ 2316.057998] ? mark_lock+0xf5/0x2df0 [ 2316.058802] sock_alloc_send_pskb+0x7af/0x930 [ 2316.059782] ? sk_alloc+0x350/0x350 [ 2316.060577] ? perf_trace_lock+0xac/0x490 [ 2316.061473] ? SOFTIRQ_verbose+0x10/0x10 [ 2316.062363] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2316.063456] ? rawv6_exit+0x20/0x20 [ 2316.064242] ? SOFTIRQ_verbose+0x10/0x10 [ 2316.065109] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2316.066146] ? ip6_mtu+0x1e9/0x3d0 [ 2316.066917] ? ip6_setup_cork+0xfb7/0x1740 [ 2316.067836] ip6_append_data+0x1e6/0x330 [ 2316.068711] ? rawv6_exit+0x20/0x20 [ 2316.069498] ? rawv6_exit+0x20/0x20 [ 2316.070292] icmp6_send+0x1250/0x1f30 [ 2316.071136] ? icmpv6_push_pending_frames+0x470/0x470 [ 2316.072243] ? find_held_lock+0x2c/0x110 [ 2316.073157] ? ip6_dst_hoplimit+0x440/0x440 [ 2316.074099] ip6_pkt_drop+0x3d2/0x7f0 [ 2316.074930] ? ip6_pkt_discard+0x20/0x20 [ 2316.075805] ip6_local_out+0x29f/0x4c0 [ 2316.076655] ip6_send_skb+0x117/0x460 [ 2316.077478] udp_v6_send_skb+0x7b7/0x1620 [ 2316.078379] udpv6_sendmsg+0x216b/0x2b40 [ 2316.079247] ? ip_frag_init+0x350/0x350 [ 2316.080109] ? udp_v6_push_pending_frames+0x360/0x360 [ 2316.081213] ? SOFTIRQ_verbose+0x10/0x10 [ 2316.082092] ? __lockdep_reset_lock+0x180/0x180 [ 2316.083097] ? lock_acquire+0x197/0x470 [ 2316.083941] ? find_held_lock+0x2c/0x110 [ 2316.084796] ? lock_chain_count+0x20/0x20 [ 2316.085681] ? sock_has_perm+0x1ea/0x280 [ 2316.086581] ? __import_iovec+0x458/0x590 [ 2316.087463] ? udp_v6_push_pending_frames+0x360/0x360 [ 2316.088557] inet6_sendmsg+0x105/0x140 [ 2316.089363] ? inet6_compat_ioctl+0x320/0x320 [ 2316.090311] __sock_sendmsg+0xf2/0x190 [ 2316.091139] ____sys_sendmsg+0x334/0x870 [ 2316.091993] ? sock_write_iter+0x3d0/0x3d0 [ 2316.092906] ? do_recvmmsg+0x6d0/0x6d0 [ 2316.093754] ? __lock_acquire+0x1657/0x5b00 [ 2316.094703] ___sys_sendmsg+0xf3/0x170 [ 2316.095538] ? sendmsg_copy_msghdr+0x160/0x160 [ 2316.096530] ? __lockdep_reset_lock+0x180/0x180 [ 2316.097542] ? lock_acquire+0x197/0x470 [ 2316.098401] ? find_held_lock+0x2c/0x110 [ 2316.099284] ? __might_fault+0xd3/0x180 [ 2316.100140] ? lock_downgrade+0x6d0/0x6d0 [ 2316.101055] __sys_sendmmsg+0x195/0x470 [ 2316.101908] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2316.102819] ? lock_downgrade+0x6d0/0x6d0 [ 2316.103720] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2316.104749] ? wait_for_completion_io+0x270/0x270 [ 2316.105781] ? rcu_read_lock_any_held+0x75/0xa0 [ 2316.106769] ? vfs_write+0x354/0xb10 [ 2316.107560] ? fput_many+0x2f/0x1a0 [ 2316.108336] ? ksys_write+0x1a9/0x260 [ 2316.109153] ? __ia32_sys_read+0xb0/0xb0 [ 2316.110024] __x64_sys_sendmmsg+0x99/0x100 [ 2316.110921] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2316.112019] do_syscall_64+0x33/0x40 [ 2316.112818] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2316.113910] RIP: 0033:0x7f9688118b19 [ 2316.114703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2316.118610] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2316.120254] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2316.121800] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2316.123322] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2316.124848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2316.126364] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 2316.127913] CPU: 0 PID: 13288 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2316.129746] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2316.131730] Call Trace: [ 2316.132342] dump_stack+0x107/0x167 [ 2316.133192] should_fail.cold+0x5/0xa [ 2316.134155] ? copy_process+0x1c65/0x78b0 [ 2316.135209] should_failslab+0x5/0x20 [ 2316.136058] kmem_cache_alloc+0x5b/0x310 [ 2316.137017] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2316.138221] copy_process+0x1c65/0x78b0 [ 2316.139141] ? SOFTIRQ_verbose+0x10/0x10 [ 2316.140093] ? __lockdep_reset_lock+0x180/0x180 [ 2316.141153] ? mark_lock+0xf5/0x2df0 [ 2316.142045] ? __cleanup_sighand+0xb0/0xb0 [ 2316.143055] ? _copy_from_user+0xfb/0x1b0 [ 2316.143997] kernel_clone+0xe7/0x980 [ 2316.144863] ? __lockdep_reset_lock+0x180/0x180 [ 2316.145942] ? create_io_thread+0xf0/0xf0 [ 2316.146920] ? ksys_write+0x21a/0x260 [ 2316.147798] ? lock_downgrade+0x6d0/0x6d0 [ 2316.148802] __do_sys_clone3+0x1e5/0x320 [ 2316.149743] ? __do_sys_clone+0x110/0x110 [ 2316.150727] ? rcu_read_lock_any_held+0x75/0xa0 [ 2316.151807] ? vfs_write+0x354/0xb10 [ 2316.152674] ? fput_many+0x2f/0x1a0 [ 2316.153517] ? ksys_write+0x1a9/0x260 [ 2316.154379] ? __ia32_sys_read+0xb0/0xb0 [ 2316.155302] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2316.156480] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2316.157684] ? trace_hardirqs_on+0x5b/0x180 [ 2316.158685] do_syscall_64+0x33/0x40 [ 2316.159536] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2316.160709] RIP: 0033:0x7f5655a9cb19 [ 2316.161549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2316.165749] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2316.167527] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2316.169199] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2316.170835] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2316.172460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2316.174088] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:34:44 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x68000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:34:44 executing program 2: mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) [ 2316.233841] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:34:44 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffff0}}}, 0xb8}}, 0x0) 02:34:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0xe, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:34:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x68d2, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x4}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index, 0x20, 0x0, 0x4}, 0xff) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000000f010104000300000000000000000000240001801400018008000100ffffffff08000200e00000010c00028005000c00028005000100000000001400018008000100ac14140008000200ac14143008000740000000001800068008000100ac1414000c0003800600020000000000"], 0x7c}}, 0x0) 02:34:44 executing program 2: mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) 02:34:44 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x6c000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:34:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x19, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2316.408221] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:35:02 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 22) 02:35:02 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffc}}}, 0xb8}}, 0x0) 02:35:02 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 92) 02:35:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x300, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2334.333310] FAULT_INJECTION: forcing a failure. [ 2334.333310] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.335235] CPU: 0 PID: 13318 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2334.336388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2334.337798] Call Trace: [ 2334.338254] dump_stack+0x107/0x167 [ 2334.338866] should_fail.cold+0x5/0xa [ 2334.339506] ? create_object.isra.0+0x3a/0xa20 [ 2334.340268] should_failslab+0x5/0x20 [ 2334.340921] kmem_cache_alloc+0x5b/0x310 [ 2334.341606] create_object.isra.0+0x3a/0xa20 [ 2334.342342] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2334.343203] kmem_cache_alloc+0x159/0x310 [ 2334.343900] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2334.344794] copy_process+0x1c65/0x78b0 [ 2334.345458] ? SOFTIRQ_verbose+0x10/0x10 [ 2334.346142] ? __lockdep_reset_lock+0x180/0x180 [ 2334.346924] ? mark_lock+0xf5/0x2df0 [ 2334.347568] ? __cleanup_sighand+0xb0/0xb0 [ 2334.348293] ? _copy_from_user+0xfb/0x1b0 [ 2334.349004] kernel_clone+0xe7/0x980 [ 2334.349626] ? __lockdep_reset_lock+0x180/0x180 [ 2334.350404] ? create_io_thread+0xf0/0xf0 02:35:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x68d2, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x4}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index, 0x20, 0x0, 0x4}, 0xff) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000000f010104000300000000000000000000240001801400018008000100ffffffff08000200e00000010c00028005000c00028005000100000000001400018008000100ac14140008000200ac14143008000740000000001800068008000100ac1414000c0003800600020000000000"], 0x7c}}, 0x0) 02:35:02 executing program 2: mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) [ 2334.351120] ? ksys_write+0x21a/0x260 [ 2334.351917] ? lock_downgrade+0x6d0/0x6d0 [ 2334.352607] __do_sys_clone3+0x1e5/0x320 [ 2334.353289] ? __do_sys_clone+0x110/0x110 [ 2334.353994] ? rcu_read_lock_any_held+0x75/0xa0 [ 2334.354762] ? vfs_write+0x354/0xb10 [ 2334.355376] ? fput_many+0x2f/0x1a0 [ 2334.355979] ? ksys_write+0x1a9/0x260 [ 2334.356608] ? __ia32_sys_read+0xb0/0xb0 [ 2334.357300] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2334.358166] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2334.359011] ? trace_hardirqs_on+0x5b/0x180 [ 2334.359725] do_syscall_64+0x33/0x40 [ 2334.360332] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2334.361188] RIP: 0033:0x7f5655a9cb19 [ 2334.361798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2334.364841] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2334.366138] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2334.367346] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2334.368556] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2334.369778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:35:02 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x74000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:35:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x7, 0x0, 0x0, 0x9, &(0x7f0000000000)=[r1, r0, r0], 0x3}, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000140)={0x5000000, 0x100000000}) [ 2334.370991] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2334.376659] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2334.390797] FAULT_INJECTION: forcing a failure. [ 2334.390797] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.392716] CPU: 0 PID: 13326 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2334.393887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2334.395303] Call Trace: [ 2334.395752] dump_stack+0x107/0x167 [ 2334.396163] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2334.396375] should_fail.cold+0x5/0xa [ 2334.398885] ? __alloc_skb+0x6d/0x5b0 [ 2334.399520] should_failslab+0x5/0x20 [ 2334.400156] kmem_cache_alloc_node+0x55/0x330 [ 2334.400914] ? mark_lock+0xf5/0x2df0 [ 2334.401538] __alloc_skb+0x6d/0x5b0 [ 2334.402143] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2334.403035] alloc_skb_with_frags+0x92/0x570 [ 2334.403768] ? mark_lock+0xf5/0x2df0 [ 2334.404395] ? mark_lock+0xf5/0x2df0 [ 2334.405026] sock_alloc_send_pskb+0x7af/0x930 [ 2334.405784] ? sk_alloc+0x350/0x350 [ 2334.406393] ? perf_trace_lock+0xac/0x490 [ 2334.407082] ? SOFTIRQ_verbose+0x10/0x10 [ 2334.407768] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2334.408609] ? rawv6_exit+0x20/0x20 [ 2334.409224] ? SOFTIRQ_verbose+0x10/0x10 [ 2334.409916] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2334.410718] ? ip6_mtu+0x1e9/0x3d0 [ 2334.411320] ? ip6_setup_cork+0xfb7/0x1740 [ 2334.412032] ip6_append_data+0x1e6/0x330 [ 2334.412705] ? rawv6_exit+0x20/0x20 [ 2334.413318] ? rawv6_exit+0x20/0x20 [ 2334.413933] icmp6_send+0x1250/0x1f30 [ 2334.414585] ? icmpv6_push_pending_frames+0x470/0x470 [ 2334.415447] ? find_held_lock+0x2c/0x110 [ 2334.416338] ? ip6_dst_hoplimit+0x440/0x440 [ 2334.417079] ip6_pkt_drop+0x3d2/0x7f0 [ 2334.417712] ? ip6_pkt_discard+0x20/0x20 [ 2334.418389] ip6_local_out+0x29f/0x4c0 [ 2334.419042] ip6_send_skb+0x117/0x460 [ 2334.419672] udp_v6_send_skb+0x7b7/0x1620 [ 2334.420372] udpv6_sendmsg+0x216b/0x2b40 [ 2334.421052] ? ip_frag_init+0x350/0x350 [ 2334.421716] ? udp_v6_push_pending_frames+0x360/0x360 [ 2334.422569] ? SOFTIRQ_verbose+0x10/0x10 [ 2334.423249] ? __lockdep_reset_lock+0x180/0x180 [ 2334.424022] ? lock_acquire+0x197/0x470 [ 2334.424675] ? find_held_lock+0x2c/0x110 [ 2334.425358] ? lock_chain_count+0x20/0x20 [ 2334.426042] ? sock_has_perm+0x1ea/0x280 [ 2334.426734] ? __import_iovec+0x458/0x590 [ 2334.427418] ? udp_v6_push_pending_frames+0x360/0x360 [ 2334.428270] inet6_sendmsg+0x105/0x140 [ 2334.428919] ? inet6_compat_ioctl+0x320/0x320 [ 2334.429653] __sock_sendmsg+0xf2/0x190 [ 2334.430297] ____sys_sendmsg+0x334/0x870 [ 2334.430971] ? sock_write_iter+0x3d0/0x3d0 [ 2334.431668] ? do_recvmmsg+0x6d0/0x6d0 [ 2334.432314] ? __lock_acquire+0x1657/0x5b00 [ 2334.433045] ___sys_sendmsg+0xf3/0x170 [ 2334.433689] ? sendmsg_copy_msghdr+0x160/0x160 [ 2334.434446] ? __lockdep_reset_lock+0x180/0x180 [ 2334.435220] ? lock_acquire+0x197/0x470 [ 2334.435872] ? find_held_lock+0x2c/0x110 [ 2334.436547] ? __might_fault+0xd3/0x180 [ 2334.437219] ? lock_downgrade+0x6d0/0x6d0 [ 2334.437920] __sys_sendmmsg+0x195/0x470 [ 2334.438581] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2334.439295] ? lock_downgrade+0x6d0/0x6d0 [ 2334.439987] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2334.440782] ? wait_for_completion_io+0x270/0x270 [ 2334.441573] ? rcu_read_lock_any_held+0x75/0xa0 [ 2334.442330] ? vfs_write+0x354/0xb10 [ 2334.442938] ? fput_many+0x2f/0x1a0 [ 2334.443534] ? ksys_write+0x1a9/0x260 [ 2334.444157] ? __ia32_sys_read+0xb0/0xb0 [ 2334.444840] __x64_sys_sendmmsg+0x99/0x100 02:35:02 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) [ 2334.445531] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2334.446501] do_syscall_64+0x33/0x40 [ 2334.447109] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2334.447943] RIP: 0033:0x7f9688118b19 [ 2334.448550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2334.451571] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2334.452826] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2334.453993] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2334.455161] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2334.456330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2334.457504] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:35:02 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x7a000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:35:02 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x900000000}}}, 0xb8}}, 0x0) 02:35:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:35:02 executing program 5: r0 = semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d91e31b7892f71f3ac842db783e431d605372ea606c253e7c4ff3d013e13614b38210b49077cca3b953d867fd849b8fe2ff2f49a2849f897aa0aa580d9181e218f7c241c047d0a0ef6ba946c262de8447d2ec926ffc3aaadd9660fff9cea9b11f2ff3704df391d2bdb33465bfa785d15ef405e901c59cb0dfc75ae84a5ce85db5f2f363979cb753db1587", @ANYRESHEX, @ANYBLOB="23b568000000f0b5ac79358d6445bdfe35b3b7355c8e8d48ed885c132662cb5d89c1e6d07c00000000000000007f010000000000000017d6", @ANYRESHEX, @ANYBLOB="2c63616368653d6d6d61702c63616368653d6c6f6f73652c2c6e6f6465766d61702c646f6e745f61707072616973650c646f6e459bb5bf05e96ad480d70a000083c9da745f6d65617375724f2c7375626a5f747970653d2c646f6e745f6d6561737572652c6673636f6e746578743d73797374656d5f752c66736d616769633d3078303030303030303030303030303038632c756984b4da5ba28e58f74a9a0a03404744281b303ef13cafa00beaf3afdabd8b00e2f1ccdf68a742e7cbfbd750aef5e57bf6acd2f0b9ea914c73d1065501177f421e796e247ed67f8c367631ea6002ce3de33298c3bd58f0aa00000000", @ANYRESDEC=r2, @ANYBLOB="2c617564752c000000000000000040aea99cf4c876097846ba02e28a5faae7d27bf84da0dea258a545426113fef0c5"]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r2, 0x0, 0x39, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) semctl$IPC_RMID(0x0, 0x0, 0x0) r3 = semget(0x2, 0x0, 0x20b) r4 = getuid() semctl$IPC_RMID(r3, 0x0, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000002c0)={{0x1, r4, r1, r5, 0x0, 0x39, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000080)=[{0x0, 0x4, 0x1000}], 0x1, &(0x7f0000000100)={r6, r7+10000000}) semctl$SEM_INFO(0x0, 0x935a4533181df21f, 0x13, &(0x7f0000001e00)=""/4096) semctl$SEM_STAT_ANY(r3, 0x1, 0x14, &(0x7f0000002e00)=""/4096) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456}, 0x3f) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000000)=""/35) unshare(0x48020200) 02:35:02 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 23) [ 2334.541091] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2334.552089] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:35:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x2, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2334.645621] FAULT_INJECTION: forcing a failure. [ 2334.645621] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.647348] CPU: 0 PID: 13401 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2334.648343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2334.649516] Call Trace: [ 2334.649886] dump_stack+0x107/0x167 [ 2334.650403] should_fail.cold+0x5/0xa [ 2334.650948] ? create_new_namespaces+0x30/0xb20 [ 2334.651611] should_failslab+0x5/0x20 [ 2334.652147] kmem_cache_alloc+0x5b/0x310 [ 2334.652719] ? cap_capable+0x1cd/0x230 [ 2334.653276] create_new_namespaces+0x30/0xb20 [ 2334.653917] copy_namespaces+0x3fb/0x4f0 [ 2334.654492] copy_process+0x393a/0x78b0 [ 2334.655040] ? SOFTIRQ_verbose+0x10/0x10 [ 2334.655602] ? __lockdep_reset_lock+0x180/0x180 [ 2334.656248] ? mark_lock+0xf5/0x2df0 [ 2334.656794] ? __cleanup_sighand+0xb0/0xb0 [ 2334.657402] ? _copy_from_user+0xfb/0x1b0 [ 2334.657984] kernel_clone+0xe7/0x980 [ 2334.658497] ? __lockdep_reset_lock+0x180/0x180 [ 2334.659142] ? create_io_thread+0xf0/0xf0 [ 2334.659741] ? ksys_write+0x21a/0x260 [ 2334.660273] ? lock_downgrade+0x6d0/0x6d0 [ 2334.660871] __do_sys_clone3+0x1e5/0x320 [ 2334.661431] ? __do_sys_clone+0x110/0x110 [ 2334.662024] ? rcu_read_lock_any_held+0x75/0xa0 [ 2334.662665] ? vfs_write+0x354/0xb10 [ 2334.663198] ? fput_many+0x2f/0x1a0 [ 2334.663698] ? ksys_write+0x1a9/0x260 [ 2334.664228] ? __ia32_sys_read+0xb0/0xb0 [ 2334.664804] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2334.665540] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2334.666269] ? trace_hardirqs_on+0x5b/0x180 [ 2334.666864] do_syscall_64+0x33/0x40 [ 2334.667382] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2334.668097] RIP: 0033:0x7f5655a9cb19 [ 2334.668613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2334.671130] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2334.672176] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2334.673168] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2334.674148] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2334.675139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2334.676109] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:35:18 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 93) [ 2350.872387] FAULT_INJECTION: forcing a failure. [ 2350.872387] name failslab, interval 1, probability 0, space 0, times 0 [ 2350.875009] CPU: 1 PID: 13452 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2350.876461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2350.878219] Call Trace: [ 2350.878880] dump_stack+0x107/0x167 [ 2350.879692] should_fail.cold+0x5/0xa [ 2350.880610] should_failslab+0x5/0x20 [ 2350.881466] __kmalloc_node_track_caller+0x74/0x3b0 [ 2350.882531] ? alloc_skb_with_frags+0x92/0x570 [ 2350.883487] ? mark_lock+0xf5/0x2df0 [ 2350.884275] __alloc_skb+0xb1/0x5b0 [ 2350.885056] alloc_skb_with_frags+0x92/0x570 [ 2350.886121] ? mark_lock+0xf5/0x2df0 [ 2350.886957] ? mark_lock+0xf5/0x2df0 [ 2350.887848] sock_alloc_send_pskb+0x7af/0x930 [ 2350.888992] ? sk_alloc+0x350/0x350 [ 2350.889787] ? perf_trace_lock+0xac/0x490 02:35:18 executing program 5: fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x7, 0x0, 0x0, 0x5e, 0x81403, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x2187, 0x3, 0xfffffffe, 0x0, 0x4000003, 0x400, 0xfffe, 0x0, 0xf76e, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r2}, 0x14}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200)=0x6, 0x3) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x129000, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_READ=@use_registered_buffer={0x16, 0xcd6c1de43c19def2, 0x2000, @fd_index=0x4, 0x3, 0x0, 0x0, 0x8, 0x1}, 0x80000001) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x48880, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0xa000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x7b, 0x6, 0x0, {0x0, 0x0, r6}}, 0xfff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x390, 0x9, 0xaa9, 0x6, 0x4}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000001c0)) pwrite64(r3, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) 02:35:18 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8000000000000}}}, 0xb8}}, 0x0) 02:35:18 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x800}, 0x10800, 0x0, 0x2b85, 0x7, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fremovexattr(r0, &(0x7f0000000880)=@random={'user.', '-\x00\xbb\x83\x8a\xb4\x18\xb7\xa4Wu\x87\xfe\x970\xab\xd6D\x1eM\xe4,\xa11\xb3\xf6\r:(\x0e\xa9\x88\x8a\x1de\xef\f\xee\xe9\xa2\xc3\x9f\xfa5j\f\x1d\x19j\xad\xd4 \x18\x96\xf04RS\xeeN:r\xc5i\xf2\xad\f\xa94>\xa4\xa9\x18D\xc6\xb7u\x1dF\xe8k\xaf\x8c~\x0e=\xc7\xd3z\x18\xcd\xee0\v\xb5\xea\xa7cH}6-\x11\x17\xe4N\xf5\xf5\x9b\x9c\xc2\xc3\'B\xf79\xaf\xb9x\x06\x9f\xc2\xbe\x9d\xe1\xd7&\x9a\xe7\x1fEzE\xf8\x95\xc2\xe8\x03N\x0eK\xf1i\xc6t\x02\xe3\xc1\'\xe0\x83k'}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x4, &(0x7f00000002c0)={0x0, 0x1c, 0x1, @thr={&(0x7f0000000600)="8e58339ec35acdf54b5b3a0a08f340f6b2e1442c8a4846cad7eb1e124188280e2d8bd9ba43249b54d00dee5e3e2bb177dca7d12a7ef316209ca6fb8a9578677408e29f7571b93476350d923b33129f3eecfb3632603941cf9f050befa13d52a204ff3704522fd29523658dd6b2f5f83eb80fa098bba36d22b7557ca00a640b07ad4361cf32c17cfe53f4e3309cde55a897034af248285ad52e07c8070f80e7a30ab0ab51b53a44d1bb469453", &(0x7f00000006c0)="5fadec68a74f8c6231d4e781b80c1079dee51ab0dbe77fd6c1f615290cbd00188118ef65910a09c2593e7ecb39479433d32ccc9cc46b3648f4ca6760941cc7e9bbee7100f64fc210dded646a4409208a9a8df02201b79e75a523c0bedac1b14220097448f3afa39747e5d9c0617abaac3b31f40ed9845363c309364bb7b3c98fd4eae195d4c05de7caf8d6607695b88d5e74d509c5a4bb8ba902e0a1faf7e1821ee7e80b7083796ceff9"}}, &(0x7f00000005c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) capset(&(0x7f0000000500)={0x0, r1}, &(0x7f0000000340)={0x88dd, 0xffff, 0x4, 0x80000000, 0x7, 0x2}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x1f, 0x1}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{}, {0x77359400}}, &(0x7f00000004c0)) socket$netlink(0x10, 0x3, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/65, 0x41) capset(&(0x7f0000000140)={0xf1504, r1}, &(0x7f0000000380)={0x1, 0x9, 0xf4f0, 0x3ff, 0x3, 0xfffffffa}) clone3(&(0x7f00000001c0)={0x40982b00, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:35:19 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) 02:35:19 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x80ffffff, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:35:19 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 24) 02:35:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x3, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2350.891015] ? SOFTIRQ_verbose+0x10/0x10 [ 2350.892170] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2350.893346] ? rawv6_exit+0x20/0x20 [ 2350.894165] ? SOFTIRQ_verbose+0x10/0x10 [ 2350.895038] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2350.896046] ? ip6_mtu+0x1e9/0x3d0 [ 2350.896791] ? ip6_setup_cork+0xfb7/0x1740 [ 2350.897704] ip6_append_data+0x1e6/0x330 [ 2350.898552] ? rawv6_exit+0x20/0x20 [ 2350.899322] ? rawv6_exit+0x20/0x20 [ 2350.900092] icmp6_send+0x1250/0x1f30 [ 2350.900956] ? icmpv6_push_pending_frames+0x470/0x470 [ 2350.902052] ? find_held_lock+0x2c/0x110 [ 2350.902976] ? ip6_dst_hoplimit+0x440/0x440 [ 2350.903613] FAULT_INJECTION: forcing a failure. [ 2350.903613] name failslab, interval 1, probability 0, space 0, times 0 [ 2350.903902] ip6_pkt_drop+0x3d2/0x7f0 [ 2350.903926] ? ip6_pkt_discard+0x20/0x20 [ 2350.908114] ip6_local_out+0x29f/0x4c0 [ 2350.908968] ip6_send_skb+0x117/0x460 [ 2350.909785] udp_v6_send_skb+0x7b7/0x1620 [ 2350.910780] udpv6_sendmsg+0x216b/0x2b40 [ 2350.911660] ? ip_frag_init+0x350/0x350 [ 2350.912516] ? udp_v6_push_pending_frames+0x360/0x360 [ 2350.913616] ? SOFTIRQ_verbose+0x10/0x10 [ 2350.914491] ? __lockdep_reset_lock+0x180/0x180 [ 2350.915483] ? lock_acquire+0x197/0x470 [ 2350.916319] ? find_held_lock+0x2c/0x110 [ 2350.917249] ? sock_has_perm+0x1ea/0x280 [ 2350.918141] ? __import_iovec+0x458/0x590 [ 2350.919019] ? udp_v6_push_pending_frames+0x360/0x360 [ 2350.920108] inet6_sendmsg+0x105/0x140 [ 2350.920939] ? inet6_compat_ioctl+0x320/0x320 [ 2350.921896] __sock_sendmsg+0xf2/0x190 [ 2350.922731] ____sys_sendmsg+0x334/0x870 [ 2350.923600] ? sock_write_iter+0x3d0/0x3d0 [ 2350.924497] ? do_recvmmsg+0x6d0/0x6d0 [ 2350.925341] ? __lock_acquire+0x1657/0x5b00 [ 2350.926279] ___sys_sendmsg+0xf3/0x170 [ 2350.927116] ? sendmsg_copy_msghdr+0x160/0x160 [ 2350.928093] ? __lockdep_reset_lock+0x180/0x180 [ 2350.929098] ? __fget_files+0x2cf/0x520 [ 2350.929951] ? lock_acquire+0x197/0x470 [ 2350.930797] ? find_held_lock+0x2c/0x110 [ 2350.931662] ? __might_fault+0xd3/0x180 [ 2350.932506] ? lock_downgrade+0x6d0/0x6d0 [ 2350.933426] __sys_sendmmsg+0x195/0x470 [ 2350.934278] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2350.935197] ? lock_downgrade+0x6d0/0x6d0 [ 2350.936102] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2350.937141] ? wait_for_completion_io+0x270/0x270 [ 2350.938183] ? rcu_read_lock_any_held+0x75/0xa0 [ 2350.939169] ? vfs_write+0x354/0xb10 [ 2350.939970] ? fput_many+0x2f/0x1a0 [ 2350.940747] ? ksys_write+0x1a9/0x260 [ 2350.941569] ? __ia32_sys_read+0xb0/0xb0 [ 2350.942450] __x64_sys_sendmmsg+0x99/0x100 [ 2350.943349] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2350.944450] do_syscall_64+0x33/0x40 [ 2350.945259] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2350.946326] RIP: 0033:0x7f9688118b19 [ 2350.947114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2350.951021] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2350.952649] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2350.954186] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2350.955692] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2350.957225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2350.958740] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 2350.960294] CPU: 0 PID: 13459 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2350.961884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2350.963786] Call Trace: [ 2350.964397] dump_stack+0x107/0x167 [ 2350.965233] should_fail.cold+0x5/0xa [ 2350.966101] ? create_object.isra.0+0x3a/0xa20 [ 2350.967136] should_failslab+0x5/0x20 [ 2350.968100] kmem_cache_alloc+0x5b/0x310 [ 2350.969065] create_object.isra.0+0x3a/0xa20 [ 2350.970059] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2350.971214] kmem_cache_alloc+0x159/0x310 [ 2350.972162] copy_process+0x1c65/0x78b0 [ 2350.973074] ? SOFTIRQ_verbose+0x10/0x10 [ 2350.974000] ? __lockdep_reset_lock+0x180/0x180 [ 2350.974338] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2350.975076] ? mark_lock+0xf5/0x2df0 [ 2350.975127] ? __cleanup_sighand+0xb0/0xb0 [ 2350.978730] ? _copy_from_user+0xfb/0x1b0 [ 2350.979683] kernel_clone+0xe7/0x980 [ 2350.980529] ? __lockdep_reset_lock+0x180/0x180 [ 2350.981604] ? create_io_thread+0xf0/0xf0 [ 2350.982598] ? ksys_write+0x21a/0x260 [ 2350.983462] ? lock_downgrade+0x6d0/0x6d0 [ 2350.984398] __do_sys_clone3+0x1e5/0x320 [ 2350.985319] ? __do_sys_clone+0x110/0x110 [ 2350.986283] ? rcu_read_lock_any_held+0x75/0xa0 [ 2350.987327] ? vfs_write+0x354/0xb10 [ 2350.988165] ? fput_many+0x2f/0x1a0 [ 2350.988990] ? ksys_write+0x1a9/0x260 [ 2350.989848] ? __ia32_sys_read+0xb0/0xb0 [ 2350.990765] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2350.991948] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2350.993119] ? trace_hardirqs_on+0x5b/0x180 [ 2350.994096] do_syscall_64+0x33/0x40 [ 2350.994938] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2350.996095] RIP: 0033:0x7f5655a9cb19 [ 2350.996943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2351.001094] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2351.002809] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2351.004412] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2351.006026] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2351.007632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2351.009241] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:35:19 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xf0ffffffffffff}}}, 0xb8}}, 0x0) 02:35:19 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) 02:35:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x8, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:35:19 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x9effffff, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2351.156354] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:35:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xa, 0x300) sync_file_range(0xffffffffffffffff, 0x0, 0x5, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000002ec0), 0x2001, 0x0) r0 = syz_io_uring_setup(0x68d2, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x4}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index}, 0x8001) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x1, 0x4, 0x0, 0x6, 0x1, 0x1}, 0xc09) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r5, 0x0) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000000), 0x400000d, 0x0) 02:35:19 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) utimes(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x109) fadvise64(0xffffffffffffffff, 0x3f, 0x8, 0x3) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x5) 02:35:19 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) 02:35:19 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x100000000000000}}}, 0xb8}}, 0x0) [ 2351.329205] kauditd_printk_skb: 5 callbacks suppressed [ 2351.329225] audit: type=1326 audit(1755916519.454:271): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13475 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9857502b19 code=0x7ffc0000 [ 2351.342352] audit: type=1326 audit(1755916519.469:272): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13475 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9857502b19 code=0x7ffc0000 [ 2351.362647] audit: type=1326 audit(1755916519.486:273): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13475 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9857502b19 code=0x7ffc0000 [ 2351.387276] audit: type=1326 audit(1755916519.490:274): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13475 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f9857501c27 code=0x7ffc0000 [ 2351.402016] audit: type=1326 audit(1755916519.490:275): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13475 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9857502b19 code=0x7ffc0000 [ 2351.419144] audit: type=1326 audit(1755916519.495:276): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13475 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9857502b19 code=0x7ffc0000 [ 2351.445829] audit: type=1326 audit(1755916519.495:277): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13475 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f9857502b19 code=0x7ffc0000 [ 2351.462878] audit: type=1326 audit(1755916519.501:278): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13475 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9857502b19 code=0x7ffc0000 02:35:38 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xe7010000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:35:38 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 94) 02:35:38 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) dup2(r1, r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) mount$9p_unix(&(0x7f0000001180)='./file0\x00', &(0x7f0000001240)='./file0\x00', &(0x7f0000001280), 0x1144a0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000480)=""/249, 0xf9}, {&(0x7f0000000580)=""/185, 0xb9}, {&(0x7f0000000640)=""/170, 0xaa}, {&(0x7f0000000840)=""/191, 0xbf}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/21, 0x15}, {&(0x7f0000000900)=""/246, 0xf6}], 0x7, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000005) syz_io_uring_setup(0x1433, &(0x7f0000000080)={0x0, 0x4772, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000011c0)) mount$9p_unix(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='./file0\x00', &(0x7f0000001340), 0x20810, &(0x7f0000001380)=ANY=[@ANYBLOB="7472616e733d756e69782c63616368653d6c6f6f73652c76657273696f6e3d3970323030302e751e76657273696f6e3d3970323030302e752c63616368653d6c6f6f73652c64666c747569643d", @ANYRESHEX=r4, @ANYBLOB="2c646f6e745f686173682c6675636f6e746578743d757365725f752c20f13bd32a655cd419ffbe41fc85247375626a5f", @ANYRESDEC, @ANYBLOB="2c726f6f74636f6ef46578743d73797361646d5f752c00"]) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='tran\x00\x00fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',msize=0x0000000000000008,loose,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',uname=/dev/snapshot\x00,access=user,obj_role=.,appraise,\x00']) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) 02:35:38 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x200000000000000}}}, 0xb8}}, 0x0) [ 2370.640519] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:35:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x9, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:35:38 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) 02:35:38 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = getpid() pidfd_open(r5, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x9, 0x80, 0x6, 0x3f, 0x0, 0x4, 0x22404, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x3fff, 0xc5a}, 0x2, 0x76, 0x3f, 0x3, 0x7ff, 0x1, 0x4, 0x0, 0x7}, r5, 0x0, r0, 0x2) r6 = fcntl$getown(r4, 0x9) r7 = perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x2, 0x40, 0x1, 0x7, 0x0, 0x10001, 0x10000, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x10000, 0x8001, 0x5, 0x7, 0xe6, 0x1000, 0x8, 0x0, 0xd6, 0x0, 0x400000000000000}, r6, 0xa, 0xffffffffffffffff, 0x3) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000b, 0x1010, r1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85", 0x3}], 0x1}}, 0x0) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1, 0xbc, 0x1f, 0x7f, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x2, 0x1}, 0x4c22, 0x1ff, 0xbc6, 0x1, 0x6, 0x6, 0x4, 0x0, 0x3d, 0x0, 0x6149c979}, 0x0, 0xe, r7, 0xb) recvmsg(0xffffffffffffffff, &(0x7f0000004780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004700)=""/96, 0x60}, 0x0) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x2, 0x0, 0x0) 02:35:38 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 25) [ 2370.672546] FAULT_INJECTION: forcing a failure. [ 2370.672546] name failslab, interval 1, probability 0, space 0, times 0 [ 2370.675276] CPU: 0 PID: 13502 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2370.676848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2370.678745] Call Trace: [ 2370.679346] dump_stack+0x107/0x167 [ 2370.680174] should_fail.cold+0x5/0xa [ 2370.681037] ? copy_net_ns+0xd6/0x5d0 [ 2370.681914] should_failslab+0x5/0x20 [ 2370.682774] __kmalloc+0x72/0x390 [ 2370.683560] ? pidns_get+0x270/0x270 [ 2370.684409] copy_net_ns+0xd6/0x5d0 [ 2370.685243] ? copy_cgroup_ns+0x9d/0x680 [ 2370.686170] create_new_namespaces+0x3f6/0xb20 [ 2370.687212] copy_namespaces+0x3fb/0x4f0 [ 2370.688139] copy_process+0x393a/0x78b0 [ 2370.689035] ? SOFTIRQ_verbose+0x10/0x10 [ 2370.689978] ? __lockdep_reset_lock+0x180/0x180 [ 2370.691031] ? mark_lock+0xf5/0x2df0 [ 2370.691901] ? __cleanup_sighand+0xb0/0xb0 [ 2370.692883] ? _copy_from_user+0xfb/0x1b0 [ 2370.693839] kernel_clone+0xe7/0x980 [ 2370.694678] ? __lockdep_reset_lock+0x180/0x180 [ 2370.695731] ? create_io_thread+0xf0/0xf0 [ 2370.696683] ? ksys_write+0x21a/0x260 [ 2370.697556] ? lock_downgrade+0x6d0/0x6d0 [ 2370.698501] __do_sys_clone3+0x1e5/0x320 [ 2370.699419] ? __do_sys_clone+0x110/0x110 [ 2370.700388] ? rcu_read_lock_any_held+0x75/0xa0 [ 2370.701443] ? vfs_write+0x354/0xb10 [ 2370.702294] ? fput_many+0x2f/0x1a0 [ 2370.703123] ? ksys_write+0x1a9/0x260 [ 2370.703990] ? __ia32_sys_read+0xb0/0xb0 [ 2370.704919] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2370.706115] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2370.707289] ? trace_hardirqs_on+0x5b/0x180 [ 2370.708273] do_syscall_64+0x33/0x40 [ 2370.709151] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2370.710320] RIP: 0033:0x7f5655a9cb19 [ 2370.711169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2370.715342] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2370.717072] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2370.718697] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2370.720319] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2370.721949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2370.723569] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2370.749215] FAULT_INJECTION: forcing a failure. [ 2370.749215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2370.751744] CPU: 1 PID: 13492 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2370.753228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2370.754985] Call Trace: [ 2370.755551] dump_stack+0x107/0x167 [ 2370.756330] should_fail.cold+0x5/0xa [ 2370.757160] _copy_from_user+0x2e/0x1b0 [ 2370.758020] __copy_msghdr_from_user+0x91/0x4b0 [ 2370.759022] ? __ia32_sys_shutdown+0x80/0x80 [ 2370.759970] ? udp_v6_push_pending_frames+0x360/0x360 [ 2370.761075] ? inet6_sendmsg+0xbd/0x140 [ 2370.761941] ? inet6_compat_ioctl+0x320/0x320 [ 2370.762894] ? __sock_sendmsg+0x55/0x190 [ 2370.763767] sendmsg_copy_msghdr+0xa1/0x160 [ 2370.764682] ? do_recvmmsg+0x6d0/0x6d0 [ 2370.765523] ? __lock_acquire+0x1657/0x5b00 [ 2370.766461] ___sys_sendmsg+0xc6/0x170 [ 2370.767287] ? sendmsg_copy_msghdr+0x160/0x160 [ 2370.768259] ? __lockdep_reset_lock+0x180/0x180 [ 2370.769279] ? lock_acquire+0x197/0x470 [ 2370.770119] ? find_held_lock+0x2c/0x110 [ 2370.770999] ? __might_fault+0xd3/0x180 [ 2370.771845] ? lock_downgrade+0x6d0/0x6d0 [ 2370.772751] __sys_sendmmsg+0x195/0x470 [ 2370.773632] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2370.774546] ? lock_downgrade+0x6d0/0x6d0 [ 2370.775444] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2370.776470] ? wait_for_completion_io+0x270/0x270 [ 2370.777512] ? rcu_read_lock_any_held+0x75/0xa0 [ 2370.778494] ? vfs_write+0x354/0xb10 [ 2370.779292] ? fput_many+0x2f/0x1a0 [ 2370.780069] ? ksys_write+0x1a9/0x260 [ 2370.780878] ? __ia32_sys_read+0xb0/0xb0 [ 2370.781756] __x64_sys_sendmmsg+0x99/0x100 [ 2370.782657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2370.783748] do_syscall_64+0x33/0x40 [ 2370.784538] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2370.785636] RIP: 0033:0x7f9688118b19 [ 2370.786424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2370.790324] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2370.791936] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2370.793462] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2370.794969] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2370.796482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2370.798007] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:35:38 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xf0ffffff, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:35:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xf, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:35:38 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 26) 02:35:38 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x300000000000000}}}, 0xb8}}, 0x0) 02:35:38 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) [ 2370.906527] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:35:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x2f, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2370.923406] FAULT_INJECTION: forcing a failure. [ 2370.923406] name failslab, interval 1, probability 0, space 0, times 0 [ 2370.926066] CPU: 0 PID: 13516 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2370.927638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2370.929520] Call Trace: [ 2370.930121] dump_stack+0x107/0x167 [ 2370.930951] should_fail.cold+0x5/0xa [ 2370.931821] ? create_object.isra.0+0x3a/0xa20 [ 2370.932860] should_failslab+0x5/0x20 [ 2370.933736] kmem_cache_alloc+0x5b/0x310 [ 2370.934670] create_object.isra.0+0x3a/0xa20 [ 2370.935664] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2370.936818] __kmalloc+0x16e/0x390 [ 2370.937638] copy_net_ns+0xd6/0x5d0 [ 2370.938458] ? copy_cgroup_ns+0x9d/0x680 [ 2370.939381] create_new_namespaces+0x3f6/0xb20 [ 2370.940422] copy_namespaces+0x3fb/0x4f0 [ 2370.941357] copy_process+0x393a/0x78b0 [ 2370.942254] ? SOFTIRQ_verbose+0x10/0x10 [ 2370.943177] ? __lockdep_reset_lock+0x180/0x180 [ 2370.944224] ? mark_lock+0xf5/0x2df0 [ 2370.945091] ? __cleanup_sighand+0xb0/0xb0 [ 2370.946079] ? _copy_from_user+0xfb/0x1b0 [ 2370.947025] kernel_clone+0xe7/0x980 [ 2370.947900] ? __lockdep_reset_lock+0x180/0x180 [ 2370.948960] ? create_io_thread+0xf0/0xf0 [ 2370.949925] ? ksys_write+0x21a/0x260 [ 2370.950789] ? lock_downgrade+0x6d0/0x6d0 [ 2370.951735] __do_sys_clone3+0x1e5/0x320 [ 2370.952655] ? __do_sys_clone+0x110/0x110 [ 2370.953637] ? rcu_read_lock_any_held+0x75/0xa0 [ 2370.954686] ? vfs_write+0x354/0xb10 [ 2370.955529] ? fput_many+0x2f/0x1a0 [ 2370.956355] ? ksys_write+0x1a9/0x260 [ 2370.957227] ? __ia32_sys_read+0xb0/0xb0 [ 2370.958152] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2370.959342] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2370.960507] ? trace_hardirqs_on+0x5b/0x180 [ 2370.961493] do_syscall_64+0x33/0x40 [ 2370.962339] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2370.963510] RIP: 0033:0x7f5655a9cb19 [ 2370.964355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2370.968545] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2370.970278] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2370.971894] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 02:35:39 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) [ 2370.973520] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2370.975374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2370.976996] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2386.218021] FAULT_INJECTION: forcing a failure. [ 2386.218021] name failslab, interval 1, probability 0, space 0, times 0 [ 2386.219853] CPU: 0 PID: 13629 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2386.220875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2386.222086] Call Trace: [ 2386.222472] dump_stack+0x107/0x167 [ 2386.223004] should_fail.cold+0x5/0xa [ 2386.223558] ? copy_net_ns+0x11c/0x5d0 [ 2386.224122] should_failslab+0x5/0x20 [ 2386.224684] kmem_cache_alloc+0x5b/0x310 [ 2386.225284] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2386.226031] copy_net_ns+0x11c/0x5d0 [ 2386.226566] ? copy_cgroup_ns+0x9d/0x680 [ 2386.227156] create_new_namespaces+0x3f6/0xb20 [ 2386.227837] copy_namespaces+0x3fb/0x4f0 [ 2386.228431] copy_process+0x393a/0x78b0 [ 2386.229010] ? SOFTIRQ_verbose+0x10/0x10 [ 2386.229607] ? __lockdep_reset_lock+0x180/0x180 [ 2386.230276] ? mark_lock+0xf5/0x2df0 [ 2386.230833] ? __cleanup_sighand+0xb0/0xb0 [ 2386.231460] ? _copy_from_user+0xfb/0x1b0 [ 2386.232067] kernel_clone+0xe7/0x980 [ 2386.232605] ? __lockdep_reset_lock+0x180/0x180 [ 2386.233283] ? create_io_thread+0xf0/0xf0 [ 2386.233897] ? ksys_write+0x21a/0x260 [ 2386.234442] ? lock_downgrade+0x6d0/0x6d0 [ 2386.235043] __do_sys_clone3+0x1e5/0x320 [ 2386.235625] ? __do_sys_clone+0x110/0x110 [ 2386.236248] ? rcu_read_lock_any_held+0x75/0xa0 [ 2386.236911] ? vfs_write+0x354/0xb10 [ 2386.237467] ? fput_many+0x2f/0x1a0 [ 2386.237999] ? ksys_write+0x1a9/0x260 [ 2386.238551] ? __ia32_sys_read+0xb0/0xb0 [ 2386.239137] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2386.239889] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2386.240628] ? trace_hardirqs_on+0x5b/0x180 [ 2386.241271] do_syscall_64+0x33/0x40 [ 2386.241815] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2386.242552] RIP: 0033:0x7f5655a9cb19 [ 2386.243089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2386.245756] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2386.246852] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2386.247880] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2386.248917] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2386.249203] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2386.249943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2386.249952] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:35:54 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x900000000000000}}}, 0xb8}}, 0x0) 02:35:54 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = inotify_init1(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r3, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x1, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, &(0x7f0000000280), 0x0, 0x8080, 0x1}, 0x0) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x44000, 0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYBLOB="a94fbe8c1aa66fcf78c263eff3b498ef17250fc11c069b69f2de635484e3f51732bdb610a581d287b1ec8a816f1f23826f33d9b42b8743a451cad1b51218be7d84f61e36806cd6fe30979a11b0a2b830ec570e4950b6e0f755d8eb1d4f5e51bf9201284bedb44c87fc3cb1ab7509374dda946b8022c6", @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="03eaf1"], 0x54, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r6}, 0x4, 0x0, 0x1}) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) fremovexattr(r7, &(0x7f0000000180)=@known='com.apple.system.Security\x00') 02:35:54 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 27) 02:35:54 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xffffe000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:35:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x7e, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:35:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xe0) close(r0) clone3(&(0x7f00000001c0)={0x90040180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execve(&(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000440)=[&(0x7f00000002c0)='\x13}N0', &(0x7f00000000c0)='\x12R\x00\x00\x04\x00\x00\x9e', &(0x7f0000000100)='/dev/vcs#\x00', &(0x7f0000000400)='\b\x00\x00\x00\xeb?\xe4\x9b\x15\xd1\xd9\x00\x00', &(0x7f0000000140)='/dev/vcs#\x00', &(0x7f0000000240)='-+\x00', &(0x7f0000000280)='l', &(0x7f0000000540)='/TC\xc4KRd\x00\xc0/vws#\x00-\xe6\'\xf8d\x11\x9d\xd4\xc2[Y\x06\x16\x9e$\x88\x10\x1f\x7fyT\xacV\xca%}\x1d\xb0\xa2\x9b(\xf7\x8es\xbd\x9f\x9fk\xb4\xdf81\x9a\x98\x9e\x9b\x89\tJW:6\x88\xd6\x99\xcc\xaa\xa2\xef\xa7\x97\xf3\x7f\xe6\x87D\xb3\x8d\xa7\xfc\x83.R\xd7\xb2\x03UM\xd4DJ\x06\xb7\xec\x8c\xf7\xc3\xbb\x8b\x7f%l\x00]\xaa<\x98\x8d\x16`\xd5\xec&\xe9\x1d\x8f\xa7Y\xad!\xdc5K\x8aA\xf7\xec\x9d\xb1\xf9\xe8\x95g/\xcfc\x01\xbb- \xd1\xf6\xc1\xc7\xac\xde\xe5R--by\xdc\xb8\xe2g\xbd@\x05p\xae\xf2N\xe81\x11\x18\xf2\xa2\x9c1S\x7f\x87\x9a\x9cG\xc0\xf5\r1\v\xf5\x12\xfcu_\xd1\b\xce\x90%$\xd5\xe0r\x96E\xec\xd4\x98\xb3\x878\xfbunu\x967\r', &(0x7f0000000300)='[$.%\x00', &(0x7f0000000180)='/dev/vcs#\x00']) r1 = syz_open_dev$vcsn(&(0x7f0000000500), 0x0, 0x60a00) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x2010, r1, 0x0) 02:35:54 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 95) 02:35:54 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) [ 2386.275327] FAULT_INJECTION: forcing a failure. [ 2386.275327] name failslab, interval 1, probability 0, space 0, times 0 [ 2386.276962] CPU: 0 PID: 13642 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2386.277949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2386.279122] Call Trace: [ 2386.279509] dump_stack+0x107/0x167 [ 2386.280036] should_fail.cold+0x5/0xa [ 2386.280591] ? create_object.isra.0+0x3a/0xa20 [ 2386.281239] should_failslab+0x5/0x20 [ 2386.281811] kmem_cache_alloc+0x5b/0x310 [ 2386.282388] create_object.isra.0+0x3a/0xa20 [ 2386.283004] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2386.283719] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2386.284434] ? alloc_skb_with_frags+0x92/0x570 [ 2386.285083] __alloc_skb+0xb1/0x5b0 [ 2386.285618] alloc_skb_with_frags+0x92/0x570 [ 2386.286238] ? mark_lock+0xf5/0x2df0 [ 2386.286760] ? mark_lock+0xf5/0x2df0 [ 2386.287292] sock_alloc_send_pskb+0x7af/0x930 [ 2386.287932] ? sk_alloc+0x350/0x350 [ 2386.288446] ? perf_trace_lock+0xac/0x490 [ 2386.289029] ? SOFTIRQ_verbose+0x10/0x10 [ 2386.289621] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2386.290372] ? rawv6_exit+0x20/0x20 [ 2386.290884] ? SOFTIRQ_verbose+0x10/0x10 [ 2386.291463] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2386.292141] ? ip6_mtu+0x1e9/0x3d0 [ 2386.292644] ? ip6_setup_cork+0xfb7/0x1740 [ 2386.293248] ip6_append_data+0x1e6/0x330 [ 2386.293853] ? rawv6_exit+0x20/0x20 [ 2386.294401] ? rawv6_exit+0x20/0x20 [ 2386.294940] icmp6_send+0x1250/0x1f30 [ 2386.295511] ? icmpv6_push_pending_frames+0x470/0x470 [ 2386.296283] ? find_held_lock+0x2c/0x110 [ 2386.296888] ? ip6_dst_hoplimit+0x440/0x440 [ 2386.297536] ip6_pkt_drop+0x3d2/0x7f0 [ 2386.298103] ? ip6_pkt_discard+0x20/0x20 [ 2386.298702] ip6_local_out+0x29f/0x4c0 [ 2386.299280] ip6_send_skb+0x117/0x460 [ 2386.299840] udp_v6_send_skb+0x7b7/0x1620 [ 2386.300457] udpv6_sendmsg+0x216b/0x2b40 [ 2386.301070] ? ip_frag_init+0x350/0x350 [ 2386.301678] ? udp_v6_push_pending_frames+0x360/0x360 [ 2386.302431] ? SOFTIRQ_verbose+0x10/0x10 [ 2386.303009] ? __lockdep_reset_lock+0x180/0x180 [ 2386.303728] ? lock_acquire+0x197/0x470 [ 2386.304313] ? find_held_lock+0x2c/0x110 [ 2386.304919] ? lock_chain_count+0x20/0x20 [ 2386.305545] ? sock_has_perm+0x1ea/0x280 [ 2386.306169] ? __import_iovec+0x458/0x590 [ 2386.306779] ? udp_v6_push_pending_frames+0x360/0x360 [ 2386.307545] inet6_sendmsg+0x105/0x140 [ 2386.308122] ? inet6_compat_ioctl+0x320/0x320 [ 2386.308788] __sock_sendmsg+0xf2/0x190 [ 2386.309370] ____sys_sendmsg+0x334/0x870 [ 2386.309967] ? sock_write_iter+0x3d0/0x3d0 [ 2386.310578] ? do_recvmmsg+0x6d0/0x6d0 [ 2386.311142] ? __lock_acquire+0x1657/0x5b00 [ 2386.311795] ___sys_sendmsg+0xf3/0x170 [ 2386.312369] ? sendmsg_copy_msghdr+0x160/0x160 [ 2386.313036] ? __lockdep_reset_lock+0x180/0x180 [ 2386.313728] ? lock_acquire+0x197/0x470 [ 2386.314310] ? find_held_lock+0x2c/0x110 [ 2386.314904] ? __might_fault+0xd3/0x180 [ 2386.315470] ? lock_downgrade+0x6d0/0x6d0 [ 2386.316100] __sys_sendmmsg+0x195/0x470 [ 2386.316691] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2386.317320] ? lock_downgrade+0x6d0/0x6d0 [ 2386.317912] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2386.318581] ? wait_for_completion_io+0x270/0x270 [ 2386.319254] ? rcu_read_lock_any_held+0x75/0xa0 [ 2386.319900] ? vfs_write+0x354/0xb10 [ 2386.320420] ? fput_many+0x2f/0x1a0 [ 2386.320929] ? ksys_write+0x1a9/0x260 [ 2386.321496] ? __ia32_sys_read+0xb0/0xb0 [ 2386.322071] __x64_sys_sendmmsg+0x99/0x100 [ 2386.322662] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2386.323384] do_syscall_64+0x33/0x40 [ 2386.323917] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2386.324638] RIP: 0033:0x7f9688118b19 [ 2386.325160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2386.327728] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2386.328786] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2386.329792] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2386.330785] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2386.331772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2386.332765] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:35:54 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xf00000000000000}}}, 0xb8}}, 0x0) 02:35:54 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) 02:35:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xf0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:35:54 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xfffff000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:35:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000007000000000000000003003e00000000000000000000000000400000000000000000000000000000000000000000003800030000000000000003000000000000000a00000000000000000000000000b668a6b6a109f3ce9d71c5", @ANYRES32=r0, @ANYRES16=r0], 0xaf2) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) dup3(r0, r0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x10) 02:35:54 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 28) [ 2386.451629] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2386.459492] FAULT_INJECTION: forcing a failure. [ 2386.459492] name failslab, interval 1, probability 0, space 0, times 0 [ 2386.461034] CPU: 0 PID: 13687 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2386.461950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2386.463037] Call Trace: [ 2386.463395] dump_stack+0x107/0x167 [ 2386.463884] should_fail.cold+0x5/0xa [ 2386.464398] ? create_object.isra.0+0x3a/0xa20 [ 2386.465010] should_failslab+0x5/0x20 [ 2386.465519] kmem_cache_alloc+0x5b/0x310 [ 2386.466069] create_object.isra.0+0x3a/0xa20 [ 2386.466647] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2386.467346] kmem_cache_alloc+0x159/0x310 [ 2386.467897] copy_net_ns+0x11c/0x5d0 [ 2386.468400] ? copy_cgroup_ns+0x9d/0x680 [ 2386.468941] create_new_namespaces+0x3f6/0xb20 [ 2386.469558] copy_namespaces+0x3fb/0x4f0 [ 2386.470092] copy_process+0x393a/0x78b0 [ 2386.470616] ? SOFTIRQ_verbose+0x10/0x10 [ 2386.471164] ? __lockdep_reset_lock+0x180/0x180 [ 2386.471783] ? mark_lock+0xf5/0x2df0 [ 2386.472291] ? __cleanup_sighand+0xb0/0xb0 [ 2386.472872] ? _copy_from_user+0xfb/0x1b0 [ 2386.473439] kernel_clone+0xe7/0x980 [ 2386.473942] ? __lockdep_reset_lock+0x180/0x180 [ 2386.474556] ? create_io_thread+0xf0/0xf0 [ 2386.475113] ? ksys_write+0x21a/0x260 [ 2386.475617] ? lock_downgrade+0x6d0/0x6d0 [ 2386.476163] __do_sys_clone3+0x1e5/0x320 [ 2386.476703] ? __do_sys_clone+0x110/0x110 [ 2386.477265] ? rcu_read_lock_any_held+0x75/0xa0 [ 2386.477883] ? vfs_write+0x354/0xb10 [ 2386.478376] ? fput_many+0x2f/0x1a0 [ 2386.478855] ? ksys_write+0x1a9/0x260 [ 2386.479360] ? __ia32_sys_read+0xb0/0xb0 [ 2386.479901] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2386.480581] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2386.481251] ? trace_hardirqs_on+0x5b/0x180 [ 2386.481837] do_syscall_64+0x33/0x40 [ 2386.482326] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2386.482989] RIP: 0033:0x7f5655a9cb19 [ 2386.483470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2386.485893] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2386.486893] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2386.487822] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2386.488741] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2386.489671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2386.490599] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:35:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x2d8, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:35:54 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)='msdos\x00', 0x0, 0x0) 02:36:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x300, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:36:09 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 29) 02:36:09 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2f00000000000000}}}, 0xb8}}, 0x0) [ 2401.224239] FAULT_INJECTION: forcing a failure. [ 2401.224239] name failslab, interval 1, probability 0, space 0, times 0 [ 2401.226016] CPU: 0 PID: 13770 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2401.227021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2401.228218] Call Trace: [ 2401.228605] dump_stack+0x107/0x167 [ 2401.229133] should_fail.cold+0x5/0xa [ 2401.229699] ? copy_net_ns+0x16a/0x5d0 [ 2401.230262] should_failslab+0x5/0x20 [ 2401.230812] kmem_cache_alloc_trace+0x55/0x320 [ 2401.231476] copy_net_ns+0x16a/0x5d0 [ 2401.232035] ? copy_cgroup_ns+0x9d/0x680 [ 2401.232630] create_new_namespaces+0x3f6/0xb20 [ 2401.233297] copy_namespaces+0x3fb/0x4f0 [ 2401.233901] copy_process+0x393a/0x78b0 [ 2401.234481] ? SOFTIRQ_verbose+0x10/0x10 [ 2401.235070] ? __lockdep_reset_lock+0x180/0x180 [ 2401.235737] ? mark_lock+0xf5/0x2df0 [ 2401.236293] ? __cleanup_sighand+0xb0/0xb0 [ 2401.236921] ? _copy_from_user+0xfb/0x1b0 [ 2401.237532] kernel_clone+0xe7/0x980 [ 2401.238071] ? __lockdep_reset_lock+0x180/0x180 [ 2401.238743] ? create_io_thread+0xf0/0xf0 [ 2401.239354] ? ksys_write+0x21a/0x260 [ 2401.239904] ? lock_downgrade+0x6d0/0x6d0 [ 2401.240512] __do_sys_clone3+0x1e5/0x320 [ 2401.241105] ? __do_sys_clone+0x110/0x110 [ 2401.241736] ? rcu_read_lock_any_held+0x75/0xa0 [ 2401.242404] ? vfs_write+0x354/0xb10 [ 2401.242947] ? fput_many+0x2f/0x1a0 [ 2401.243475] ? ksys_write+0x1a9/0x260 [ 2401.244056] ? __ia32_sys_read+0xb0/0xb0 [ 2401.244648] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2401.245415] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2401.246156] ? trace_hardirqs_on+0x5b/0x180 [ 2401.246776] do_syscall_64+0x33/0x40 [ 2401.247309] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2401.248042] RIP: 0033:0x7f5655a9cb19 [ 2401.248575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2401.251213] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 02:36:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xffffff7f, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2401.252410] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2401.253452] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2401.254470] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2401.255528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2401.256546] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:36:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @dev}, 0x0, r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r4, 0x6801, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x300020, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c77000bfe653e231cab2c49711c000022d45d03", @ANYRESHEX=r4, @ANYBLOB=',msize=0x000000000000007e,access=any,uid=', @ANYRESDEC=0x0, @ANYBLOB=',dont_hash,seclabel,fscontext=sysadm_u,fowner=', @ANYRESDEC=r5, @ANYBLOB=',audit,\x00']) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@getsadinfo={0x1b8, 0x23, 0x200, 0x70bd2a, 0x25dfdbff, 0x0, [@policy={0xac, 0x7, {{@in=@broadcast, @in=@multicast2, 0x4e23, 0x800, 0x4e22, 0x8000, 0x0, 0x20, 0xa0, 0x2c, r3, 0xee00}, {0x8000, 0x0, 0x1, 0x7, 0x10, 0xfffffffffffffff8, 0x7, 0x7}, {0x5, 0x7, 0xbdfd, 0x2}, 0x401, 0x6e6bbb, 0xec56f6f342c593cf, 0x0, 0x2, 0x2}}, @srcaddr={0x14, 0xd, @in=@private=0xa010100}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@broadcast, 0x4e24, 0x3, 0x4e22, 0xfff, 0x2, 0x100, 0x20, 0x6, 0x0, r5}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0xf}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x5, 0x1, 0x6, 0x0, 0x9, 0x2, 0x9, 0xbf29}, {0x6, 0xa31, 0x0, 0x6}, {0x4, 0x2, 0x99e}, 0x70bd26, 0x3507, 0x2, 0x2, 0x6, 0x18}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) 02:36:09 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)='msdos\x00', 0x0, 0x0) 02:36:09 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 96) [ 2401.263888] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:36:09 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) [ 2401.310860] FAULT_INJECTION: forcing a failure. [ 2401.310860] name failslab, interval 1, probability 0, space 0, times 0 [ 2401.314196] CPU: 1 PID: 13781 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2401.316196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2401.318630] Call Trace: [ 2401.319405] dump_stack+0x107/0x167 [ 2401.320468] should_fail.cold+0x5/0xa [ 2401.321611] ? __alloc_skb+0x6d/0x5b0 [ 2401.322726] should_failslab+0x5/0x20 [ 2401.323851] kmem_cache_alloc_node+0x55/0x330 [ 2401.325164] __alloc_skb+0x6d/0x5b0 [ 2401.326263] alloc_skb_with_frags+0x92/0x570 [ 2401.327561] sock_alloc_send_pskb+0x7af/0x930 [ 2401.328879] ? sk_alloc+0x350/0x350 [ 2401.329953] ? perf_trace_lock+0xac/0x490 [ 2401.330952] ? SOFTIRQ_verbose+0x10/0x10 [ 2401.332126] ? lock_chain_count+0x20/0x20 [ 2401.333336] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2401.334804] ? ip_frag_init+0x350/0x350 [ 2401.335972] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2401.337355] ? ip6_mtu+0x1e9/0x3d0 [ 2401.338395] ? ip6_setup_cork+0xfb7/0x1740 [ 2401.339616] ip6_make_skb+0x2df/0x4e0 [ 2401.340717] ? ip_frag_init+0x350/0x350 [ 2401.341779] ? ip_frag_init+0x350/0x350 [ 2401.342927] ? ip6_push_pending_frames+0xf0/0xf0 [ 2401.344085] ? ip6_dst_hoplimit+0x199/0x440 [ 2401.345125] ? lock_downgrade+0x6d0/0x6d0 [ 2401.346166] udpv6_sendmsg+0x2128/0x2b40 [ 2401.347162] ? ip_frag_init+0x350/0x350 [ 2401.348129] ? udp_v6_push_pending_frames+0x360/0x360 [ 2401.349353] ? SOFTIRQ_verbose+0x10/0x10 [ 2401.350353] ? __lockdep_reset_lock+0x180/0x180 [ 2401.351479] ? lock_acquire+0x197/0x470 [ 2401.352424] ? find_held_lock+0x2c/0x110 [ 2401.353428] ? lock_chain_count+0x20/0x20 [ 2401.354427] ? sock_has_perm+0x1ea/0x280 [ 2401.355434] ? __import_iovec+0x458/0x590 [ 2401.356429] ? udp_v6_push_pending_frames+0x360/0x360 [ 2401.357680] inet6_sendmsg+0x105/0x140 [ 2401.358609] ? inet6_compat_ioctl+0x320/0x320 [ 2401.359673] __sock_sendmsg+0xf2/0x190 [ 2401.360601] ____sys_sendmsg+0x334/0x870 [ 2401.361584] ? sock_write_iter+0x3d0/0x3d0 [ 2401.362495] EXT4-fs (sda): Unrecognized mount option "uid=00000000000000060928" or missing value [ 2401.362594] ? do_recvmmsg+0x6d0/0x6d0 [ 2401.364795] ? find_held_lock+0x2c/0x110 [ 2401.365799] ___sys_sendmsg+0xf3/0x170 [ 2401.366730] ? sendmsg_copy_msghdr+0x160/0x160 [ 2401.367817] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2401.369057] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2401.370119] ? trace_hardirqs_on+0x5b/0x180 [ 2401.371145] ? finish_task_switch+0x1a4/0x5d0 [ 2401.372208] ? __switch_to+0x572/0xf70 [ 2401.373135] ? __switch_to_asm+0x3a/0x60 [ 2401.373293] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2401.374117] ? __switch_to_asm+0x34/0x60 [ 2401.374145] ? __schedule+0x82c/0x1ea0 [ 2401.374175] ? io_schedule_timeout+0x140/0x140 [ 2401.377931] FAULT_INJECTION: forcing a failure. [ 2401.377931] name failslab, interval 1, probability 0, space 0, times 0 [ 2401.378319] __sys_sendmmsg+0x195/0x470 [ 2401.380789] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2401.381840] ? lock_downgrade+0x6d0/0x6d0 [ 2401.382832] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2401.383997] ? wait_for_completion_io+0x270/0x270 [ 2401.385171] ? rcu_read_lock_any_held+0x75/0xa0 [ 2401.386295] ? vfs_write+0x354/0xb10 [ 2401.387207] ? fput_many+0x2f/0x1a0 [ 2401.388087] ? ksys_write+0x1a9/0x260 [ 2401.389002] ? __ia32_sys_read+0xb0/0xb0 [ 2401.389991] __x64_sys_sendmmsg+0x99/0x100 [ 2401.390988] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2401.392185] do_syscall_64+0x33/0x40 [ 2401.393053] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2401.394267] RIP: 0033:0x7f9688118b19 [ 2401.395135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2401.399566] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2401.401335] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2401.403001] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2401.404673] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2401.406348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2401.408009] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 2401.409704] CPU: 0 PID: 13788 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2401.410674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2401.411845] Call Trace: 02:36:09 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 30) 02:36:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xffffff80, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2401.412220] dump_stack+0x107/0x167 [ 2401.412897] should_fail.cold+0x5/0xa [ 2401.413442] ? create_object.isra.0+0x3a/0xa20 [ 2401.414088] should_failslab+0x5/0x20 [ 2401.414625] kmem_cache_alloc+0x5b/0x310 [ 2401.415193] create_object.isra.0+0x3a/0xa20 [ 2401.415807] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2401.416518] kmem_cache_alloc_trace+0x151/0x320 [ 2401.417173] copy_net_ns+0x16a/0x5d0 [ 2401.417699] ? copy_cgroup_ns+0x9d/0x680 [ 2401.418265] create_new_namespaces+0x3f6/0xb20 [ 2401.418900] copy_namespaces+0x3fb/0x4f0 [ 2401.419462] copy_process+0x393a/0x78b0 [ 2401.420015] ? SOFTIRQ_verbose+0x10/0x10 [ 2401.420577] ? __lockdep_reset_lock+0x180/0x180 [ 2401.421222] ? mark_lock+0xf5/0x2df0 [ 2401.421760] ? __cleanup_sighand+0xb0/0xb0 [ 2401.422361] ? _copy_from_user+0xfb/0x1b0 [ 2401.422939] kernel_clone+0xe7/0x980 [ 2401.423452] ? __lockdep_reset_lock+0x180/0x180 [ 2401.424096] ? create_io_thread+0xf0/0xf0 [ 2401.424680] ? ksys_write+0x21a/0x260 [ 2401.425205] ? lock_downgrade+0x6d0/0x6d0 [ 2401.425802] __do_sys_clone3+0x1e5/0x320 [ 2401.426363] ? __do_sys_clone+0x110/0x110 [ 2401.426947] ? rcu_read_lock_any_held+0x75/0xa0 [ 2401.427586] ? vfs_write+0x354/0xb10 [ 2401.428104] ? fput_many+0x2f/0x1a0 [ 2401.428617] ? ksys_write+0x1a9/0x260 [ 2401.429144] ? __ia32_sys_read+0xb0/0xb0 [ 2401.429725] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2401.430454] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2401.431163] ? trace_hardirqs_on+0x5b/0x180 [ 2401.431759] do_syscall_64+0x33/0x40 [ 2401.432271] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2401.432976] RIP: 0033:0x7f5655a9cb19 [ 2401.433495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2401.436042] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2401.437101] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2401.438085] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2401.439066] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2401.440044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2401.441026] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2401.454425] EXT4-fs (sda): Unrecognized mount option "uid=00000000000000060928" or missing value 02:36:09 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)='msdos\x00', 0x0, 0x0) 02:36:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x900, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:36:09 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x6201000000000000}}}, 0xb8}}, 0x0) 02:36:09 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:36:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xffffff9e, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2401.514072] EXT4-fs (sda): Unrecognized mount option "uid=00000000000000060928" or missing value [ 2401.519237] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:36:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xfffffff0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:36:09 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) [ 2401.576308] EXT4-fs (sda): Unrecognized mount option "uid=00000000000000060928" or missing value [ 2401.577684] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:36:09 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) 02:36:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xf00, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:36:24 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 97) 02:36:24 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x80ffffff00000000}}}, 0xb8}}, 0x0) 02:36:24 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x63, 0x0) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0x18c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [{@pci, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x4, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x4}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x64, 0x83, 0x1}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4085}, 0x4000040) r4 = pidfd_getfd(r0, r1, 0x0) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x24040881) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$unix(r0, &(0x7f00000007c0), &(0x7f0000000340)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) connect$netlink(r3, &(0x7f0000000040)=@proc={0x10, 0x0, 0x0, 0x2}, 0xc) dup2(0xffffffffffffffff, r3) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 02:36:24 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 31) 02:36:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x2f00, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:36:24 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:36:24 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0xffffffff, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:36:24 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) [ 2416.276975] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2416.287229] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 02:36:24 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) 02:36:24 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2416.312571] FAULT_INJECTION: forcing a failure. [ 2416.312571] name failslab, interval 1, probability 0, space 0, times 0 [ 2416.315511] CPU: 0 PID: 13826 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2416.317072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2416.318954] Call Trace: [ 2416.319560] dump_stack+0x107/0x167 [ 2416.320386] should_fail.cold+0x5/0xa [ 2416.321251] ? proc_net_ns_init+0x3e/0x410 [ 2416.322221] should_failslab+0x5/0x20 [ 2416.323082] kmem_cache_alloc+0x5b/0x310 [ 2416.324006] ? proc_net_ns_exit+0x80/0x80 [ 2416.324940] proc_net_ns_init+0x3e/0x410 [ 2416.325887] ops_init+0xbb/0x6b0 [ 2416.326668] setup_net+0x2f4/0x900 [ 2416.327475] ? ops_init+0x6b0/0x6b0 [ 2416.328315] ? down_read_interruptible+0x460/0x460 [ 2416.329655] ? kasan_unpoison_shadow+0x33/0x50 [ 2416.330677] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2416.330896] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2416.333495] copy_net_ns+0x2c0/0x5d0 [ 2416.334524] create_new_namespaces+0x3f6/0xb20 [ 2416.335784] copy_namespaces+0x3fb/0x4f0 [ 2416.336893] copy_process+0x393a/0x78b0 [ 2416.338002] ? SOFTIRQ_verbose+0x10/0x10 [ 2416.339133] ? __lockdep_reset_lock+0x180/0x180 [ 2416.340418] ? mark_lock+0xf5/0x2df0 [ 2416.341475] ? __cleanup_sighand+0xb0/0xb0 [ 2416.342678] ? _copy_from_user+0xfb/0x1b0 [ 2416.343827] kernel_clone+0xe7/0x980 [ 2416.344854] ? __lockdep_reset_lock+0x180/0x180 [ 2416.346138] ? create_io_thread+0xf0/0xf0 [ 2416.347292] ? ksys_write+0x21a/0x260 [ 2416.348337] ? lock_downgrade+0x6d0/0x6d0 [ 2416.349485] __do_sys_clone3+0x1e5/0x320 [ 2416.350620] ? __do_sys_clone+0x110/0x110 [ 2416.351788] ? rcu_read_lock_any_held+0x75/0xa0 [ 2416.353059] ? vfs_write+0x354/0xb10 [ 2416.354089] ? fput_many+0x2f/0x1a0 [ 2416.355092] ? ksys_write+0x1a9/0x260 [ 2416.356147] ? __ia32_sys_read+0xb0/0xb0 [ 2416.357257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2416.358838] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2416.360267] ? trace_hardirqs_on+0x5b/0x180 [ 2416.361451] do_syscall_64+0x33/0x40 [ 2416.362468] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2416.363864] RIP: 0033:0x7f5655a9cb19 [ 2416.364874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2416.369913] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2416.371973] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2416.373933] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2416.375848] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2416.377796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2416.379723] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2416.383151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2416.385090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2416.387235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2416.399650] FAULT_INJECTION: forcing a failure. [ 2416.399650] name failslab, interval 1, probability 0, space 0, times 0 [ 2416.401223] CPU: 1 PID: 13827 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2416.402163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2416.403294] Call Trace: [ 2416.403658] dump_stack+0x107/0x167 [ 2416.404160] should_fail.cold+0x5/0xa [ 2416.404675] should_failslab+0x5/0x20 [ 2416.405207] __kmalloc_node_track_caller+0x74/0x3b0 [ 2416.405900] ? alloc_skb_with_frags+0x92/0x570 [ 2416.406526] __alloc_skb+0xb1/0x5b0 [ 2416.407022] alloc_skb_with_frags+0x92/0x570 [ 2416.407629] sock_alloc_send_pskb+0x7af/0x930 [ 2416.408241] ? sk_alloc+0x350/0x350 [ 2416.408736] ? perf_trace_lock+0xac/0x490 [ 2416.409299] ? SOFTIRQ_verbose+0x10/0x10 [ 2416.409854] ? lock_chain_count+0x20/0x20 [ 2416.410421] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2416.411114] ? ip_frag_init+0x350/0x350 [ 2416.411652] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2416.412307] ? ip6_mtu+0x1e9/0x3d0 [ 2416.412784] ? ip6_setup_cork+0xfb7/0x1740 [ 2416.413380] ip6_make_skb+0x2df/0x4e0 [ 2416.413913] ? ip_frag_init+0x350/0x350 [ 2416.414453] ? ip_frag_init+0x350/0x350 [ 2416.414992] ? ip6_push_pending_frames+0xf0/0xf0 [ 2416.415651] ? ip6_dst_hoplimit+0x199/0x440 [ 2416.416227] ? lock_downgrade+0x6d0/0x6d0 [ 2416.416828] udpv6_sendmsg+0x2128/0x2b40 [ 2416.417392] ? ip_frag_init+0x350/0x350 [ 2416.417946] ? udp_v6_push_pending_frames+0x360/0x360 [ 2416.418638] ? SOFTIRQ_verbose+0x10/0x10 [ 2416.419203] ? __lockdep_reset_lock+0x180/0x180 [ 2416.419851] ? lock_acquire+0x197/0x470 [ 2416.420392] ? find_held_lock+0x2c/0x110 [ 2416.420951] ? sock_has_perm+0x1ea/0x280 [ 2416.421522] ? __import_iovec+0x458/0x590 [ 2416.422087] ? udp_v6_push_pending_frames+0x360/0x360 [ 2416.422805] inet6_sendmsg+0x105/0x140 [ 2416.423323] ? inet6_compat_ioctl+0x320/0x320 [ 2416.423933] __sock_sendmsg+0xf2/0x190 [ 2416.424458] ____sys_sendmsg+0x334/0x870 [ 2416.424999] ? sock_write_iter+0x3d0/0x3d0 [ 2416.425567] ? do_recvmmsg+0x6d0/0x6d0 [ 2416.426098] ? __lock_acquire+0x1657/0x5b00 [ 2416.426685] ___sys_sendmsg+0xf3/0x170 [ 2416.427208] ? sendmsg_copy_msghdr+0x160/0x160 [ 2416.427835] ? __lockdep_reset_lock+0x180/0x180 [ 2416.428461] ? __fget_files+0x2cf/0x520 [ 2416.429000] ? lock_acquire+0x197/0x470 [ 2416.429531] ? find_held_lock+0x2c/0x110 [ 2416.430101] ? __might_fault+0xd3/0x180 [ 2416.430630] ? lock_downgrade+0x6d0/0x6d0 [ 2416.431224] __sys_sendmmsg+0x195/0x470 [ 2416.431759] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2416.432343] ? lock_downgrade+0x6d0/0x6d0 [ 2416.432929] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2416.433588] ? wait_for_completion_io+0x270/0x270 [ 2416.434236] ? rcu_read_lock_any_held+0x75/0xa0 [ 2416.434860] ? vfs_write+0x354/0xb10 [ 2416.435358] ? fput_many+0x2f/0x1a0 [ 2416.435842] ? ksys_write+0x1a9/0x260 [ 2416.436352] ? __ia32_sys_read+0xb0/0xb0 [ 2416.436902] __x64_sys_sendmmsg+0x99/0x100 [ 2416.437471] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2416.438167] do_syscall_64+0x33/0x40 [ 2416.438671] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2416.439361] RIP: 0033:0x7f9688118b19 [ 2416.439858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2416.442284] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2416.443301] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2416.444251] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2416.445194] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2416.446141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2416.447069] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 2416.448266] EXT4-fs (sda): Unrecognized mount option "uid=00000000000000060928" or missing value [ 2416.464818] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2432.369535] FAULT_INJECTION: forcing a failure. [ 2432.369535] name failslab, interval 1, probability 0, space 0, times 0 [ 2432.371343] CPU: 0 PID: 13844 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2432.372388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2432.373633] Call Trace: [ 2432.374057] dump_stack+0x107/0x167 [ 2432.374607] should_fail.cold+0x5/0xa [ 2432.375184] ? create_object.isra.0+0x3a/0xa20 [ 2432.375869] should_failslab+0x5/0x20 [ 2432.376450] kmem_cache_alloc+0x5b/0x310 [ 2432.377076] create_object.isra.0+0x3a/0xa20 [ 2432.377756] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2432.378528] kmem_cache_alloc+0x159/0x310 [ 2432.379168] ? proc_net_ns_exit+0x80/0x80 [ 2432.379792] proc_net_ns_init+0x3e/0x410 [ 2432.380406] ops_init+0xbb/0x6b0 [ 2432.380925] setup_net+0x2f4/0x900 [ 2432.381465] ? ops_init+0x6b0/0x6b0 [ 2432.382041] ? down_read_interruptible+0x460/0x460 [ 2432.382775] ? kasan_unpoison_shadow+0x33/0x50 [ 2432.383463] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2432.384239] copy_net_ns+0x2c0/0x5d0 [ 2432.384801] create_new_namespaces+0x3f6/0xb20 [ 2432.385498] copy_namespaces+0x3fb/0x4f0 [ 2432.386143] copy_process+0x393a/0x78b0 [ 2432.386743] ? SOFTIRQ_verbose+0x10/0x10 [ 2432.387360] ? __lockdep_reset_lock+0x180/0x180 [ 2432.388051] ? mark_lock+0xf5/0x2df0 02:36:40 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x2, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:36:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x300, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:36:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x7e00, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:36:40 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x9effffff00000000}}}, 0xb8}}, 0x0) 02:36:40 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 98) 02:36:40 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:36:40 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 1) 02:36:40 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 32) [ 2432.388632] ? __cleanup_sighand+0xb0/0xb0 [ 2432.389518] ? _copy_from_user+0xfb/0x1b0 [ 2432.390168] kernel_clone+0xe7/0x980 [ 2432.390726] ? __lockdep_reset_lock+0x180/0x180 [ 2432.391418] ? create_io_thread+0xf0/0xf0 [ 2432.392051] ? ksys_write+0x21a/0x260 [ 2432.392620] ? lock_downgrade+0x6d0/0x6d0 [ 2432.393012] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2432.393248] __do_sys_clone3+0x1e5/0x320 [ 2432.395694] ? __do_sys_clone+0x110/0x110 [ 2432.396335] ? rcu_read_lock_any_held+0x75/0xa0 [ 2432.397036] ? vfs_write+0x354/0xb10 [ 2432.397606] ? fput_many+0x2f/0x1a0 [ 2432.398185] ? ksys_write+0x1a9/0x260 [ 2432.398755] ? __ia32_sys_read+0xb0/0xb0 [ 2432.399371] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2432.400160] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2432.400928] ? trace_hardirqs_on+0x5b/0x180 [ 2432.401593] do_syscall_64+0x33/0x40 [ 2432.402177] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2432.402970] RIP: 0033:0x7f5655a9cb19 [ 2432.403546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2432.406380] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2432.407569] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2432.408678] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2432.409789] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2432.410884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2432.411977] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2432.424028] FAULT_INJECTION: forcing a failure. [ 2432.424028] name failslab, interval 1, probability 0, space 0, times 0 [ 2432.426563] CPU: 1 PID: 13852 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2432.427175] FAULT_INJECTION: forcing a failure. [ 2432.427175] name failslab, interval 1, probability 0, space 0, times 0 [ 2432.428065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2432.428075] Call Trace: [ 2432.428106] dump_stack+0x107/0x167 [ 2432.428137] should_fail.cold+0x5/0xa [ 2432.433839] should_failslab+0x5/0x20 [ 2432.434680] __kmalloc_track_caller+0x79/0x370 [ 2432.435621] ? strndup_user+0x74/0xe0 [ 2432.436436] memdup_user+0x22/0xd0 [ 2432.437172] strndup_user+0x74/0xe0 [ 2432.437950] __x64_sys_mount+0x133/0x300 [ 2432.438800] ? copy_mnt_ns+0xa00/0xa00 [ 2432.439612] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2432.440718] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2432.441822] do_syscall_64+0x33/0x40 [ 2432.442618] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2432.443707] RIP: 0033:0x7fb4e3052b19 [ 2432.444499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2432.448340] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2432.449961] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2432.451477] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2432.452977] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2432.454496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2432.456008] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 [ 2432.457552] CPU: 0 PID: 13853 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2432.458623] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2432.459868] Call Trace: [ 2432.460272] dump_stack+0x107/0x167 [ 2432.460816] should_fail.cold+0x5/0xa [ 2432.461392] should_failslab+0x5/0x20 [ 2432.461989] __kmalloc_node_track_caller+0x74/0x3b0 [ 2432.462731] ? alloc_skb_with_frags+0x92/0x570 [ 2432.463417] __alloc_skb+0xb1/0x5b0 [ 2432.463979] alloc_skb_with_frags+0x92/0x570 [ 2432.464652] sock_alloc_send_pskb+0x7af/0x930 [ 2432.465343] ? sk_alloc+0x350/0x350 [ 2432.465920] ? perf_trace_lock+0xac/0x490 [ 2432.466547] ? SOFTIRQ_verbose+0x10/0x10 [ 2432.467168] ? lock_chain_count+0x20/0x20 [ 2432.467805] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2432.468571] ? ip_frag_init+0x350/0x350 [ 2432.469184] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2432.469936] ? ip6_mtu+0x1e9/0x3d0 [ 2432.470474] ? ip6_setup_cork+0xfb7/0x1740 [ 2432.471123] ip6_make_skb+0x2df/0x4e0 [ 2432.471701] ? ip_frag_init+0x350/0x350 [ 2432.472307] ? ip_frag_init+0x350/0x350 [ 2432.472913] ? ip6_push_pending_frames+0xf0/0xf0 [ 2432.473640] ? ip6_dst_hoplimit+0x199/0x440 [ 2432.474306] ? lock_downgrade+0x6d0/0x6d0 [ 2432.474941] udpv6_sendmsg+0x2128/0x2b40 [ 2432.475532] ? ip_frag_init+0x350/0x350 [ 2432.476125] ? udp_v6_push_pending_frames+0x360/0x360 [ 2432.476866] ? SOFTIRQ_verbose+0x10/0x10 [ 2432.477471] ? __lockdep_reset_lock+0x180/0x180 [ 2432.478169] ? lock_acquire+0x197/0x470 [ 2432.478750] ? find_held_lock+0x2c/0x110 [ 2432.479346] ? lock_chain_count+0x20/0x20 [ 2432.479980] ? sock_has_perm+0x1ea/0x280 [ 2432.480598] ? __import_iovec+0x458/0x590 [ 2432.481217] ? udp_v6_push_pending_frames+0x360/0x360 [ 2432.481983] inet6_sendmsg+0x105/0x140 [ 2432.482550] ? inet6_compat_ioctl+0x320/0x320 [ 2432.483210] __sock_sendmsg+0xf2/0x190 [ 2432.483780] ____sys_sendmsg+0x334/0x870 [ 2432.484365] ? sock_write_iter+0x3d0/0x3d0 [ 2432.484969] ? do_recvmmsg+0x6d0/0x6d0 [ 2432.485541] ? __lock_acquire+0x1657/0x5b00 02:36:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xd802, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2432.486192] ___sys_sendmsg+0xf3/0x170 [ 2432.486947] ? sendmsg_copy_msghdr+0x160/0x160 [ 2432.487600] ? __lockdep_reset_lock+0x180/0x180 [ 2432.488269] ? lock_acquire+0x197/0x470 [ 2432.488836] ? find_held_lock+0x2c/0x110 [ 2432.489421] ? __might_fault+0xd3/0x180 [ 2432.490012] ? lock_downgrade+0x6d0/0x6d0 [ 2432.490628] __sys_sendmmsg+0x195/0x470 [ 2432.491215] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2432.491836] ? lock_downgrade+0x6d0/0x6d0 [ 2432.492455] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2432.493148] ? wait_for_completion_io+0x270/0x270 [ 2432.493884] ? rcu_read_lock_any_held+0x75/0xa0 [ 2432.494548] ? vfs_write+0x354/0xb10 [ 2432.495097] ? fput_many+0x2f/0x1a0 [ 2432.495623] ? ksys_write+0x1a9/0x260 [ 2432.496185] ? __ia32_sys_read+0xb0/0xb0 [ 2432.496772] __x64_sys_sendmmsg+0x99/0x100 [ 2432.497391] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2432.498154] do_syscall_64+0x33/0x40 [ 2432.498698] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2432.499449] RIP: 0033:0x7f9688118b19 [ 2432.499988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2432.502649] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2432.503748] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2432.504782] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2432.505829] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2432.506847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2432.507873] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 02:36:40 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x3, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:36:40 executing program 5: getitimer(0x1, &(0x7f0000000000)) setitimer(0x2, &(0x7f0000000040)={{}, {0x0, 0xea60}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2000, @fd_index=0x8, 0x2, 0x3, 0x1, 0x12}, 0x6) setitimer(0x2, &(0x7f0000000100)={{0x0, 0xea60}, {r0, r1/1000+60000}}, &(0x7f0000000140)) 02:36:40 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xf0ffffff00000000}}}, 0xb8}}, 0x0) [ 2432.554047] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:36:40 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:36:40 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 99) 02:36:40 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 33) 02:36:40 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 2) [ 2432.635320] FAULT_INJECTION: forcing a failure. [ 2432.635320] name failslab, interval 1, probability 0, space 0, times 0 [ 2432.636898] CPU: 0 PID: 13868 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2432.637870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2432.639002] Call Trace: [ 2432.639363] dump_stack+0x107/0x167 [ 2432.639850] should_fail.cold+0x5/0xa [ 2432.640372] ? create_object.isra.0+0x3a/0xa20 [ 2432.640979] should_failslab+0x5/0x20 [ 2432.641498] kmem_cache_alloc+0x5b/0x310 [ 2432.642064] create_object.isra.0+0x3a/0xa20 [ 2432.642651] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2432.643326] __kmalloc_track_caller+0x177/0x370 [ 2432.643971] ? strndup_user+0x74/0xe0 [ 2432.644476] memdup_user+0x22/0xd0 [ 2432.644954] strndup_user+0x74/0xe0 [ 2432.645437] __x64_sys_mount+0x133/0x300 [ 2432.646009] ? copy_mnt_ns+0xa00/0xa00 [ 2432.646530] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2432.647240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2432.647922] do_syscall_64+0x33/0x40 [ 2432.648420] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2432.649097] RIP: 0033:0x7fb4e3052b19 [ 2432.649598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2432.652054] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2432.653089] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2432.654064] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2432.655037] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2432.655996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2432.656936] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 [ 2432.665564] FAULT_INJECTION: forcing a failure. [ 2432.665564] name failslab, interval 1, probability 0, space 0, times 0 [ 2432.667992] CPU: 1 PID: 13870 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2432.669457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2432.671214] Call Trace: [ 2432.671779] dump_stack+0x107/0x167 [ 2432.672556] should_fail.cold+0x5/0xa [ 2432.673368] ? dst_alloc+0x9e/0x5d0 [ 2432.674159] should_failslab+0x5/0x20 [ 2432.674967] kmem_cache_alloc+0x5b/0x310 [ 2432.675834] dst_alloc+0x9e/0x5d0 [ 2432.676579] xfrm_lookup_with_ifid+0xb79/0x1b70 [ 2432.677571] ? xfrm_policy_lookup_bytype.constprop.0+0x1a70/0x1a70 [ 2432.678906] ? ip6_dst_lookup_tail+0x63b/0xfc0 [ 2432.679887] icmpv6_route_lookup+0x2b3/0x470 [ 2432.680819] ? icmpv6_err+0x320/0x320 [ 2432.681632] ? dst_release+0x58/0x180 [ 2432.682442] ? icmpv6_xrlim_allow+0xbc/0x450 [ 2432.683373] ? icmpv6_sk_init+0x2a0/0x2a0 [ 2432.684256] ? projid_m_show+0x220/0x220 [ 2432.685115] ? ip6_pol_route_input+0x70/0x70 [ 2432.686080] icmp6_send+0xfdf/0x1f30 [ 2432.686893] ? icmpv6_push_pending_frames+0x470/0x470 [ 2432.687986] ? find_held_lock+0x2c/0x110 [ 2432.688899] ? ip6_dst_hoplimit+0x440/0x440 [ 2432.689838] ip6_pkt_drop+0x3d2/0x7f0 [ 2432.690647] ? ip6_pkt_discard+0x20/0x20 [ 2432.691512] ip6_local_out+0x29f/0x4c0 [ 2432.692344] ip6_send_skb+0x117/0x460 [ 2432.693158] udp_v6_send_skb+0x7b7/0x1620 [ 2432.694062] udpv6_sendmsg+0x216b/0x2b40 [ 2432.694928] ? ip_frag_init+0x350/0x350 [ 2432.695117] FAULT_INJECTION: forcing a failure. [ 2432.695117] name failslab, interval 1, probability 0, space 0, times 0 [ 2432.695782] ? udp_v6_push_pending_frames+0x360/0x360 [ 2432.695824] ? __lockdep_reset_lock+0x180/0x180 [ 2432.699342] ? __kernel_text_address+0x9/0x40 [ 2432.700299] ? lock_acquire+0x197/0x470 [ 2432.701143] ? find_held_lock+0x2c/0x110 [ 2432.702034] ? lock_chain_count+0x20/0x20 [ 2432.702919] ? sock_has_perm+0x1ea/0x280 [ 2432.703817] ? __import_iovec+0x458/0x590 [ 2432.704697] ? udp_v6_push_pending_frames+0x360/0x360 [ 2432.705797] inet6_sendmsg+0x105/0x140 [ 2432.706621] ? inet6_compat_ioctl+0x320/0x320 [ 2432.707574] __sock_sendmsg+0xf2/0x190 [ 2432.708409] ____sys_sendmsg+0x334/0x870 [ 2432.709279] ? sock_write_iter+0x3d0/0x3d0 [ 2432.710182] ? do_recvmmsg+0x6d0/0x6d0 [ 2432.711016] ? __lock_acquire+0x1657/0x5b00 [ 2432.711953] ___sys_sendmsg+0xf3/0x170 [ 2432.712790] ? sendmsg_copy_msghdr+0x160/0x160 [ 2432.713777] ? __lockdep_reset_lock+0x180/0x180 [ 2432.714787] ? lock_acquire+0x197/0x470 [ 2432.715628] ? find_held_lock+0x2c/0x110 [ 2432.716505] ? __might_fault+0xd3/0x180 [ 2432.717349] ? lock_downgrade+0x6d0/0x6d0 [ 2432.718267] __sys_sendmmsg+0x195/0x470 [ 2432.719120] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2432.720034] ? lock_downgrade+0x6d0/0x6d0 [ 2432.720935] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2432.721966] ? wait_for_completion_io+0x270/0x270 [ 2432.722995] ? rcu_read_lock_any_held+0x75/0xa0 [ 2432.723986] ? vfs_write+0x354/0xb10 [ 2432.724776] ? fput_many+0x2f/0x1a0 [ 2432.725551] ? ksys_write+0x1a9/0x260 [ 2432.726374] ? __ia32_sys_read+0xb0/0xb0 [ 2432.727252] __x64_sys_sendmmsg+0x99/0x100 [ 2432.728151] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2432.729247] do_syscall_64+0x33/0x40 [ 2432.730051] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2432.731138] RIP: 0033:0x7f9688118b19 [ 2432.731930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2432.735823] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2432.737444] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2432.739001] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2432.740513] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2432.742030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2432.743546] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 2432.745086] CPU: 0 PID: 13871 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2432.746000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2432.747057] Call Trace: [ 2432.747414] dump_stack+0x107/0x167 [ 2432.747879] should_fail.cold+0x5/0xa [ 2432.748364] ? create_object.isra.0+0x3a/0xa20 02:36:40 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:36:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xf000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:36:40 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:36:40 executing program 5: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x188, r3, 0x329, 0x0, 0x0, {{0x6b}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x5f, 0xc5, "874872128c7d84f34d6054954b42749aa4ca80d2fd1e6ec7c868c40903f4daa8bc0c8846ec055ee5639417cf40ee33a3435bd0bed03de7542943f6978f7cc04697756866145ec3279264ff45785ecfa6d6fdf09729346c8a451b83"}, @NL80211_ATTR_VENDOR_DATA={0xec, 0xc5, "4a56e7cdc8437468d071aae413abf09fc8127f9197c4b06b15e25bedeb6db25243ca0950b51bd3d3f82f17faf91d8931bda9f663f9c947c5b7dead820347702c5f675182d26b5510b0b759a11ef660d77624ba76e030490304a3a47ff41b5d12e80e356c25328b502440eff9a1f8008c87def70bd459199ef3e81c7988a380f814f3c655da55adab8abfbb1c33c03c1baa4f653c00e4de8335e5d21bfadbf434b5dc8b50e7255e24fc89a4c1a3c52c1ef4d1c3440f0de2f048f80e6d5600b3e4c81240290a8938a1854e263ea102e3d1a0ac1bc0519addd6d7144331164ae61400d2395cb0afecf1"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xabd}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x188}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x20000884) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x16e, &(0x7f0000000640)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0xf, 0x4, 0x3, 0xf, 0x160, 0x66, 0x0, 0x40, 0x6, 0x0, @multicast1, @rand_addr=0x64010100, {[@end, @timestamp_prespec={0x44, 0x24, 0x65, 0x3, 0x8, [{@multicast2, 0x2}, {@empty, 0x5}, {@local, 0x9}, {@broadcast, 0xffffffc0}]}]}}, @name_distributor={{0x124, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x8c92, 0x0, 0x1, 0xfffb, 0xda, 0x1, 0x4e24, 0x4e21, 0x2, 0x1}, [{0xe6f, 0x840, 0xfffffff7, 0x8e, 0x1, 0x8, 0x3, 0x1}, {0x0, 0xfff, 0x3, 0x10001, 0x5, 0x3f, 0x0, 0x6a}, {0x7f, 0x7, 0x1, 0x2, 0xc86d, 0x7, 0xe, 0x2}, {0xac, 0x1, 0xffff918c, 0x3f, 0x61, 0x8, 0x5, 0x9}, {0x34, 0x7ff, 0x7fffffff, 0x4, 0x1ff, 0x8, 0x9, 0x5}, {0x81, 0x3, 0x2, 0x2, 0x101, 0x3, 0x2, 0x3ff}, {0x80, 0x0, 0x7, 0x8, 0xfffffeff, 0xbf8f, 0x6}, {0x7, 0x7fffffff, 0xfffffffb, 0x8, 0x1, 0x165, 0x6, 0x9}, {0x9, 0x6, 0x4, 0x2, 0xff, 0xff, 0x4, 0x9}]}}}}}, 0x0) clone3(&(0x7f0000000200)={0x44004100, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2432.748937] should_failslab+0x5/0x20 [ 2432.749658] kmem_cache_alloc+0x5b/0x310 [ 2432.750202] create_object.isra.0+0x3a/0xa20 [ 2432.750749] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2432.751392] kmem_cache_alloc+0x159/0x310 [ 2432.751914] ? proc_net_ns_exit+0x80/0x80 [ 2432.752426] proc_net_ns_init+0x3e/0x410 [ 2432.752934] ops_init+0xbb/0x6b0 [ 2432.753359] setup_net+0x2f4/0x900 [ 2432.753819] ? ops_init+0x6b0/0x6b0 [ 2432.754280] ? down_read_interruptible+0x460/0x460 [ 2432.754882] ? kasan_unpoison_shadow+0x33/0x50 [ 2432.755448] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2432.756075] copy_net_ns+0x2c0/0x5d0 [ 2432.756541] create_new_namespaces+0x3f6/0xb20 [ 2432.757113] copy_namespaces+0x3fb/0x4f0 [ 2432.757618] copy_process+0x393a/0x78b0 [ 2432.758144] ? SOFTIRQ_verbose+0x10/0x10 [ 2432.758662] ? __lockdep_reset_lock+0x180/0x180 [ 2432.759239] ? mark_lock+0xf5/0x2df0 [ 2432.759726] ? __cleanup_sighand+0xb0/0xb0 [ 2432.760271] ? _copy_from_user+0xfb/0x1b0 [ 2432.760795] kernel_clone+0xe7/0x980 [ 2432.761277] ? __lockdep_reset_lock+0x180/0x180 [ 2432.761505] FAT-fs (loop2): bogus logical sector size 22820 [ 2432.761870] ? create_io_thread+0xf0/0xf0 [ 2432.761894] ? ksys_write+0x21a/0x260 [ 2432.761913] ? lock_downgrade+0x6d0/0x6d0 [ 2432.763154] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2432.763638] __do_sys_clone3+0x1e5/0x320 [ 2432.766132] ? __do_sys_clone+0x110/0x110 [ 2432.766659] ? rcu_read_lock_any_held+0x75/0xa0 [ 2432.767227] ? vfs_write+0x354/0xb10 [ 2432.767693] ? fput_many+0x2f/0x1a0 [ 2432.768142] ? ksys_write+0x1a9/0x260 [ 2432.768614] ? __ia32_sys_read+0xb0/0xb0 [ 2432.769114] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2432.769797] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2432.770430] ? trace_hardirqs_on+0x5b/0x180 [ 2432.770966] do_syscall_64+0x33/0x40 [ 2432.771424] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2432.772066] RIP: 0033:0x7f5655a9cb19 [ 2432.772521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2432.774845] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2432.775777] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2432.776667] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2432.777556] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2432.778451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2432.779335] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:36:40 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfcffffff00000000}}}, 0xb8}}, 0x0) [ 2432.796601] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:36:40 executing program 0: mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:36:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x80000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2447.409478] FAULT_INJECTION: forcing a failure. [ 2447.409478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2447.410876] CPU: 1 PID: 13896 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2447.411662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2447.412614] Call Trace: [ 2447.412907] dump_stack+0x107/0x167 [ 2447.413323] should_fail.cold+0x5/0xa [ 2447.413746] _copy_from_user+0x2e/0x1b0 [ 2447.414212] memdup_user+0x65/0xd0 [ 2447.414605] strndup_user+0x74/0xe0 [ 2447.415033] __x64_sys_mount+0x133/0x300 [ 2447.415494] ? copy_mnt_ns+0xa00/0xa00 [ 2447.415947] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2447.416544] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2447.417140] do_syscall_64+0x33/0x40 [ 2447.417584] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2447.418163] RIP: 0033:0x7fb4e3052b19 [ 2447.418607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2447.420754] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2447.421658] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2447.422481] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2447.423295] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2447.424111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2447.424941] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 02:36:55 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 3) 02:36:55 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000800)='./file0\x00', 0x0, 0x2, &(0x7f0000000cc0)=[{0x0, 0x0, 0xfffffffffffffff8}, {&(0x7f0000000980)}], 0x241000, &(0x7f0000000d80)=ANY=[@ANYBLOB='uni_xlate=1,uni_xlate=0,uni_xlate=0,iocharset=cp86D,nonumtail=0,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="2c7b50e48d33f7e2b93e757365722e696e6366732e73697a65002c6f626a5f726c653d2c736d61636b6673726f6f743d73797a5f74756e002c0000"]) newfstatat(0xffffffffffffff9c, &(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40), 0x4000) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x2) 02:36:55 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 34) 02:36:55 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffc90000000000}}}, 0xb8}}, 0x0) 02:36:55 executing program 0: mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:36:55 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x5, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:36:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xf0ffff, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:36:55 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 100) [ 2447.438122] FAULT_INJECTION: forcing a failure. [ 2447.438122] name failslab, interval 1, probability 0, space 0, times 0 [ 2447.440719] CPU: 0 PID: 13900 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2447.442276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2447.444156] Call Trace: [ 2447.444760] dump_stack+0x107/0x167 [ 2447.445578] should_fail.cold+0x5/0xa [ 2447.446452] ? create_object.isra.0+0x3a/0xa20 [ 2447.447493] should_failslab+0x5/0x20 [ 2447.448357] kmem_cache_alloc+0x5b/0x310 [ 2447.449290] create_object.isra.0+0x3a/0xa20 [ 2447.449921] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2447.450278] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2447.450309] kmem_cache_alloc+0x159/0x310 [ 2447.453337] __proc_create+0x2b3/0x8b0 [ 2447.454229] ? pde_free+0x100/0x100 [ 2447.455056] ? kmem_cache_alloc+0x159/0x310 [ 2447.456042] ? mark_held_locks+0x9e/0xe0 [ 2447.456970] _proc_mkdir+0xae/0x200 [ 2447.457796] ? proc_symlink+0x280/0x280 [ 2447.458715] ? proc_net_ns_exit+0x80/0x80 [ 2447.459661] proc_net_ns_init+0x261/0x410 [ 2447.460598] ops_init+0xbb/0x6b0 [ 2447.461378] setup_net+0x2f4/0x900 [ 2447.462198] ? ops_init+0x6b0/0x6b0 [ 2447.463023] ? down_read_interruptible+0x460/0x460 [ 2447.464140] ? kasan_unpoison_shadow+0x33/0x50 [ 2447.465167] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2447.466321] copy_net_ns+0x2c0/0x5d0 [ 2447.467167] create_new_namespaces+0x3f6/0xb20 [ 2447.468212] copy_namespaces+0x3fb/0x4f0 [ 2447.469135] copy_process+0x393a/0x78b0 [ 2447.470054] ? SOFTIRQ_verbose+0x10/0x10 [ 2447.470975] ? __lockdep_reset_lock+0x180/0x180 [ 2447.472020] ? mark_lock+0xf5/0x2df0 [ 2447.472890] ? __cleanup_sighand+0xb0/0xb0 [ 2447.473883] ? _copy_from_user+0xfb/0x1b0 [ 2447.474841] kernel_clone+0xe7/0x980 [ 2447.475679] ? __lockdep_reset_lock+0x180/0x180 [ 2447.476747] ? create_io_thread+0xf0/0xf0 [ 2447.477695] ? ksys_write+0x21a/0x260 [ 2447.478575] ? lock_downgrade+0x6d0/0x6d0 [ 2447.479525] __do_sys_clone3+0x1e5/0x320 [ 2447.480453] ? __do_sys_clone+0x110/0x110 [ 2447.481420] ? rcu_read_lock_any_held+0x75/0xa0 [ 2447.482503] ? vfs_write+0x354/0xb10 [ 2447.483345] ? fput_many+0x2f/0x1a0 [ 2447.484178] ? ksys_write+0x1a9/0x260 [ 2447.485039] ? __ia32_sys_read+0xb0/0xb0 [ 2447.485978] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2447.487170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2447.488320] ? trace_hardirqs_on+0x5b/0x180 [ 2447.489311] do_syscall_64+0x33/0x40 [ 2447.490160] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2447.491317] RIP: 0033:0x7f5655a9cb19 [ 2447.492162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2447.496315] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2447.498039] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2447.499648] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2447.501264] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2447.502888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2447.504490] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2447.528354] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:36:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x1000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:36:55 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 4) 02:36:55 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x6, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:36:55 executing program 0: mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) [ 2447.544627] FAULT_INJECTION: forcing a failure. [ 2447.544627] name failslab, interval 1, probability 0, space 0, times 0 [ 2447.547301] CPU: 0 PID: 13912 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2447.548893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2447.550803] Call Trace: [ 2447.551412] dump_stack+0x107/0x167 [ 2447.551575] FAULT_INJECTION: forcing a failure. [ 2447.551575] name failslab, interval 1, probability 0, space 0, times 0 [ 2447.552250] should_fail.cold+0x5/0xa [ 2447.552276] ? create_object.isra.0+0x3a/0xa20 [ 2447.552299] should_failslab+0x5/0x20 [ 2447.556301] kmem_cache_alloc+0x5b/0x310 [ 2447.557229] ? xfrm_policy_get_afinfo+0x21/0x2b0 [ 2447.558321] create_object.isra.0+0x3a/0xa20 [ 2447.559311] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2447.560470] kmem_cache_alloc+0x159/0x310 [ 2447.561421] dst_alloc+0x9e/0x5d0 [ 2447.562233] xfrm_lookup_with_ifid+0xb79/0x1b70 [ 2447.563296] ? xfrm_policy_lookup_bytype.constprop.0+0x1a70/0x1a70 [ 2447.564714] ? ip6_dst_lookup_tail+0x63b/0xfc0 [ 2447.565769] icmpv6_route_lookup+0x2b3/0x470 [ 2447.566767] ? icmpv6_err+0x320/0x320 [ 2447.567634] ? dst_release+0x58/0x180 [ 2447.568493] ? icmpv6_xrlim_allow+0xbc/0x450 [ 2447.569484] ? icmpv6_sk_init+0x2a0/0x2a0 [ 2447.570437] ? projid_m_show+0x220/0x220 [ 2447.571361] ? ip6_pol_route_input+0x70/0x70 [ 2447.572381] icmp6_send+0xfdf/0x1f30 [ 2447.573245] ? icmpv6_push_pending_frames+0x470/0x470 [ 2447.574427] ? find_held_lock+0x2c/0x110 [ 2447.575380] ? ip6_dst_hoplimit+0x440/0x440 [ 2447.576367] ip6_pkt_drop+0x3d2/0x7f0 [ 2447.577223] ? ip6_pkt_discard+0x20/0x20 [ 2447.578154] ip6_local_out+0x29f/0x4c0 [ 2447.579037] ip6_send_skb+0x117/0x460 [ 2447.579905] udp_v6_send_skb+0x7b7/0x1620 [ 2447.580861] udpv6_sendmsg+0x216b/0x2b40 [ 2447.581784] ? ip_frag_init+0x350/0x350 [ 2447.582702] ? udp_v6_push_pending_frames+0x360/0x360 [ 2447.583861] ? SOFTIRQ_verbose+0x10/0x10 [ 2447.584802] ? __lockdep_reset_lock+0x180/0x180 [ 2447.585875] ? lock_acquire+0x197/0x470 [ 2447.586784] ? find_held_lock+0x2c/0x110 [ 2447.587716] ? lock_chain_count+0x20/0x20 [ 2447.588661] ? sock_has_perm+0x1ea/0x280 [ 2447.589616] ? __import_iovec+0x458/0x590 [ 2447.590563] ? udp_v6_push_pending_frames+0x360/0x360 [ 2447.591730] inet6_sendmsg+0x105/0x140 [ 2447.592613] ? inet6_compat_ioctl+0x320/0x320 [ 2447.593631] __sock_sendmsg+0xf2/0x190 [ 2447.594521] ____sys_sendmsg+0x334/0x870 [ 2447.595453] ? sock_write_iter+0x3d0/0x3d0 [ 2447.596412] ? do_recvmmsg+0x6d0/0x6d0 [ 2447.597300] ? __lock_acquire+0x1657/0x5b00 [ 2447.598301] ___sys_sendmsg+0xf3/0x170 [ 2447.599184] ? sendmsg_copy_msghdr+0x160/0x160 [ 2447.600224] ? __lockdep_reset_lock+0x180/0x180 [ 2447.601290] ? lock_acquire+0x197/0x470 [ 2447.602197] ? find_held_lock+0x2c/0x110 [ 2447.603131] ? __might_fault+0xd3/0x180 [ 2447.604031] ? lock_downgrade+0x6d0/0x6d0 [ 2447.605003] __sys_sendmmsg+0x195/0x470 [ 2447.605920] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2447.606899] ? lock_downgrade+0x6d0/0x6d0 [ 2447.607865] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2447.608964] ? wait_for_completion_io+0x270/0x270 [ 2447.610069] ? rcu_read_lock_any_held+0x75/0xa0 [ 2447.611103] ? vfs_write+0x354/0xb10 [ 2447.611931] ? fput_many+0x2f/0x1a0 [ 2447.612761] ? ksys_write+0x1a9/0x260 [ 2447.613628] ? __ia32_sys_read+0xb0/0xb0 [ 2447.614572] __x64_sys_sendmmsg+0x99/0x100 [ 2447.615530] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2447.616681] do_syscall_64+0x33/0x40 [ 2447.617526] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2447.618691] RIP: 0033:0x7f9688118b19 [ 2447.619535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2447.623693] RSP: 002b:00007f968568e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2447.625419] RAX: ffffffffffffffda RBX: 00007f968822bf60 RCX: 00007f9688118b19 [ 2447.627048] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2447.628666] RBP: 00007f968568e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2447.630311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2447.631932] R13: 00007ffd5f01003f R14: 00007f968568e300 R15: 0000000000022000 [ 2447.633566] CPU: 1 PID: 13917 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2447.634401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2447.635357] Call Trace: [ 2447.635670] dump_stack+0x107/0x167 [ 2447.636091] should_fail.cold+0x5/0xa [ 2447.636544] should_failslab+0x5/0x20 [ 2447.636986] __kmalloc_track_caller+0x79/0x370 [ 2447.637525] ? strndup_user+0x74/0xe0 [ 2447.637979] memdup_user+0x22/0xd0 [ 2447.638400] strndup_user+0x74/0xe0 [ 2447.638839] __x64_sys_mount+0x17c/0x300 [ 2447.639305] ? copy_mnt_ns+0xa00/0xa00 [ 2447.639773] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2447.640387] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2447.640981] do_syscall_64+0x33/0x40 [ 2447.641393] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2447.642013] RIP: 0033:0x7fb4e3052b19 [ 2447.642427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2447.644504] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2447.645348] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2447.646199] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2447.647138] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2447.647947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2447.648745] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 [ 2447.675085] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:36:55 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x7, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:36:55 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffff7f00000000}}}, 0xb8}}, 0x0) 02:36:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x505fe2, 0x20) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x400, 0x30) r3 = fspick(r2, &(0x7f0000000140)='./file1\x00', 0x1) dup3(r1, r3, 0x0) mknod$loop(0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x8) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xfdef) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2011}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000100), 0xe5de8c5e5e477b94}, 0x0, 0x0, 0x6, 0x5, 0x0, 0x3, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xff, 0x93, 0x8, 0x2, 0x0, 0x18ccc5a300000, 0x800, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x400, 0x2, @perf_config_ext={0x7, 0x7fff}, 0x1200, 0xb4b, 0x40, 0x5, 0x2, 0x80000000, 0x82, 0x0, 0x3bf, 0x0, 0x8}, 0xffffffffffffffff, 0xe, r4, 0xf) 02:36:55 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x8, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:36:55 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) [ 2447.734239] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2447.735054] cgroup: fork rejected by pids controller in /syz5 [ 2463.916112] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:37:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x2000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:37:12 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 02:37:12 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 35) 02:37:12 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x9, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:37:12 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffff00000000}}}, 0xb8}}, 0x0) 02:37:12 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:37:12 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 5) 02:37:12 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x2, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x0, 0x100000000000f, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000002abd7000fbdbdf251e0000007a002300a18a69f157fe976054349c2f3788c5eedab33fee80a2abd84f2511d69b6b6548371c40170f59a09b7d50182387dc9dbad61787a47f14e81d0527332bcae25f6b4267a6813b0f2e5230484956a1fa587ae37bcab5bdd8c61d76fe3bb7d40746ba9a936aff7d22c1e8861505fbea8800"/144], 0x90}, 0x1, 0x0, 0x0, 0x8008804}, 0x8000) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) write$bt_hci(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="7b01000e6a3ef2027c3900"/22], 0x6) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fab5db7f4d9354d71dcc1fec512f7773e70fb2d4781cc61c0000"], 0x38) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0xd7, 0x6, 0x0, 0x8}, &(0x7f0000000300)) r3 = syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0xfffffffffffff801, 0x2, &(0x7f0000000400)=[{&(0x7f0000000500)="26870bf6af44246e8eda89fed7ad3111945679d4b90cdf210d0cced04b6a374049c0ca7e85ae675e50596d2a2389e3d6608240fcf2f52f716afaf2f6ac428e1c2cc87b7de7412efb7ca34e19055eb21a02a67dba2f9bac758159e4ff0b7cb1a6c0e2c8b8bd3644626db18238a81969816bfbc54d4bedc882f6444db1eac531bb3ffb50a285e7ac46977c588878777345b4d5a078d060d58383ade5fe43fd49a56377fbcd38cccb3b62b13e8175573dd79dbdf2c3ce170408ec08257a82a6adcf4bf061e69ffb95c94130af7bc19c383bd7d5e65d271b66468017ca71fbafb3b12311cb14e172cbab4384cc71b15bbebbf2860b", 0xf3, 0xf946}, {&(0x7f00000003c0)="6092d7855757d3f749be2060ce4923af8d61c975e0d57e4b2b350f0c5a519072852b80e90a14c709838a8094082c8f1a72fad93252", 0x35, 0x2}], 0x1214480, &(0x7f0000000440)={[{@huge_within_size}, {@huge_advise}, {@uid={'uid', 0x3d, 0xee01}}, {@huge_never}]}) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000600), &(0x7f0000000640), 0x2, 0x2) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000200)=0x1f) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2463.922193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2463.928249] FAULT_INJECTION: forcing a failure. [ 2463.928249] name failslab, interval 1, probability 0, space 0, times 0 [ 2463.930935] CPU: 0 PID: 14041 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2463.932539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2463.934481] Call Trace: [ 2463.935102] dump_stack+0x107/0x167 [ 2463.935957] should_fail.cold+0x5/0xa [ 2463.936856] ? create_object.isra.0+0x3a/0xa20 [ 2463.937920] should_failslab+0x5/0x20 [ 2463.938821] kmem_cache_alloc+0x5b/0x310 [ 2463.939776] create_object.isra.0+0x3a/0xa20 [ 2463.940803] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2463.941994] __kmalloc_track_caller+0x177/0x370 [ 2463.943082] ? strndup_user+0x74/0xe0 [ 2463.943976] memdup_user+0x22/0xd0 [ 2463.944803] strndup_user+0x74/0xe0 [ 2463.945651] __x64_sys_mount+0x17c/0x300 [ 2463.946598] ? copy_mnt_ns+0xa00/0xa00 [ 2463.947511] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2463.948733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2463.949936] do_syscall_64+0x33/0x40 [ 2463.950815] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2463.952009] RIP: 0033:0x7fb4e3052b19 [ 2463.952877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2463.957189] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2463.958961] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2463.960623] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2463.962299] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2463.963962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2463.965631] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 [ 2463.974939] FAULT_INJECTION: forcing a failure. [ 2463.974939] name failslab, interval 1, probability 0, space 0, times 0 [ 2463.977577] CPU: 0 PID: 14047 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2463.979200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2463.981136] Call Trace: [ 2463.981748] dump_stack+0x107/0x167 [ 2463.982606] should_fail.cold+0x5/0xa [ 2463.983495] ? __proc_create+0x2b3/0x8b0 [ 2463.984439] should_failslab+0x5/0x20 [ 2463.985322] kmem_cache_alloc+0x5b/0x310 [ 2463.986281] __proc_create+0x2b3/0x8b0 [ 2463.987190] ? pde_free+0x100/0x100 [ 2463.988050] ? ida_free+0x2c0/0x2c0 [ 2463.988900] _proc_mkdir+0xae/0x200 [ 2463.989745] ? proc_symlink+0x280/0x280 [ 2463.990691] ? netfilter_net_exit+0x50/0x50 [ 2463.991694] netfilter_net_init+0x211/0x2f0 [ 2463.992698] ops_init+0xbb/0x6b0 [ 2463.993497] setup_net+0x2f4/0x900 [ 2463.994347] ? ops_init+0x6b0/0x6b0 [ 2463.995193] ? down_read_interruptible+0x460/0x460 [ 2463.996336] ? kasan_unpoison_shadow+0x33/0x50 [ 2463.997398] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2463.998590] copy_net_ns+0x2c0/0x5d0 [ 2463.999463] create_new_namespaces+0x3f6/0xb20 [ 2464.000536] copy_namespaces+0x3fb/0x4f0 [ 2464.001492] copy_process+0x393a/0x78b0 [ 2464.002423] ? SOFTIRQ_verbose+0x10/0x10 [ 2464.003372] ? __lockdep_reset_lock+0x180/0x180 [ 2464.004454] ? mark_lock+0xf5/0x2df0 [ 2464.005349] ? __cleanup_sighand+0xb0/0xb0 [ 2464.006366] ? _copy_from_user+0xfb/0x1b0 [ 2464.007340] kernel_clone+0xe7/0x980 [ 2464.008208] ? __lockdep_reset_lock+0x180/0x180 [ 2464.009293] ? create_io_thread+0xf0/0xf0 [ 2464.010284] ? ksys_write+0x21a/0x260 [ 2464.011173] ? lock_downgrade+0x6d0/0x6d0 [ 2464.012146] __do_sys_clone3+0x1e5/0x320 [ 2464.013090] ? __do_sys_clone+0x110/0x110 [ 2464.014091] ? rcu_read_lock_any_held+0x75/0xa0 [ 2464.015170] ? vfs_write+0x354/0xb10 [ 2464.016038] ? fput_many+0x2f/0x1a0 [ 2464.016891] ? ksys_write+0x1a9/0x260 [ 2464.017779] ? __ia32_sys_read+0xb0/0xb0 [ 2464.018736] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2464.019956] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2464.021157] ? trace_hardirqs_on+0x5b/0x180 [ 2464.022195] do_syscall_64+0x33/0x40 [ 2464.023062] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2464.024259] RIP: 0033:0x7f5655a9cb19 [ 2464.025126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2464.029429] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2464.031211] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2464.032861] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2464.034534] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2464.036193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2464.037858] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2464.040047] cannot create netfilter proc entry [ 2464.058534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2464.061262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2464.068394] FAT-fs (loop2): bogus logical sector size 22820 [ 2464.069958] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2464.071401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2464.080358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 02:37:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x3000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:37:12 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffff000}}}, 0xb8}}, 0x0) 02:37:12 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:37:12 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0xa, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:37:12 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 6) 02:37:12 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x2}}}, 0xb8}}, 0x0) 02:37:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x9000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2464.225433] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2464.242388] FAULT_INJECTION: forcing a failure. [ 2464.242388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2464.245064] CPU: 0 PID: 14165 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2464.246634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2464.248499] Call Trace: [ 2464.249099] dump_stack+0x107/0x167 [ 2464.249924] should_fail.cold+0x5/0xa [ 2464.250806] _copy_from_user+0x2e/0x1b0 [ 2464.251706] memdup_user+0x65/0xd0 [ 2464.252508] strndup_user+0x74/0xe0 [ 2464.253329] __x64_sys_mount+0x17c/0x300 [ 2464.254260] ? copy_mnt_ns+0xa00/0xa00 [ 2464.255164] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2464.256356] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2464.257559] do_syscall_64+0x33/0x40 [ 2464.258407] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2464.259560] RIP: 0033:0x7fb4e3052b19 [ 2464.260408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2464.264560] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2464.266283] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2464.267906] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2464.269523] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2464.271155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2464.272780] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 02:37:12 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:37:12 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 36) 02:37:12 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) [ 2464.347274] FAULT_INJECTION: forcing a failure. [ 2464.347274] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.349867] CPU: 0 PID: 14170 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2464.351433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2464.353293] Call Trace: [ 2464.353896] dump_stack+0x107/0x167 [ 2464.354732] should_fail.cold+0x5/0xa [ 2464.355596] ? create_object.isra.0+0x3a/0xa20 [ 2464.356624] should_failslab+0x5/0x20 [ 2464.357491] kmem_cache_alloc+0x5b/0x310 [ 2464.358424] create_object.isra.0+0x3a/0xa20 [ 2464.359413] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2464.360562] kmem_cache_alloc+0x159/0x310 [ 2464.361506] __proc_create+0x2b3/0x8b0 [ 2464.362396] ? pde_free+0x100/0x100 [ 2464.363256] ? ida_free+0x2c0/0x2c0 [ 2464.364082] _proc_mkdir+0xae/0x200 [ 2464.364932] ? proc_symlink+0x280/0x280 [ 2464.365876] ? netfilter_net_exit+0x50/0x50 [ 2464.366878] netfilter_net_init+0x211/0x2f0 [ 2464.367882] ops_init+0xbb/0x6b0 [ 2464.368676] setup_net+0x2f4/0x900 [ 2464.369512] ? ops_init+0x6b0/0x6b0 [ 2464.370377] ? down_read_interruptible+0x460/0x460 [ 2464.371530] ? kasan_unpoison_shadow+0x33/0x50 [ 2464.372602] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2464.373800] copy_net_ns+0x2c0/0x5d0 [ 2464.374689] create_new_namespaces+0x3f6/0xb20 [ 2464.375771] copy_namespaces+0x3fb/0x4f0 [ 2464.376729] copy_process+0x393a/0x78b0 [ 2464.377660] ? SOFTIRQ_verbose+0x10/0x10 [ 2464.378623] ? __lockdep_reset_lock+0x180/0x180 [ 2464.379711] ? mark_lock+0xf5/0x2df0 [ 2464.380609] ? __cleanup_sighand+0xb0/0xb0 [ 2464.381631] ? _copy_from_user+0xfb/0x1b0 [ 2464.382619] kernel_clone+0xe7/0x980 [ 2464.383492] ? __lockdep_reset_lock+0x180/0x180 [ 2464.384591] ? create_io_thread+0xf0/0xf0 [ 2464.385583] ? ksys_write+0x21a/0x260 [ 2464.386485] ? lock_downgrade+0x6d0/0x6d0 [ 2464.387463] __do_sys_clone3+0x1e5/0x320 [ 2464.388416] ? __do_sys_clone+0x110/0x110 [ 2464.389413] ? rcu_read_lock_any_held+0x75/0xa0 [ 2464.390513] ? vfs_write+0x354/0xb10 [ 2464.391390] ? fput_many+0x2f/0x1a0 [ 2464.392248] ? ksys_write+0x1a9/0x260 [ 2464.393142] ? __ia32_sys_read+0xb0/0xb0 [ 2464.394106] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2464.395335] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2464.396540] ? trace_hardirqs_on+0x5b/0x180 [ 2464.397552] do_syscall_64+0x33/0x40 [ 2464.398431] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2464.399632] RIP: 0033:0x7f5655a9cb19 [ 2464.400504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2464.404808] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2464.406609] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2464.408282] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2464.409961] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2464.411640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2464.413320] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:37:29 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 37) 02:37:29 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 02:37:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xf000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:37:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="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"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x13104a8, &(0x7f0000000940)=ANY=[@ANYBLOB="04a6d92b54b930c45ca4f674d605ceda2a1eb7bb805ba06dd8d4c6018f069f7a651553a647894e78310349651d6cc5c35355a43f339a546914fc6e94a986c17ea5b7e46c0fe6aed55374f19c5d42e907a6880cfde8d128bd84afa10bc95730cd40f6276a4a0f1680d1f3fa6f35b2dd2d7ed6b7576d7e3b1a4f74c7c24f7ca116d6438775f14d29516648512c4a65078d9a1a8671a6f7e949328361e58d5a2fe4571d0ce0a672828aeae0d3", @ANYRESHEX, @ANYRESDEC, @ANYRES32]) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00'], 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES16=r2, @ANYRESDEC=r3], 0x134}, 0x1, 0x0, 0x0, 0x801}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) 02:37:29 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x3}}}, 0xb8}}, 0x0) 02:37:29 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:37:29 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0xf, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:37:29 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 7) [ 2481.067585] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2481.085452] FAULT_INJECTION: forcing a failure. [ 2481.085452] name failslab, interval 1, probability 0, space 0, times 0 [ 2481.088309] CPU: 0 PID: 14194 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2481.090032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2481.092096] Call Trace: [ 2481.092752] dump_stack+0x107/0x167 [ 2481.093661] should_fail.cold+0x5/0xa [ 2481.094615] ? __proc_create+0x2b3/0x8b0 [ 2481.095622] should_failslab+0x5/0x20 [ 2481.096568] kmem_cache_alloc+0x5b/0x310 [ 2481.097578] __proc_create+0x2b3/0x8b0 [ 2481.098546] ? pde_free+0x100/0x100 [ 2481.099471] proc_create_reg+0xb2/0x180 [ 2481.100464] proc_create_net_data+0x8c/0x1b0 [ 2481.101551] ? do_sysctl_args+0x130/0x130 [ 2481.102575] ? proc_symlink+0x280/0x280 [ 2481.103572] ? nf_log_bind_pf+0xf0/0xf0 [ 2481.104545] nf_log_net_init+0x66/0x370 02:37:29 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x8}}}, 0xb8}}, 0x0) [ 2481.105534] ? nf_log_bind_pf+0xf0/0xf0 [ 2481.106662] ops_init+0xbb/0x6b0 [ 2481.107508] setup_net+0x2f4/0x900 [ 2481.108393] ? ops_init+0x6b0/0x6b0 [ 2481.109295] ? down_read_interruptible+0x460/0x460 [ 2481.110527] ? kasan_unpoison_shadow+0x33/0x50 [ 2481.111659] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2481.112922] copy_net_ns+0x2c0/0x5d0 [ 2481.113856] create_new_namespaces+0x3f6/0xb20 [ 2481.115011] copy_namespaces+0x3fb/0x4f0 [ 2481.116022] copy_process+0x393a/0x78b0 [ 2481.117006] ? SOFTIRQ_verbose+0x10/0x10 [ 2481.118015] ? __lockdep_reset_lock+0x180/0x180 [ 2481.119181] ? mark_lock+0xf5/0x2df0 [ 2481.120133] ? __cleanup_sighand+0xb0/0xb0 [ 2481.121196] ? _copy_from_user+0xfb/0x1b0 [ 2481.122242] kernel_clone+0xe7/0x980 [ 2481.123154] ? __lockdep_reset_lock+0x180/0x180 [ 2481.124301] ? create_io_thread+0xf0/0xf0 [ 2481.125336] ? ksys_write+0x21a/0x260 [ 2481.126283] ? lock_downgrade+0x6d0/0x6d0 [ 2481.127304] __do_sys_clone3+0x1e5/0x320 [ 2481.128301] ? __do_sys_clone+0x110/0x110 [ 2481.129351] ? rcu_read_lock_any_held+0x75/0xa0 [ 2481.130495] ? vfs_write+0x354/0xb10 [ 2481.131410] ? fput_many+0x2f/0x1a0 [ 2481.132306] ? ksys_write+0x1a9/0x260 [ 2481.133239] ? __ia32_sys_read+0xb0/0xb0 [ 2481.134247] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2481.135535] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2481.136789] ? trace_hardirqs_on+0x5b/0x180 [ 2481.137851] do_syscall_64+0x33/0x40 [ 2481.138771] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2481.140022] RIP: 0033:0x7f5655a9cb19 [ 2481.140934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2481.145455] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2481.147335] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2481.149085] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2481.150848] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2481.152594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2481.154355] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2481.163378] FAULT_INJECTION: forcing a failure. [ 2481.163378] name failslab, interval 1, probability 0, space 0, times 0 [ 2481.166690] CPU: 0 PID: 14193 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2481.168306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2481.170250] Call Trace: [ 2481.170869] dump_stack+0x107/0x167 [ 2481.171717] should_fail.cold+0x5/0xa [ 2481.172608] ? getname_flags.part.0+0x50/0x4f0 [ 2481.173666] should_failslab+0x5/0x20 [ 2481.174556] kmem_cache_alloc+0x5b/0x310 [ 2481.175501] getname_flags.part.0+0x50/0x4f0 [ 2481.176524] user_path_at_empty+0xa1/0x100 [ 2481.177504] __x64_sys_mount+0x1e9/0x300 [ 2481.178451] ? copy_mnt_ns+0xa00/0xa00 [ 2481.179359] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2481.180574] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2481.181770] do_syscall_64+0x33/0x40 [ 2481.182642] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2481.183826] RIP: 0033:0x7fb4e3052b19 [ 2481.184687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2481.188963] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2481.190729] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2481.192376] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2481.194023] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2481.195673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2481.197326] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 [ 2497.149704] FAULT_INJECTION: forcing a failure. [ 2497.149704] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.151605] CPU: 0 PID: 14203 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2497.152727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2497.154059] Call Trace: [ 2497.154477] dump_stack+0x107/0x167 [ 2497.155053] should_fail.cold+0x5/0xa [ 2497.155656] ? create_object.isra.0+0x3a/0xa20 [ 2497.156384] should_failslab+0x5/0x20 [ 2497.156986] kmem_cache_alloc+0x5b/0x310 [ 2497.157630] create_object.isra.0+0x3a/0xa20 [ 2497.158326] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2497.159135] kmem_cache_alloc+0x159/0x310 [ 2497.159802] __proc_create+0x2b3/0x8b0 [ 2497.160409] ? pde_free+0x100/0x100 [ 2497.161000] proc_create_reg+0xb2/0x180 [ 2497.161645] proc_create_net_data+0x8c/0x1b0 [ 2497.162365] ? do_sysctl_args+0x130/0x130 [ 2497.163018] ? proc_symlink+0x280/0x280 [ 2497.163654] ? nf_log_bind_pf+0xf0/0xf0 [ 2497.164278] nf_log_net_init+0x66/0x370 [ 2497.164910] ? nf_log_bind_pf+0xf0/0xf0 [ 2497.165533] ops_init+0xbb/0x6b0 [ 2497.166063] setup_net+0x2f4/0x900 [ 2497.166633] ? ops_init+0x6b0/0x6b0 [ 2497.167205] ? down_read_interruptible+0x460/0x460 [ 2497.167981] ? kasan_unpoison_shadow+0x33/0x50 [ 2497.168690] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2497.169504] copy_net_ns+0x2c0/0x5d0 [ 2497.170096] create_new_namespaces+0x3f6/0xb20 [ 2497.170828] copy_namespaces+0x3fb/0x4f0 [ 2497.171477] copy_process+0x393a/0x78b0 [ 2497.172090] ? SOFTIRQ_verbose+0x10/0x10 [ 2497.172737] ? __lockdep_reset_lock+0x180/0x180 [ 2497.173454] ? mark_lock+0xf5/0x2df0 [ 2497.174063] ? __cleanup_sighand+0xb0/0xb0 [ 2497.174761] ? _copy_from_user+0xfb/0x1b0 [ 2497.175424] kernel_clone+0xe7/0x980 [ 2497.176021] ? __lockdep_reset_lock+0x180/0x180 [ 2497.176753] ? create_io_thread+0xf0/0xf0 [ 2497.177413] ? ksys_write+0x21a/0x260 [ 2497.178021] ? lock_downgrade+0x6d0/0x6d0 [ 2497.178676] __do_sys_clone3+0x1e5/0x320 [ 2497.179323] ? __do_sys_clone+0x110/0x110 [ 2497.179993] ? rcu_read_lock_any_held+0x75/0xa0 [ 2497.180728] ? vfs_write+0x354/0xb10 [ 2497.181299] ? fput_many+0x2f/0x1a0 [ 2497.181873] ? ksys_write+0x1a9/0x260 [ 2497.182477] ? __ia32_sys_read+0xb0/0xb0 [ 2497.183131] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2497.183955] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2497.185058] ? trace_hardirqs_on+0x5b/0x180 [ 2497.185757] do_syscall_64+0x33/0x40 [ 2497.186348] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2497.187160] RIP: 0033:0x7f5655a9cb19 [ 2497.187734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.190594] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2497.191774] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2497.192879] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2497.193996] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2497.195116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2497.196199] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:37:45 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x9}}}, 0xb8}}, 0x0) 02:37:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="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"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x13104a8, &(0x7f0000000940)=ANY=[@ANYBLOB="04a6d92b54b930c45ca4f674d605ceda2a1eb7bb805ba06dd8d4c6018f069f7a651553a647894e78310349651d6cc5c35355a43f339a546914fc6e94a986c17ea5b7e46c0fe6aed55374f19c5d42e907a6880cfde8d128bd84afa10bc95730cd40f6276a4a0f1680d1f3fa6f35b2dd2d7ed6b7576d7e3b1a4f74c7c24f7ca116d6438775f14d29516648512c4a65078d9a1a8671a6f7e949328361e58d5a2fe4571d0ce0a672828aeae0d3", @ANYRESHEX, @ANYRESDEC, @ANYRES32]) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00'], 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES16=r2, @ANYRESDEC=r3], 0x134}, 0x1, 0x0, 0x0, 0x801}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) 02:37:45 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 38) 02:37:45 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x48, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:37:45 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x2f000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:37:45 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 8) 02:37:45 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 02:37:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) [ 2497.218682] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2497.222512] FAULT_INJECTION: forcing a failure. [ 2497.222512] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.224943] CPU: 1 PID: 14214 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2497.226417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2497.228172] Call Trace: [ 2497.228739] dump_stack+0x107/0x167 [ 2497.229508] should_fail.cold+0x5/0xa [ 2497.230318] ? create_object.isra.0+0x3a/0xa20 [ 2497.231287] should_failslab+0x5/0x20 [ 2497.232090] kmem_cache_alloc+0x5b/0x310 [ 2497.232988] ? __might_fault+0xd3/0x180 [ 2497.233830] create_object.isra.0+0x3a/0xa20 [ 2497.234758] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2497.235827] kmem_cache_alloc+0x159/0x310 [ 2497.236743] getname_flags.part.0+0x50/0x4f0 [ 2497.237673] user_path_at_empty+0xa1/0x100 [ 2497.238576] __x64_sys_mount+0x1e9/0x300 [ 2497.239445] ? copy_mnt_ns+0xa00/0xa00 [ 2497.240330] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2497.241480] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2497.242578] do_syscall_64+0x33/0x40 [ 2497.243368] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2497.244474] RIP: 0033:0x7fb4e3052b19 [ 2497.245304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.249300] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2497.250960] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2497.252498] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2497.254058] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2497.255605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2497.257165] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 02:37:45 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xf}}}, 0xb8}}, 0x0) 02:37:45 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x7e000000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2497.292504] FAT-fs (loop2): bogus logical sector size 22820 [ 2497.293444] FAT-fs (loop2): Can't find a valid FAT filesystem 02:37:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:37:45 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 39) 02:37:45 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4c, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:37:45 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x2f}}}, 0xb8}}, 0x0) 02:37:45 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 9) [ 2497.425266] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2497.427496] FAULT_INJECTION: forcing a failure. [ 2497.427496] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.429195] CPU: 0 PID: 14229 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2497.430166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2497.431333] Call Trace: [ 2497.431710] dump_stack+0x107/0x167 [ 2497.432231] should_fail.cold+0x5/0xa [ 2497.432774] should_failslab+0x5/0x20 [ 2497.433311] __kmalloc_track_caller+0x79/0x370 [ 2497.433951] ? nf_log_net_init+0x9c/0x370 [ 2497.434546] ? nf_log_bind_pf+0xf0/0xf0 [ 2497.435107] kmemdup+0x23/0x50 [ 2497.435592] nf_log_net_init+0x9c/0x370 [ 2497.436154] ? nf_log_bind_pf+0xf0/0xf0 [ 2497.436714] ops_init+0xbb/0x6b0 [ 2497.437195] setup_net+0x2f4/0x900 [ 2497.437697] ? ops_init+0x6b0/0x6b0 [ 2497.438211] ? down_read_interruptible+0x460/0x460 [ 2497.438906] ? kasan_unpoison_shadow+0x33/0x50 [ 2497.439545] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2497.440266] copy_net_ns+0x2c0/0x5d0 [ 2497.440795] create_new_namespaces+0x3f6/0xb20 [ 2497.441441] copy_namespaces+0x3fb/0x4f0 [ 2497.442013] copy_process+0x393a/0x78b0 [ 2497.442577] ? SOFTIRQ_verbose+0x10/0x10 [ 2497.443154] ? __lockdep_reset_lock+0x180/0x180 [ 2497.443807] ? mark_lock+0xf5/0x2df0 [ 2497.444349] ? __cleanup_sighand+0xb0/0xb0 [ 2497.444955] ? _copy_from_user+0xfb/0x1b0 [ 2497.445536] kernel_clone+0xe7/0x980 [ 2497.446059] ? __lockdep_reset_lock+0x180/0x180 [ 2497.446712] ? create_io_thread+0xf0/0xf0 [ 2497.447304] ? ksys_write+0x21a/0x260 [ 2497.447837] ? lock_downgrade+0x6d0/0x6d0 [ 2497.448416] __do_sys_clone3+0x1e5/0x320 [ 2497.448982] ? __do_sys_clone+0x110/0x110 [ 2497.449576] ? rcu_read_lock_any_held+0x75/0xa0 [ 2497.450220] ? vfs_write+0x354/0xb10 [ 2497.450747] ? fput_many+0x2f/0x1a0 [ 2497.451254] ? ksys_write+0x1a9/0x260 [ 2497.451787] ? __ia32_sys_read+0xb0/0xb0 [ 2497.452358] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2497.453090] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2497.453806] ? trace_hardirqs_on+0x5b/0x180 [ 2497.454416] do_syscall_64+0x33/0x40 [ 2497.454936] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2497.455649] RIP: 0033:0x7f5655a9cb19 [ 2497.456170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.458735] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2497.459798] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2497.460805] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2497.461817] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2497.462811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2497.463803] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:37:45 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x80ffffff, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:37:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) [ 2497.520110] FAULT_INJECTION: forcing a failure. [ 2497.520110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2497.521778] CPU: 0 PID: 14238 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2497.522746] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2497.523908] Call Trace: [ 2497.524276] dump_stack+0x107/0x167 [ 2497.524770] should_fail.cold+0x5/0xa [ 2497.525297] strncpy_from_user+0x34/0x470 [ 2497.525864] getname_flags.part.0+0x95/0x4f0 [ 2497.526483] user_path_at_empty+0xa1/0x100 [ 2497.527069] __x64_sys_mount+0x1e9/0x300 [ 2497.527618] ? copy_mnt_ns+0xa00/0xa00 [ 2497.528151] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2497.528876] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2497.529573] do_syscall_64+0x33/0x40 [ 2497.530078] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2497.530779] RIP: 0033:0x7fb4e3052b19 [ 2497.531279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.533762] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2497.534802] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2497.535776] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2497.536745] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2497.537729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2497.538694] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 02:38:01 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x68, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:38:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="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"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x13104a8, &(0x7f0000000940)=ANY=[@ANYBLOB="04a6d92b54b930c45ca4f674d605ceda2a1eb7bb805ba06dd8d4c6018f069f7a651553a647894e78310349651d6cc5c35355a43f339a546914fc6e94a986c17ea5b7e46c0fe6aed55374f19c5d42e907a6880cfde8d128bd84afa10bc95730cd40f6276a4a0f1680d1f3fa6f35b2dd2d7ed6b7576d7e3b1a4f74c7c24f7ca116d6438775f14d29516648512c4a65078d9a1a8671a6f7e949328361e58d5a2fe4571d0ce0a672828aeae0d3", @ANYRESHEX, @ANYRESDEC, @ANYRES32]) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00'], 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="070000000000000000000000000000027f00000100000000000000000000000200000000000018000a00000000000000776ce5dd848907b57f713f95a4e58e4bfb5afdc957e6839c57a60b56ad8dd3dc7c558f0a544781d32b3cccfa493c67f1707544bcdfa3985885b39a9528784ab2c86b8c31626348a3a7da5e42a5bb74585a846c86c3a96dcde870f53b73024d21839e88343e2cd46f9439e1eb23413954f40323b7b5061c7ab2a02e31cb91ef522d57a56e082b9979d84c61f62639946c35e95256c9af5ffb6ffab079014a89d5b34cebbc1945e57bf67ea7a366eeb2e20e41bb2e621906fc0cf0d0d80bca3a68a3dbda8382da78fe48dac3bcd27475f7436a54422dffb54cc065b2e03b58f9952ed8ddb8ae7580cc26b6d6e70b27cfe1d57221f673f0cca7641d0ab4bf4babdd7dc4dbd7020cbeefd3a0aec2297c7b04fed375e230a5709eb65398a22e2ab4a6b85f3ae86f1c778b2ad1e6", @ANYRES16=r2, @ANYRESDEC=r3], 0x134}, 0x1, 0x0, 0x0, 0x801}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) 02:38:01 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 10) 02:38:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:38:01 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 02:38:01 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xf0}}}, 0xb8}}, 0x0) 02:38:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x9effffff, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:38:01 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 40) [ 2513.035464] FAULT_INJECTION: forcing a failure. [ 2513.035464] name failslab, interval 1, probability 0, space 0, times 0 [ 2513.037232] CPU: 1 PID: 14249 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2513.038294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2513.039559] Call Trace: [ 2513.039950] dump_stack+0x107/0x167 [ 2513.040496] should_fail.cold+0x5/0xa [ 2513.041063] ? alloc_fs_context+0x57/0x840 [ 2513.041693] should_failslab+0x5/0x20 [ 2513.042266] kmem_cache_alloc_trace+0x55/0x320 [ 2513.042959] alloc_fs_context+0x57/0x840 [ 2513.043575] path_mount+0xaa3/0x21c0 [ 2513.044134] ? strncpy_from_user+0x9e/0x470 [ 2513.044779] ? finish_automount+0xa90/0xa90 [ 2513.045423] ? getname_flags.part.0+0x1dd/0x4f0 [ 2513.046107] __x64_sys_mount+0x282/0x300 [ 2513.046726] ? copy_mnt_ns+0xa00/0xa00 [ 2513.047314] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2513.048097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2513.048872] do_syscall_64+0x33/0x40 [ 2513.049430] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2513.050192] RIP: 0033:0x7fb4e3052b19 [ 2513.050753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2513.053501] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2513.054647] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2513.055702] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2513.056763] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2513.057823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2513.058860] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 [ 2513.068394] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2513.088008] FAULT_INJECTION: forcing a failure. [ 2513.088008] name failslab, interval 1, probability 0, space 0, times 0 [ 2513.091305] CPU: 0 PID: 14257 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2513.093002] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2513.095044] Call Trace: [ 2513.095690] dump_stack+0x107/0x167 [ 2513.096582] should_fail.cold+0x5/0xa [ 2513.097514] ? create_object.isra.0+0x3a/0xa20 [ 2513.098637] should_failslab+0x5/0x20 [ 2513.099560] kmem_cache_alloc+0x5b/0x310 [ 2513.100558] create_object.isra.0+0x3a/0xa20 [ 2513.101626] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2513.102882] __kmalloc_track_caller+0x177/0x370 [ 2513.104005] ? nf_log_net_init+0x9c/0x370 [ 2513.105011] ? nf_log_bind_pf+0xf0/0xf0 [ 2513.105967] kmemdup+0x23/0x50 [ 2513.106755] nf_log_net_init+0x9c/0x370 02:38:01 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x6c, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2513.107724] ? nf_log_bind_pf+0xf0/0xf0 [ 2513.108835] ops_init+0xbb/0x6b0 [ 2513.109661] setup_net+0x2f4/0x900 [ 2513.110534] ? ops_init+0x6b0/0x6b0 [ 2513.111420] ? down_read_interruptible+0x460/0x460 [ 2513.112605] ? kasan_unpoison_shadow+0x33/0x50 [ 2513.113708] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2513.114943] copy_net_ns+0x2c0/0x5d0 [ 2513.115845] create_new_namespaces+0x3f6/0xb20 [ 2513.116953] copy_namespaces+0x3fb/0x4f0 [ 2513.117933] copy_process+0x393a/0x78b0 [ 2513.118894] ? SOFTIRQ_verbose+0x10/0x10 [ 2513.119835] ? __lockdep_reset_lock+0x180/0x180 [ 2513.120887] ? mark_lock+0xf5/0x2df0 [ 2513.121777] ? __cleanup_sighand+0xb0/0xb0 [ 2513.122783] ? _copy_from_user+0xfb/0x1b0 [ 2513.123732] kernel_clone+0xe7/0x980 [ 2513.124590] ? __lockdep_reset_lock+0x180/0x180 [ 2513.125648] ? create_io_thread+0xf0/0xf0 [ 2513.126619] ? ksys_write+0x21a/0x260 [ 2513.127477] ? lock_downgrade+0x6d0/0x6d0 [ 2513.128414] __do_sys_clone3+0x1e5/0x320 [ 2513.129333] ? __do_sys_clone+0x110/0x110 [ 2513.130311] ? rcu_read_lock_any_held+0x75/0xa0 [ 2513.131367] ? vfs_write+0x354/0xb10 [ 2513.132214] ? fput_many+0x2f/0x1a0 [ 2513.133030] ? ksys_write+0x1a9/0x260 [ 2513.133889] ? __ia32_sys_read+0xb0/0xb0 [ 2513.134816] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2513.135997] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2513.137157] ? trace_hardirqs_on+0x5b/0x180 [ 2513.138128] do_syscall_64+0x33/0x40 [ 2513.138985] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2513.140137] RIP: 0033:0x7f5655a9cb19 [ 2513.140974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2513.145119] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2513.146845] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2513.148446] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2513.150065] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2513.151723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:38:01 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) [ 2513.153350] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2513.159000] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:38:01 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x162}}}, 0xb8}}, 0x0) 02:38:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xd8020000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:38:01 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x74, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:38:01 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 11) 02:38:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) [ 2513.272423] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:38:01 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x300}}}, 0xb8}}, 0x0) [ 2513.295001] FAULT_INJECTION: forcing a failure. [ 2513.295001] name failslab, interval 1, probability 0, space 0, times 0 [ 2513.296567] CPU: 1 PID: 14274 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2513.297503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2513.298613] Call Trace: [ 2513.298963] dump_stack+0x107/0x167 [ 2513.299436] should_fail.cold+0x5/0xa [ 2513.299940] ? create_object.isra.0+0x3a/0xa20 [ 2513.300532] should_failslab+0x5/0x20 [ 2513.301036] kmem_cache_alloc+0x5b/0x310 [ 2513.301561] create_object.isra.0+0x3a/0xa20 [ 2513.302146] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2513.302814] kmem_cache_alloc_trace+0x151/0x320 [ 2513.303419] alloc_fs_context+0x57/0x840 [ 2513.303951] path_mount+0xaa3/0x21c0 [ 2513.304437] ? strncpy_from_user+0x9e/0x470 [ 2513.304987] ? finish_automount+0xa90/0xa90 [ 2513.305540] ? getname_flags.part.0+0x1dd/0x4f0 [ 2513.306142] __x64_sys_mount+0x282/0x300 [ 2513.306673] ? copy_mnt_ns+0xa00/0xa00 [ 2513.307179] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2513.307853] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2513.308519] do_syscall_64+0x33/0x40 [ 2513.308996] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2513.309660] RIP: 0033:0x7fb4e3052b19 [ 2513.310152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2513.312631] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2513.313656] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2513.314627] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2513.315594] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2513.316552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2513.317514] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 [ 2513.377983] FAT-fs (loop2): bogus logical sector size 22820 [ 2513.379528] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2528.666020] FAULT_INJECTION: forcing a failure. [ 2528.666020] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.667820] CPU: 0 PID: 14284 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2528.668769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2528.669908] Call Trace: [ 2528.670277] dump_stack+0x107/0x167 [ 2528.670788] should_fail.cold+0x5/0xa [ 2528.671315] should_failslab+0x5/0x20 [ 2528.671841] __kmalloc_track_caller+0x79/0x370 [ 2528.672466] ? nf_log_net_init+0x9c/0x370 [ 2528.673004] FAULT_INJECTION: forcing a failure. [ 2528.673004] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.673044] ? nf_log_bind_pf+0xf0/0xf0 [ 2528.676121] kmemdup+0x23/0x50 [ 2528.676560] nf_log_net_init+0x9c/0x370 [ 2528.677105] ? nf_log_bind_pf+0xf0/0xf0 [ 2528.677646] ops_init+0xbb/0x6b0 [ 2528.678115] setup_net+0x2f4/0x900 [ 2528.678601] ? ops_init+0x6b0/0x6b0 [ 2528.679108] ? down_read_interruptible+0x460/0x460 [ 2528.679776] ? kasan_unpoison_shadow+0x33/0x50 [ 2528.680397] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2528.681090] copy_net_ns+0x2c0/0x5d0 [ 2528.681603] create_new_namespaces+0x3f6/0xb20 [ 2528.682238] copy_namespaces+0x3fb/0x4f0 [ 2528.682802] copy_process+0x393a/0x78b0 [ 2528.683344] ? SOFTIRQ_verbose+0x10/0x10 [ 2528.683901] ? __lockdep_reset_lock+0x180/0x180 [ 2528.684533] ? mark_lock+0xf5/0x2df0 [ 2528.685062] ? __cleanup_sighand+0xb0/0xb0 [ 2528.685657] ? _copy_from_user+0xfb/0x1b0 [ 2528.686227] kernel_clone+0xe7/0x980 [ 2528.686742] ? __lockdep_reset_lock+0x180/0x180 [ 2528.687376] ? create_io_thread+0xf0/0xf0 [ 2528.687957] ? ksys_write+0x21a/0x260 [ 2528.688481] ? lock_downgrade+0x6d0/0x6d0 [ 2528.689050] __do_sys_clone3+0x1e5/0x320 [ 2528.689602] ? __do_sys_clone+0x110/0x110 [ 2528.690187] ? rcu_read_lock_any_held+0x75/0xa0 [ 2528.690825] ? vfs_write+0x354/0xb10 [ 2528.691333] ? fput_many+0x2f/0x1a0 [ 2528.691830] ? ksys_write+0x1a9/0x260 [ 2528.692350] ? __ia32_sys_read+0xb0/0xb0 [ 2528.692906] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2528.693623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2528.694322] ? trace_hardirqs_on+0x5b/0x180 [ 2528.694919] do_syscall_64+0x33/0x40 [ 2528.695432] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2528.696129] RIP: 0033:0x7f5655a9cb19 [ 2528.696640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2528.699123] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2528.700157] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2528.701123] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2528.702080] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2528.703049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2528.704011] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2528.705017] CPU: 1 PID: 14285 Comm: syz-executor.2 Not tainted 5.10.240 #1 02:38:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xf0ffffff, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:38:16 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 41) 02:38:16 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 12) 02:38:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="00000000000000002e2f66696c6530002c8782c2197694905ffe872c5237e05628a38d4083bb8b3f8819dedb65c8fa8891ef2e1462c2cfba9e00000000001695db9c96825fae6b40b92f15986b7292cc8f0b330455665d2c12275a7daffbe785871c35b8d755d71aa56ad00c6e69a3e0eaf3c85024e519a4544463dee46f99fd50985a8992e5ce914b8f0e7ecccb997edbb2eaf19a724b2ce7015efa4de7ffffffff00fcffffb6f8f436bbe981e1a6ba91259a6aafd3f1d466f93c0bc7999af2f655667a9b00416bfdc4e235b51ea1ad92a70c0d9684450de3b7696289ed9921c9528bb2d716c6cdeae30a001a9f552d7ae0d31519e5d6b524da27bf3da3e419b5250cfc74e1f97b1eff071aa5f18b0f98a6d7339a932350233310973883ee24d3cfb1d3ce451d074b2ba9e9a064a98f17d08cdcd8de7888c0de42ed8444543b659612f66d6f017f348b9505c0247fa3bcdb6d018afdec803e8341be25eb6bf5fc9fb7e3aba34aa524ca0c0314f350b7fe2727153f62852a53eb555c329887f6a218595b1c4598f78cd8ef53b1c192f268cc63bb5c06b54ae9021a659a9fed5653cc28e39dced94c5594f3c760d2ebf0b23c4966acde2cd309f52744143015996942d2c8b586257a47fee179819f8546623faa10d8ffab802ac670dc6a0c08c40b922a43b3dadbd6823d4eb9a8cf79dcee43"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x13104a8, &(0x7f0000000940)=ANY=[@ANYBLOB="04a6d92b54b930c45ca4f674d605ceda2a1eb7bb805ba06dd8d4c6018f069f7a651553a647894e78310349651d6cc5c35355a43f339a546914fc6e94a986c17ea5b7e46c0fe6aed55374f19c5d42e907a6880cfde8d128bd84afa10bc95730cd40f6276a4a0f1680d1f3fa6f35b2dd2d7ed6b7576d7e3b1a4f74c7c24f7ca116d6438775f14d29516648512c4a65078d9a1a8671a6f7e949328361e58d5a2fe4571d0ce0a672828aeae0d3", @ANYRESHEX, @ANYRESDEC, @ANYRES32]) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00'], 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES16=r2, @ANYRESDEC=r3], 0x134}, 0x1, 0x0, 0x0, 0x801}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 2528.706664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2528.708904] Call Trace: [ 2528.709515] dump_stack+0x107/0x167 [ 2528.710347] should_fail.cold+0x5/0xa [ 2528.711222] ? legacy_init_fs_context+0x44/0xe0 [ 2528.712272] should_failslab+0x5/0x20 [ 2528.713141] kmem_cache_alloc_trace+0x55/0x320 [ 2528.714173] ? lockdep_init_map_type+0x2c7/0x780 [ 2528.715256] legacy_init_fs_context+0x44/0xe0 [ 2528.716266] ? generic_parse_monolithic+0x1f0/0x1f0 [ 2528.717386] alloc_fs_context+0x4fd/0x840 [ 2528.718333] path_mount+0xaa3/0x21c0 [ 2528.719195] ? strncpy_from_user+0x9e/0x470 02:38:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:38:16 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x7a, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:38:16 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x900}}}, 0xb8}}, 0x0) 02:38:16 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x6, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) [ 2528.720171] ? finish_automount+0xa90/0xa90 [ 2528.721281] ? getname_flags.part.0+0x1dd/0x4f0 [ 2528.722356] __x64_sys_mount+0x282/0x300 [ 2528.723286] ? copy_mnt_ns+0xa00/0xa00 [ 2528.724174] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2528.725363] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2528.726540] do_syscall_64+0x33/0x40 [ 2528.727394] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2528.728552] RIP: 0033:0x7fb4e3052b19 [ 2528.729397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2528.733552] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2528.735278] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2528.736890] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2528.738502] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2528.740125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2528.741736] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 [ 2528.774519] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:38:16 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xf00}}}, 0xb8}}, 0x0) 02:38:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:38:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xfcffffff, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:38:16 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0xf0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:38:16 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 42) [ 2528.856518] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:38:17 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 13) [ 2528.912656] FAULT_INJECTION: forcing a failure. [ 2528.912656] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.914208] CPU: 0 PID: 14306 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2528.915165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2528.916282] Call Trace: [ 2528.916647] dump_stack+0x107/0x167 [ 2528.917144] should_fail.cold+0x5/0xa [ 2528.917677] ? create_object.isra.0+0x3a/0xa20 [ 2528.918301] should_failslab+0x5/0x20 [ 2528.918831] kmem_cache_alloc+0x5b/0x310 [ 2528.919406] create_object.isra.0+0x3a/0xa20 [ 2528.919998] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2528.920651] __kmalloc+0x16e/0x390 [ 2528.921114] __register_sysctl_table+0x112/0x1090 [ 2528.921733] ? trace_hardirqs_on+0x5b/0x180 [ 2528.922286] ? proc_sys_evict_inode+0x180/0x180 [ 2528.922890] ? __kmalloc_track_caller+0x2c6/0x370 [ 2528.923506] ? nf_log_net_init+0x9c/0x370 [ 2528.924066] ? memcpy+0x39/0x60 [ 2528.924494] nf_log_net_init+0x101/0x370 [ 2528.925016] ? nf_log_bind_pf+0xf0/0xf0 [ 2528.925526] ops_init+0xbb/0x6b0 [ 2528.925968] setup_net+0x2f4/0x900 [ 2528.926424] ? ops_init+0x6b0/0x6b0 [ 2528.926898] ? down_read_interruptible+0x460/0x460 [ 2528.927525] ? kasan_unpoison_shadow+0x33/0x50 [ 2528.928138] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2528.928796] copy_net_ns+0x2c0/0x5d0 [ 2528.929276] create_new_namespaces+0x3f6/0xb20 [ 2528.929866] copy_namespaces+0x3fb/0x4f0 [ 2528.930388] copy_process+0x393a/0x78b0 [ 2528.930907] ? SOFTIRQ_verbose+0x10/0x10 [ 2528.931428] ? __lockdep_reset_lock+0x180/0x180 [ 2528.932018] ? mark_lock+0xf5/0x2df0 [ 2528.932509] ? __cleanup_sighand+0xb0/0xb0 [ 2528.933061] ? _copy_from_user+0xfb/0x1b0 [ 2528.933593] kernel_clone+0xe7/0x980 [ 2528.934069] ? __lockdep_reset_lock+0x180/0x180 [ 2528.934672] ? create_io_thread+0xf0/0xf0 [ 2528.935210] ? ksys_write+0x21a/0x260 [ 2528.935695] ? lock_downgrade+0x6d0/0x6d0 [ 2528.936227] __do_sys_clone3+0x1e5/0x320 [ 2528.936746] ? __do_sys_clone+0x110/0x110 [ 2528.937289] ? rcu_read_lock_any_held+0x75/0xa0 [ 2528.937881] ? vfs_write+0x354/0xb10 [ 2528.938353] ? fput_many+0x2f/0x1a0 [ 2528.938826] ? ksys_write+0x1a9/0x260 [ 2528.939308] ? __ia32_sys_read+0xb0/0xb0 [ 2528.939827] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2528.940489] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2528.941140] ? trace_hardirqs_on+0x5b/0x180 [ 2528.941687] do_syscall_64+0x33/0x40 [ 2528.942159] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2528.942812] RIP: 0033:0x7f5655a9cb19 [ 2528.943284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2528.945740] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2528.946723] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2528.947622] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2528.948523] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2528.949425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2528.950328] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2528.961597] FAULT_INJECTION: forcing a failure. [ 2528.961597] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.963050] CPU: 0 PID: 14308 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2528.963923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2528.964955] Call Trace: [ 2528.965285] dump_stack+0x107/0x167 [ 2528.965742] should_fail.cold+0x5/0xa [ 2528.966220] ? create_object.isra.0+0x3a/0xa20 [ 2528.966801] should_failslab+0x5/0x20 [ 2528.967283] kmem_cache_alloc+0x5b/0x310 [ 2528.967800] create_object.isra.0+0x3a/0xa20 [ 2528.968349] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2528.968990] kmem_cache_alloc_trace+0x151/0x320 [ 2528.969613] ? lockdep_init_map_type+0x2c7/0x780 [ 2528.970213] legacy_init_fs_context+0x44/0xe0 [ 2528.970781] ? generic_parse_monolithic+0x1f0/0x1f0 [ 2528.971403] alloc_fs_context+0x4fd/0x840 [ 2528.971928] path_mount+0xaa3/0x21c0 [ 2528.972398] ? strncpy_from_user+0x9e/0x470 [ 2528.972942] ? finish_automount+0xa90/0xa90 [ 2528.973481] ? getname_flags.part.0+0x1dd/0x4f0 [ 2528.974079] __x64_sys_mount+0x282/0x300 [ 2528.974607] ? copy_mnt_ns+0xa00/0xa00 [ 2528.975136] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2528.975826] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2528.976512] do_syscall_64+0x33/0x40 [ 2528.977001] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2528.977640] RIP: 0033:0x7fb4e3052b19 [ 2528.978105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2528.980394] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2528.981345] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2528.982233] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2528.983126] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2528.984012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2528.984903] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 [ 2529.013765] FAT-fs (loop2): bogus logical sector size 22820 [ 2529.015177] FAT-fs (loop2): Can't find a valid FAT filesystem 02:38:33 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x7, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 02:38:33 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 14) 02:38:33 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x1e7, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:38:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xfffff000, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:38:33 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x2f00}}}, 0xb8}}, 0x0) 02:38:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="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"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x13104a8, &(0x7f0000000940)=ANY=[@ANYBLOB="04a6d92b54b930c45ca4f674d605ceda2a1eb7bb805ba06dd8d4c6018f069f7a651553a647894e78310349651d6cc5c35355a43f339a546914fc6e94a986c17ea5b7e46c0fe6aed55374f19c5d42e907a6880cfde8d128bd84afa10bc95730cd40f6276a4a0f1680d1f3fa6f35b2dd2d7ed6b7576d7e3b1a4f74c7c24f7ca116d6438775f14d29516648512c4a65078d9a1a8671a6f7e949328361e58d5a2fe4571d0ce0a672828aeae0d3", @ANYRESHEX, @ANYRESDEC, @ANYRES32]) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00'], 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES16=r2, @ANYRESDEC=r3], 0x134}, 0x1, 0x0, 0x0, 0x801}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) lseek(r1, 0x0, 0x2) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0x200f5ef, 0x0) 02:38:33 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:38:33 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 43) [ 2545.652375] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2545.666232] FAULT_INJECTION: forcing a failure. [ 2545.666232] name failslab, interval 1, probability 0, space 0, times 0 [ 2545.668807] CPU: 1 PID: 14326 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2545.670278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2545.672062] Call Trace: [ 2545.672627] dump_stack+0x107/0x167 [ 2545.673398] should_fail.cold+0x5/0xa [ 2545.674204] ? legacy_init_fs_context+0x44/0xe0 [ 2545.675191] should_failslab+0x5/0x20 [ 2545.675993] kmem_cache_alloc_trace+0x55/0x320 [ 2545.676960] ? lockdep_init_map_type+0x2c7/0x780 [ 2545.677959] legacy_init_fs_context+0x44/0xe0 [ 2545.678414] FAULT_INJECTION: forcing a failure. [ 2545.678414] name failslab, interval 1, probability 0, space 0, times 0 [ 2545.678906] ? generic_parse_monolithic+0x1f0/0x1f0 [ 2545.678924] alloc_fs_context+0x4fd/0x840 [ 2545.678959] path_mount+0xaa3/0x21c0 [ 2545.684139] ? strncpy_from_user+0x9e/0x470 [ 2545.685047] ? finish_automount+0xa90/0xa90 [ 2545.685953] ? getname_flags.part.0+0x1dd/0x4f0 [ 2545.686954] __x64_sys_mount+0x282/0x300 [ 2545.687811] ? copy_mnt_ns+0xa00/0xa00 [ 2545.688637] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2545.689744] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2545.690851] do_syscall_64+0x33/0x40 [ 2545.691634] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2545.692721] RIP: 0033:0x7fb4e3052b19 [ 2545.693503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2545.697432] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2545.699045] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2545.700545] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2545.702044] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2545.703553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2545.705055] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 [ 2545.706610] CPU: 0 PID: 14329 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2545.708272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2545.710157] Call Trace: [ 2545.710774] dump_stack+0x107/0x167 [ 2545.711688] should_fail.cold+0x5/0xa [ 2545.712569] ? __register_sysctl_table+0x9ef/0x1090 [ 2545.713708] should_failslab+0x5/0x20 [ 2545.714597] __kmalloc+0x72/0x390 [ 2545.715449] __register_sysctl_table+0x9ef/0x1090 [ 2545.716581] ? proc_sys_evict_inode+0x180/0x180 [ 2545.717648] ? __kmalloc_track_caller+0x2c6/0x370 [ 2545.718748] ? nf_log_net_init+0x9c/0x370 [ 2545.719723] ? memcpy+0x39/0x60 [ 2545.720489] nf_log_net_init+0x101/0x370 [ 2545.721424] ? nf_log_bind_pf+0xf0/0xf0 [ 2545.722342] ops_init+0xbb/0x6b0 [ 2545.723126] setup_net+0x2f4/0x900 [ 2545.723945] ? ops_init+0x6b0/0x6b0 [ 2545.724796] ? down_read_interruptible+0x460/0x460 [ 2545.725910] ? kasan_unpoison_shadow+0x33/0x50 [ 2545.726946] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2545.728083] copy_net_ns+0x2c0/0x5d0 [ 2545.728928] create_new_namespaces+0x3f6/0xb20 [ 2545.729961] copy_namespaces+0x3fb/0x4f0 [ 2545.730889] copy_process+0x393a/0x78b0 [ 2545.731784] ? SOFTIRQ_verbose+0x10/0x10 [ 2545.732695] ? __lockdep_reset_lock+0x180/0x180 [ 2545.733736] ? mark_lock+0xf5/0x2df0 [ 2545.734681] ? __cleanup_sighand+0xb0/0xb0 [ 2545.735860] ? _copy_from_user+0xfb/0x1b0 [ 2545.736986] kernel_clone+0xe7/0x980 [ 2545.737987] ? __lockdep_reset_lock+0x180/0x180 [ 2545.739258] ? create_io_thread+0xf0/0xf0 [ 2545.740400] ? ksys_write+0x21a/0x260 [ 2545.741426] ? lock_downgrade+0x6d0/0x6d0 [ 2545.742556] __do_sys_clone3+0x1e5/0x320 [ 2545.743651] ? __do_sys_clone+0x110/0x110 [ 2545.744795] ? rcu_read_lock_any_held+0x75/0xa0 [ 2545.746043] ? vfs_write+0x354/0xb10 [ 2545.747052] ? fput_many+0x2f/0x1a0 [ 2545.748032] ? ksys_write+0x1a9/0x260 [ 2545.749068] ? __ia32_sys_read+0xb0/0xb0 [ 2545.750165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2545.751584] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2545.752973] ? trace_hardirqs_on+0x5b/0x180 [ 2545.754137] do_syscall_64+0x33/0x40 [ 2545.755153] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2545.756530] RIP: 0033:0x7f5655a9cb19 [ 2545.757534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2545.762495] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2545.764551] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2545.766474] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2545.768395] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2545.770321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2545.772248] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2545.774770] sysctl could not get directory: //net -12 [ 2545.776969] CPU: 0 PID: 14329 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2545.778837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2545.781061] Call Trace: [ 2545.781765] dump_stack+0x107/0x167 [ 2545.782742] __register_sysctl_table+0xdf4/0x1090 [ 2545.784054] ? proc_sys_evict_inode+0x180/0x180 [ 2545.785285] ? __kmalloc_track_caller+0x2c6/0x370 [ 2545.786575] ? nf_log_net_init+0x9c/0x370 [ 2545.787690] ? memcpy+0x39/0x60 [ 2545.788715] nf_log_net_init+0x101/0x370 [ 2545.789825] ? nf_log_bind_pf+0xf0/0xf0 [ 2545.790903] ops_init+0xbb/0x6b0 [ 2545.791819] setup_net+0x2f4/0x900 [ 2545.792777] ? ops_init+0x6b0/0x6b0 [ 2545.793964] ? down_read_interruptible+0x460/0x460 [ 2545.795642] ? kasan_unpoison_shadow+0x33/0x50 [ 2545.797202] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2545.798944] copy_net_ns+0x2c0/0x5d0 [ 2545.800231] create_new_namespaces+0x3f6/0xb20 [ 2545.801808] copy_namespaces+0x3fb/0x4f0 [ 2545.803216] copy_process+0x393a/0x78b0 [ 2545.804323] ? SOFTIRQ_verbose+0x10/0x10 [ 2545.805464] ? __lockdep_reset_lock+0x180/0x180 [ 2545.806726] ? mark_lock+0xf5/0x2df0 [ 2545.807969] ? __cleanup_sighand+0xb0/0xb0 [ 2545.809175] ? _copy_from_user+0xfb/0x1b0 02:38:33 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) [ 2545.810352] kernel_clone+0xe7/0x980 [ 2545.811663] ? __lockdep_reset_lock+0x180/0x180 [ 2545.812916] ? create_io_thread+0xf0/0xf0 [ 2545.814051] ? ksys_write+0x21a/0x260 [ 2545.815078] ? lock_downgrade+0x6d0/0x6d0 [ 2545.816174] __do_sys_clone3+0x1e5/0x320 [ 2545.817247] ? __do_sys_clone+0x110/0x110 [ 2545.818371] ? rcu_read_lock_any_held+0x75/0xa0 [ 2545.819604] ? vfs_write+0x354/0xb10 [ 2545.820594] ? fput_many+0x2f/0x1a0 [ 2545.821551] ? ksys_write+0x1a9/0x260 [ 2545.822559] ? __ia32_sys_read+0xb0/0xb0 [ 2545.823649] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2545.825030] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2545.826380] ? trace_hardirqs_on+0x5b/0x180 [ 2545.827529] do_syscall_64+0x33/0x40 [ 2545.828513] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2545.829874] RIP: 0033:0x7f5655a9cb19 02:38:33 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x300, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:38:33 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x6201}}}, 0xb8}}, 0x0) [ 2545.830859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2545.835824] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2545.837841] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2545.839744] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2545.841623] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2545.843519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2545.843892] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2545.845397] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:38:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xffffff7f, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:38:34 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xf000}}}, 0xb8}}, 0x0) 02:38:34 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 15) 02:38:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xffffff80, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:38:34 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x500, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2546.027258] FAULT_INJECTION: forcing a failure. [ 2546.027258] name failslab, interval 1, probability 0, space 0, times 0 [ 2546.029831] CPU: 0 PID: 14342 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2546.031417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2546.033306] Call Trace: [ 2546.033908] dump_stack+0x107/0x167 [ 2546.034736] should_fail.cold+0x5/0xa [ 2546.035612] ? create_object.isra.0+0x3a/0xa20 [ 2546.036647] should_failslab+0x5/0x20 [ 2546.037510] kmem_cache_alloc+0x5b/0x310 [ 2546.038444] create_object.isra.0+0x3a/0xa20 [ 2546.039441] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2546.040588] kmem_cache_alloc_trace+0x151/0x320 [ 2546.041639] ? lockdep_init_map_type+0x2c7/0x780 [ 2546.042720] legacy_init_fs_context+0x44/0xe0 [ 2546.043736] ? generic_parse_monolithic+0x1f0/0x1f0 [ 2546.044873] alloc_fs_context+0x4fd/0x840 [ 2546.045821] path_mount+0xaa3/0x21c0 [ 2546.046677] ? strncpy_from_user+0x9e/0x470 [ 2546.047666] ? finish_automount+0xa90/0xa90 [ 2546.048648] ? getname_flags.part.0+0x1dd/0x4f0 [ 2546.049716] __x64_sys_mount+0x282/0x300 [ 2546.050639] ? copy_mnt_ns+0xa00/0xa00 [ 2546.051560] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2546.052747] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2546.053929] do_syscall_64+0x33/0x40 [ 2546.054770] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2546.055996] RIP: 0033:0x7fb4e3052b19 [ 2546.056835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2546.061111] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2546.062878] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2546.064545] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2546.065019] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2546.066195] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2546.066208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2546.066221] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 [ 2546.130269] FAT-fs (loop2): bogus logical sector size 22820 [ 2546.131837] FAT-fs (loop2): Can't find a valid FAT filesystem 02:38:34 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x8, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 02:38:34 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:38:34 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x80000}}}, 0xb8}}, 0x0) 02:38:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="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"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x13104a8, &(0x7f0000000940)=ANY=[@ANYBLOB="04a6d92b54b930c45ca4f674d605ceda2a1eb7bb805ba06dd8d4c6018f069f7a651553a647894e78310349651d6cc5c35355a43f339a546914fc6e94a986c17ea5b7e46c0fe6aed55374f19c5d42e907a6880cfde8d128bd84afa10bc95730cd40f6276a4a0f1680d1f3fa6f35b2dd2d7ed6b7576d7e3b1a4f74c7c24f7ca116d6438775f14d29516648512c4a65078d9a1a8671a6f7e949328361e58d5a2fe4571d0ce0a672828aeae0d3", @ANYRESHEX, @ANYRESDEC, @ANYRES32]) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00'], 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES16=r2, @ANYRESDEC=r3], 0x134}, 0x1, 0x0, 0x0, 0x801}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) lseek(r1, 0x0, 0x2) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0x200f5ef, 0x0) 02:38:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xffffff9e, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:38:59 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 16) 02:38:59 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x9, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 02:38:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffff0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:38:59 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 44) 02:38:59 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) [ 2570.983088] FAULT_INJECTION: forcing a failure. [ 2570.983088] name failslab, interval 1, probability 0, space 0, times 0 [ 2570.984524] FAULT_INJECTION: forcing a failure. [ 2570.984524] name failslab, interval 1, probability 0, space 0, times 0 [ 2570.984683] CPU: 0 PID: 14370 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2570.988153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2570.989288] Call Trace: [ 2570.989656] dump_stack+0x107/0x167 [ 2570.990158] should_fail.cold+0x5/0xa [ 2570.990687] ? __register_sysctl_table+0x9ef/0x1090 [ 2570.991373] should_failslab+0x5/0x20 [ 2570.991899] __kmalloc+0x72/0x390 [ 2570.992383] __register_sysctl_table+0x9ef/0x1090 [ 2570.993063] ? proc_sys_evict_inode+0x180/0x180 [ 2570.993697] ? __kmalloc_track_caller+0x2c6/0x370 [ 2570.994330] ? nf_log_net_init+0x9c/0x370 [ 2570.994877] ? memcpy+0x39/0x60 [ 2570.995328] nf_log_net_init+0x101/0x370 [ 2570.995867] ? nf_log_bind_pf+0xf0/0xf0 [ 2570.996391] ops_init+0xbb/0x6b0 [ 2570.996845] setup_net+0x2f4/0x900 [ 2570.997313] ? ops_init+0x6b0/0x6b0 [ 2570.997791] ? down_read_interruptible+0x460/0x460 [ 2570.998446] ? kasan_unpoison_shadow+0x33/0x50 [ 2570.999095] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2570.999787] copy_net_ns+0x2c0/0x5d0 [ 2571.000283] create_new_namespaces+0x3f6/0xb20 [ 2571.000927] copy_namespaces+0x3fb/0x4f0 [ 2571.001488] copy_process+0x393a/0x78b0 [ 2571.002030] ? SOFTIRQ_verbose+0x10/0x10 [ 2571.002586] ? __lockdep_reset_lock+0x180/0x180 [ 2571.003250] ? mark_lock+0xf5/0x2df0 [ 2571.003800] ? __cleanup_sighand+0xb0/0xb0 [ 2571.004395] ? _copy_from_user+0xfb/0x1b0 [ 2571.004976] kernel_clone+0xe7/0x980 [ 2571.005485] ? __lockdep_reset_lock+0x180/0x180 [ 2571.006135] ? create_io_thread+0xf0/0xf0 [ 2571.006692] ? ksys_write+0x21a/0x260 [ 2571.007208] ? lock_downgrade+0x6d0/0x6d0 [ 2571.007754] __do_sys_clone3+0x1e5/0x320 [ 2571.008280] ? __do_sys_clone+0x110/0x110 [ 2571.008833] ? rcu_read_lock_any_held+0x75/0xa0 [ 2571.009472] ? vfs_write+0x354/0xb10 [ 2571.009979] ? fput_many+0x2f/0x1a0 [ 2571.010470] ? ksys_write+0x1a9/0x260 [ 2571.010989] ? __ia32_sys_read+0xb0/0xb0 [ 2571.011530] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2571.012211] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2571.012879] ? trace_hardirqs_on+0x5b/0x180 [ 2571.013439] do_syscall_64+0x33/0x40 [ 2571.013925] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2571.014587] RIP: 0033:0x7f5655a9cb19 [ 2571.015114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2571.017565] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2571.018592] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2571.019567] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2571.020510] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2571.021432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2571.022358] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2571.023358] CPU: 1 PID: 14369 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2571.023659] sysctl could not get directory: [ 2571.024950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2571.024958] Call Trace: [ 2571.024987] dump_stack+0x107/0x167 [ 2571.025017] should_fail.cold+0x5/0xa [ 2571.025042] ? create_object.isra.0+0x3a/0xa20 [ 2571.025641] / [ 2571.027561] should_failslab+0x5/0x20 [ 2571.027585] kmem_cache_alloc+0x5b/0x310 [ 2571.027921] /net -12 [ 2571.028738] create_object.isra.0+0x3a/0xa20 [ 2571.028759] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2571.035122] kmem_cache_alloc_trace+0x151/0x320 [ 2571.036201] ? lockdep_init_map_type+0x2c7/0x780 [ 2571.037290] legacy_init_fs_context+0x44/0xe0 [ 2571.038320] ? generic_parse_monolithic+0x1f0/0x1f0 [ 2571.039486] alloc_fs_context+0x4fd/0x840 [ 2571.040530] path_mount+0xaa3/0x21c0 [ 2571.041389] ? strncpy_from_user+0x9e/0x470 [ 2571.042370] ? finish_automount+0xa90/0xa90 [ 2571.043389] ? getname_flags.part.0+0x1dd/0x4f0 [ 2571.044515] __x64_sys_mount+0x282/0x300 [ 2571.045471] ? copy_mnt_ns+0xa00/0xa00 [ 2571.046359] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2571.047643] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2571.048865] do_syscall_64+0x33/0x40 [ 2571.049734] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2571.050893] RIP: 0033:0x7fb4e3052b19 [ 2571.051774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2571.056000] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2571.057743] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2571.059401] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2571.061031] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2571.062652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2571.064288] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 [ 2571.065939] CPU: 0 PID: 14370 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2571.066867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2571.067998] Call Trace: [ 2571.068355] dump_stack+0x107/0x167 [ 2571.068846] __register_sysctl_table+0xdf4/0x1090 [ 2571.069584] ? proc_sys_evict_inode+0x180/0x180 [ 2571.070358] ? __kmalloc_track_caller+0x2c6/0x370 [ 2571.071108] ? nf_log_net_init+0x9c/0x370 [ 2571.071684] ? memcpy+0x39/0x60 [ 2571.072152] nf_log_net_init+0x101/0x370 [ 2571.072709] ? nf_log_bind_pf+0xf0/0xf0 [ 2571.073248] ops_init+0xbb/0x6b0 [ 2571.073720] setup_net+0x2f4/0x900 [ 2571.074241] ? ops_init+0x6b0/0x6b0 [ 2571.074853] ? down_read_interruptible+0x460/0x460 [ 2571.075703] ? kasan_unpoison_shadow+0x33/0x50 [ 2571.076372] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2571.077062] copy_net_ns+0x2c0/0x5d0 [ 2571.077558] create_new_namespaces+0x3f6/0xb20 [ 2571.078147] copy_namespaces+0x3fb/0x4f0 [ 2571.078764] copy_process+0x393a/0x78b0 [ 2571.079293] ? SOFTIRQ_verbose+0x10/0x10 [ 2571.079837] ? __lockdep_reset_lock+0x180/0x180 [ 2571.080457] ? mark_lock+0xf5/0x2df0 [ 2571.080958] ? __cleanup_sighand+0xb0/0xb0 [ 2571.081546] ? _copy_from_user+0xfb/0x1b0 [ 2571.082128] kernel_clone+0xe7/0x980 [ 2571.082620] ? __lockdep_reset_lock+0x180/0x180 [ 2571.083225] ? create_io_thread+0xf0/0xf0 [ 2571.083755] ? ksys_write+0x21a/0x260 [ 2571.084268] ? lock_downgrade+0x6d0/0x6d0 [ 2571.084818] __do_sys_clone3+0x1e5/0x320 [ 2571.085352] ? __do_sys_clone+0x110/0x110 [ 2571.085887] ? rcu_read_lock_any_held+0x75/0xa0 [ 2571.086473] ? vfs_write+0x354/0xb10 [ 2571.086941] ? fput_many+0x2f/0x1a0 [ 2571.087407] ? ksys_write+0x1a9/0x260 [ 2571.087887] ? __ia32_sys_read+0xb0/0xb0 [ 2571.088399] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2571.089054] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2571.089695] ? trace_hardirqs_on+0x5b/0x180 [ 2571.090240] do_syscall_64+0x33/0x40 [ 2571.090730] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2571.091417] RIP: 0033:0x7f5655a9cb19 [ 2571.091912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2571.094335] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2571.095361] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2571.096300] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2571.097265] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2571.098215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2571.099146] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:38:59 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xc9ffff}}}, 0xb8}}, 0x0) 02:38:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="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"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x13104a8, &(0x7f0000000940)=ANY=[@ANYBLOB="04a6d92b54b930c45ca4f674d605ceda2a1eb7bb805ba06dd8d4c6018f069f7a651553a647894e78310349651d6cc5c35355a43f339a546914fc6e94a986c17ea5b7e46c0fe6aed55374f19c5d42e907a6880cfde8d128bd84afa10bc95730cd40f6276a4a0f1680d1f3fa6f35b2dd2d7ed6b7576d7e3b1a4f74c7c24f7ca116d6438775f14d29516648512c4a65078d9a1a8671a6f7e949328361e58d5a2fe4571d0ce0a672828aeae0d3", @ANYRESHEX, @ANYRESDEC, @ANYRES32]) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00'], 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES16=r2, @ANYRESDEC=r3], 0x134}, 0x1, 0x0, 0x0, 0x801}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) lseek(r1, 0x0, 0x2) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0x200f5ef, 0x0) 02:38:59 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x600, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:38:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2571.147452] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2571.168218] FAT-fs (loop2): bogus logical sector size 22820 [ 2571.168966] FAT-fs (loop2): Can't find a valid FAT filesystem 02:38:59 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x700, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:38:59 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xe, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 02:38:59 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 17) 02:38:59 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xf0ffff}}}, 0xb8}}, 0x0) 02:38:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="00000000000000002e2f66696c6530002c8782c2197694905ffe872c5237e05628a38d4083bb8b3f8819dedb65c8fa8891ef2e1462c2cfba9e00000000001695db9c96825fae6b40b92f15986b7292cc8f0b330455665d2c12275a7daffbe785871c35b8d755d71aa56ad00c6e69a3e0eaf3c85024e519a4544463dee46f99fd50985a8992e5ce914b8f0e7ecccb997edbb2eaf19a724b2ce7015efa4de7ffffffff00fcffffb6f8f436bbe981e1a6ba91259a6aafd3f1d466f93c0bc7999af2f655667a9b00416bfdc4e235b51ea1ad92a70c0d9684450de3b7696289ed9921c9528bb2d716c6cdeae30a001a9f552d7ae0d31519e5d6b524da27bf3da3e419b5250cfc74e1f97b1eff071aa5f18b0f98a6d7339a932350233310973883ee24d3cfb1d3ce451d074b2ba9e9a064a98f17d08cdcd8de7888c0de42ed8444543b659612f66d6f017f348b9505c0247fa3bcdb6d018afdec803e8341be25eb6bf5fc9fb7e3aba34aa524ca0c0314f350b7fe2727153f62852a53eb555c329887f6a218595b1c4598f78cd8ef53b1c192f268cc63bb5c06b54ae9021a659a9fed5653cc28e39dced94c5594f3c760d2ebf0b23c4966acde2cd309f52744143015996942d2c8b586257a47fee179819f8546623faa10d8ffab802ac670dc6a0c08c40b922a43b3dadbd6823d4eb9a8cf79dcee43"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x13104a8, &(0x7f0000000940)=ANY=[@ANYBLOB="04a6d92b54b930c45ca4f674d605ceda2a1eb7bb805ba06dd8d4c6018f069f7a651553a647894e78310349651d6cc5c35355a43f339a546914fc6e94a986c17ea5b7e46c0fe6aed55374f19c5d42e907a6880cfde8d128bd84afa10bc95730cd40f6276a4a0f1680d1f3fa6f35b2dd2d7ed6b7576d7e3b1a4f74c7c24f7ca116d6438775f14d29516648512c4a65078d9a1a8671a6f7e949328361e58d5a2fe4571d0ce0a672828aeae0d3", @ANYRESHEX, @ANYRESDEC, @ANYRES32]) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00'], 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES16=r2, @ANYRESDEC=r3], 0x134}, 0x1, 0x0, 0x0, 0x801}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 2571.229627] FAULT_INJECTION: forcing a failure. [ 2571.229627] name failslab, interval 1, probability 0, space 0, times 0 [ 2571.231119] CPU: 0 PID: 14383 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2571.231973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2571.232990] Call Trace: [ 2571.233322] dump_stack+0x107/0x167 [ 2571.233772] should_fail.cold+0x5/0xa [ 2571.234243] ? create_object.isra.0+0x3a/0xa20 [ 2571.234813] should_failslab+0x5/0x20 [ 2571.235294] kmem_cache_alloc+0x5b/0x310 [ 2571.235809] create_object.isra.0+0x3a/0xa20 [ 2571.236349] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2571.236990] kmem_cache_alloc+0x159/0x310 [ 2571.237519] getname_kernel+0x4e/0x370 [ 2571.237999] kern_path+0x1b/0x40 [ 2571.238430] lookup_bdev+0x100/0x220 [ 2571.238890] ? bd_acquire+0x450/0x450 [ 2571.239372] ? kfree+0x1ab/0x340 [ 2571.239791] ? logfc+0x590/0x590 [ 2571.240215] blkdev_get_by_path+0x1b/0x110 [ 2571.240740] mount_bdev+0x5b/0x400 [ 2571.241178] ? msdos_mount+0x40/0x40 [ 2571.241637] ? setup+0xd0/0xd0 [ 2571.242028] legacy_get_tree+0x105/0x220 [ 2571.242527] vfs_get_tree+0x8e/0x300 [ 2571.242987] path_mount+0x1331/0x21c0 [ 2571.243467] ? strncpy_from_user+0x9e/0x470 [ 2571.243998] ? finish_automount+0xa90/0xa90 [ 2571.244532] ? getname_flags.part.0+0x1dd/0x4f0 [ 2571.245109] __x64_sys_mount+0x282/0x300 [ 2571.245610] ? copy_mnt_ns+0xa00/0xa00 [ 2571.246095] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2571.246741] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2571.247385] do_syscall_64+0x33/0x40 [ 2571.247842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2571.248484] RIP: 0033:0x7fb4e3052b19 [ 2571.248941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2571.251225] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2571.252165] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2571.253045] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2571.253924] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2571.254799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2571.255702] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 02:38:59 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) [ 2571.267413] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:38:59 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 45) [ 2571.311596] FAULT_INJECTION: forcing a failure. [ 2571.311596] name failslab, interval 1, probability 0, space 0, times 0 [ 2571.313014] CPU: 0 PID: 14395 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2571.313864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2571.314877] Call Trace: [ 2571.315215] dump_stack+0x107/0x167 [ 2571.315671] should_fail.cold+0x5/0xa [ 2571.316142] ? __register_sysctl_table+0x9ef/0x1090 [ 2571.316749] should_failslab+0x5/0x20 [ 2571.317215] __kmalloc+0x72/0x390 [ 2571.317648] __register_sysctl_table+0x9ef/0x1090 [ 2571.318245] ? proc_sys_evict_inode+0x180/0x180 [ 2571.318813] ? __kmalloc_track_caller+0x2c6/0x370 [ 2571.319408] ? nf_log_net_init+0x9c/0x370 [ 2571.319916] ? memcpy+0x39/0x60 [ 2571.320321] nf_log_net_init+0x101/0x370 [ 2571.320816] ? nf_log_bind_pf+0xf0/0xf0 [ 2571.321302] ops_init+0xbb/0x6b0 [ 2571.321719] setup_net+0x2f4/0x900 [ 2571.322153] ? ops_init+0x6b0/0x6b0 [ 2571.322597] ? down_read_interruptible+0x460/0x460 [ 2571.323202] ? kasan_unpoison_shadow+0x33/0x50 [ 2571.323755] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2571.324378] copy_net_ns+0x2c0/0x5d0 [ 2571.324843] create_new_namespaces+0x3f6/0xb20 [ 2571.325403] copy_namespaces+0x3fb/0x4f0 [ 2571.325906] copy_process+0x393a/0x78b0 [ 2571.326393] ? SOFTIRQ_verbose+0x10/0x10 [ 2571.326888] ? __lockdep_reset_lock+0x180/0x180 [ 2571.327494] ? mark_lock+0xf5/0x2df0 [ 2571.327964] ? __cleanup_sighand+0xb0/0xb0 [ 2571.328534] ? _copy_from_user+0xfb/0x1b0 [ 2571.329045] kernel_clone+0xe7/0x980 [ 2571.329498] ? __lockdep_reset_lock+0x180/0x180 [ 2571.330068] ? create_io_thread+0xf0/0xf0 [ 2571.330587] ? ksys_write+0x21a/0x260 [ 2571.331063] ? lock_downgrade+0x6d0/0x6d0 [ 2571.331569] __do_sys_clone3+0x1e5/0x320 [ 2571.332065] ? __do_sys_clone+0x110/0x110 [ 2571.332589] ? rcu_read_lock_any_held+0x75/0xa0 [ 2571.333153] ? vfs_write+0x354/0xb10 [ 2571.333610] ? fput_many+0x2f/0x1a0 [ 2571.334055] ? ksys_write+0x1a9/0x260 [ 2571.334522] ? __ia32_sys_read+0xb0/0xb0 [ 2571.335021] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2571.335666] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2571.336294] ? trace_hardirqs_on+0x5b/0x180 [ 2571.336822] do_syscall_64+0x33/0x40 [ 2571.337281] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2571.337904] RIP: 0033:0x7f5655a9cb19 [ 2571.338355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2571.340606] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2571.341532] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2571.342401] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2571.343289] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2571.344172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2571.345041] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2571.346026] sysctl could not get directory: /net//netfilter -12 [ 2571.346842] CPU: 0 PID: 14395 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2571.347685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2571.348699] Call Trace: [ 2571.349019] dump_stack+0x107/0x167 [ 2571.349471] __register_sysctl_table+0xdf4/0x1090 [ 2571.350069] ? proc_sys_evict_inode+0x180/0x180 [ 2571.350633] ? __kmalloc_track_caller+0x2c6/0x370 [ 2571.351230] ? nf_log_net_init+0x9c/0x370 [ 2571.351745] ? memcpy+0x39/0x60 [ 2571.352167] nf_log_net_init+0x101/0x370 [ 2571.352678] ? nf_log_bind_pf+0xf0/0xf0 [ 2571.353160] ops_init+0xbb/0x6b0 [ 2571.353578] setup_net+0x2f4/0x900 [ 2571.354012] ? ops_init+0x6b0/0x6b0 [ 2571.354457] ? down_read_interruptible+0x460/0x460 [ 2571.355071] ? kasan_unpoison_shadow+0x33/0x50 [ 2571.355634] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2571.356259] copy_net_ns+0x2c0/0x5d0 [ 2571.356716] create_new_namespaces+0x3f6/0xb20 [ 2571.357280] copy_namespaces+0x3fb/0x4f0 [ 2571.357781] copy_process+0x393a/0x78b0 [ 2571.358264] ? SOFTIRQ_verbose+0x10/0x10 [ 2571.358762] ? __lockdep_reset_lock+0x180/0x180 [ 2571.359336] ? mark_lock+0xf5/0x2df0 [ 2571.359808] ? __cleanup_sighand+0xb0/0xb0 [ 2571.360336] ? _copy_from_user+0xfb/0x1b0 [ 2571.360847] kernel_clone+0xe7/0x980 [ 2571.361308] ? __lockdep_reset_lock+0x180/0x180 [ 2571.361874] ? create_io_thread+0xf0/0xf0 [ 2571.362388] ? ksys_write+0x21a/0x260 [ 2571.362855] ? lock_downgrade+0x6d0/0x6d0 [ 2571.363374] __do_sys_clone3+0x1e5/0x320 [ 2571.363868] ? __do_sys_clone+0x110/0x110 [ 2571.364382] ? rcu_read_lock_any_held+0x75/0xa0 [ 2571.364946] ? vfs_write+0x354/0xb10 [ 2571.365401] ? fput_many+0x2f/0x1a0 [ 2571.365848] ? ksys_write+0x1a9/0x260 [ 2571.366315] ? __ia32_sys_read+0xb0/0xb0 [ 2571.366811] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2571.367461] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2571.368089] ? trace_hardirqs_on+0x5b/0x180 [ 2571.368623] do_syscall_64+0x33/0x40 [ 2571.369078] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2571.369703] RIP: 0033:0x7f5655a9cb19 [ 2571.370157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2571.372416] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2571.373345] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2571.374212] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2571.375085] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2571.375954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2571.376903] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:38:59 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1000000}}}, 0xb8}}, 0x0) [ 2571.409880] FAT-fs (loop2): bogus logical sector size 22820 [ 2571.410636] FAT-fs (loop2): Can't find a valid FAT filesystem 02:39:18 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 02:39:18 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x2000000}}}, 0xb8}}, 0x0) 02:39:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:39:18 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:39:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x900, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:39:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="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"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x13104a8, &(0x7f0000000940)=ANY=[@ANYBLOB="04a6d92b54b930c45ca4f674d605ceda2a1eb7bb805ba06dd8d4c6018f069f7a651553a647894e78310349651d6cc5c35355a43f339a546914fc6e94a986c17ea5b7e46c0fe6aed55374f19c5d42e907a6880cfde8d128bd84afa10bc95730cd40f6276a4a0f1680d1f3fa6f35b2dd2d7ed6b7576d7e3b1a4f74c7c24f7ca116d6438775f14d29516648512c4a65078d9a1a8671a6f7e949328361e58d5a2fe4571d0ce0a672828aeae0d3", @ANYRESHEX, @ANYRESDEC, @ANYRES32]) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00'], 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES16=r2, @ANYRESDEC=r3], 0x134}, 0x1, 0x0, 0x0, 0x801}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) 02:39:18 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 46) 02:39:18 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 18) [ 2590.321861] FAULT_INJECTION: forcing a failure. [ 2590.321861] name failslab, interval 1, probability 0, space 0, times 0 [ 2590.324472] CPU: 0 PID: 14413 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2590.326042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2590.327936] Call Trace: [ 2590.328446] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2590.328548] dump_stack+0x107/0x167 [ 2590.331564] should_fail.cold+0x5/0xa [ 2590.332433] ? create_object.isra.0+0x3a/0xa20 [ 2590.333465] should_failslab+0x5/0x20 [ 2590.334322] kmem_cache_alloc+0x5b/0x310 [ 2590.335256] create_object.isra.0+0x3a/0xa20 [ 2590.336248] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2590.337399] __kmalloc+0x16e/0x390 [ 2590.338211] __register_sysctl_table+0x9ef/0x1090 [ 2590.339325] ? proc_sys_evict_inode+0x180/0x180 [ 2590.340371] ? __kmalloc_track_caller+0x2c6/0x370 [ 2590.341453] ? nf_log_net_init+0x9c/0x370 [ 2590.342386] ? memcpy+0x39/0x60 [ 2590.343136] nf_log_net_init+0x101/0x370 [ 2590.344063] ? nf_log_bind_pf+0xf0/0xf0 [ 2590.344960] ops_init+0xbb/0x6b0 [ 2590.345731] setup_net+0x2f4/0x900 [ 2590.346538] ? ops_init+0x6b0/0x6b0 [ 2590.347376] ? down_read_interruptible+0x460/0x460 [ 2590.348489] ? kasan_unpoison_shadow+0x33/0x50 [ 2590.349519] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2590.350671] copy_net_ns+0x2c0/0x5d0 [ 2590.351535] create_new_namespaces+0x3f6/0xb20 [ 2590.352574] copy_namespaces+0x3fb/0x4f0 [ 2590.353503] copy_process+0x393a/0x78b0 [ 2590.354403] ? SOFTIRQ_verbose+0x10/0x10 [ 2590.355342] ? __lockdep_reset_lock+0x180/0x180 [ 2590.356404] ? mark_lock+0xf5/0x2df0 [ 2590.357274] ? __cleanup_sighand+0xb0/0xb0 [ 2590.358253] ? _copy_from_user+0xfb/0x1b0 [ 2590.359198] kernel_clone+0xe7/0x980 [ 2590.360044] ? __lockdep_reset_lock+0x180/0x180 [ 2590.361131] ? create_io_thread+0xf0/0xf0 [ 2590.362091] ? ksys_write+0x21a/0x260 [ 2590.362952] ? lock_downgrade+0x6d0/0x6d0 [ 2590.363897] __do_sys_clone3+0x1e5/0x320 [ 2590.364815] ? __do_sys_clone+0x110/0x110 [ 2590.365778] ? rcu_read_lock_any_held+0x75/0xa0 [ 2590.366823] ? vfs_write+0x354/0xb10 [ 2590.367675] ? fput_many+0x2f/0x1a0 [ 2590.368496] ? ksys_write+0x1a9/0x260 [ 2590.369356] ? __ia32_sys_read+0xb0/0xb0 [ 2590.370278] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2590.371468] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2590.372627] ? trace_hardirqs_on+0x5b/0x180 [ 2590.373605] do_syscall_64+0x33/0x40 [ 2590.374451] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2590.375622] RIP: 0033:0x7f5655a9cb19 [ 2590.376466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2590.380625] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2590.382339] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2590.383957] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2590.385565] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2590.387176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2590.388795] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2590.402619] FAULT_INJECTION: forcing a failure. [ 2590.402619] name failslab, interval 1, probability 0, space 0, times 0 [ 2590.405673] CPU: 1 PID: 14418 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2590.407484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2590.409407] Call Trace: [ 2590.409974] dump_stack+0x107/0x167 [ 2590.410747] should_fail.cold+0x5/0xa [ 2590.411576] ? getname_kernel+0x4e/0x370 [ 2590.412436] should_failslab+0x5/0x20 [ 2590.413246] kmem_cache_alloc+0x5b/0x310 [ 2590.414116] getname_kernel+0x4e/0x370 [ 2590.414948] kern_path+0x1b/0x40 [ 2590.415675] lookup_bdev+0x100/0x220 [ 2590.416472] ? bd_acquire+0x450/0x450 [ 2590.417275] ? kfree+0x1ab/0x340 [ 2590.417996] ? logfc+0x590/0x590 [ 2590.418724] blkdev_get_by_path+0x1b/0x110 [ 2590.419629] mount_bdev+0x5b/0x400 [ 2590.420377] ? msdos_mount+0x40/0x40 [ 2590.421162] ? setup+0xd0/0xd0 [ 2590.421837] legacy_get_tree+0x105/0x220 [ 2590.422698] vfs_get_tree+0x8e/0x300 [ 2590.423497] path_mount+0x1331/0x21c0 [ 2590.424323] ? strncpy_from_user+0x9e/0x470 [ 2590.425227] ? finish_automount+0xa90/0xa90 [ 2590.426141] ? getname_flags.part.0+0x1dd/0x4f0 [ 2590.427129] __x64_sys_mount+0x282/0x300 [ 2590.428001] ? copy_mnt_ns+0xa00/0xa00 [ 2590.428836] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2590.429958] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2590.431007] do_syscall_64+0x33/0x40 [ 2590.431885] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2590.433092] RIP: 0033:0x7fb4e3052b19 [ 2590.433957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2590.437845] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2590.439619] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2590.441261] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2590.442788] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2590.444362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2590.445922] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 02:39:18 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x3000000}}}, 0xb8}}, 0x0) 02:39:18 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:39:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:39:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0xa00, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:39:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="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"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x13104a8, &(0x7f0000000940)=ANY=[@ANYBLOB="04a6d92b54b930c45ca4f674d605ceda2a1eb7bb805ba06dd8d4c6018f069f7a651553a647894e78310349651d6cc5c35355a43f339a546914fc6e94a986c17ea5b7e46c0fe6aed55374f19c5d42e907a6880cfde8d128bd84afa10bc95730cd40f6276a4a0f1680d1f3fa6f35b2dd2d7ed6b7576d7e3b1a4f74c7c24f7ca116d6438775f14d29516648512c4a65078d9a1a8671a6f7e949328361e58d5a2fe4571d0ce0a672828aeae0d3", @ANYRESHEX, @ANYRESDEC, @ANYRES32]) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00'], 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES16=r2, @ANYRESDEC=r3], 0x134}, 0x1, 0x0, 0x0, 0x801}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) 02:39:18 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) [ 2590.578522] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:39:18 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x9000000}}}, 0xb8}}, 0x0) 02:39:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x2, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:39:18 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 02:39:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0xf00, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:39:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="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"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x13104a8, &(0x7f0000000940)=ANY=[@ANYBLOB="04a6d92b54b930c45ca4f674d605ceda2a1eb7bb805ba06dd8d4c6018f069f7a651553a647894e78310349651d6cc5c35355a43f339a546914fc6e94a986c17ea5b7e46c0fe6aed55374f19c5d42e907a6880cfde8d128bd84afa10bc95730cd40f6276a4a0f1680d1f3fa6f35b2dd2d7ed6b7576d7e3b1a4f74c7c24f7ca116d6438775f14d29516648512c4a65078d9a1a8671a6f7e949328361e58d5a2fe4571d0ce0a672828aeae0d3", @ANYRESHEX, @ANYRESDEC, @ANYRES32]) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00'], 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES16=r2, @ANYRESDEC=r3], 0x134}, 0x1, 0x0, 0x0, 0x801}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) 02:39:18 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xf000000}}}, 0xb8}}, 0x0) [ 2590.736181] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:39:34 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 19) 02:39:34 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 47) 02:39:34 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@abort}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:39:34 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0xf1c, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:39:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x3, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:39:34 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x2f000000}}}, 0xb8}}, 0x0) 02:39:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="00000000000000002e2f66696c6530002c8782c2197694905ffe872c5237e05628a38d4083bb8b3f8819dedb65c8fa8891ef2e1462c2cfba9e00000000001695db9c96825fae6b40b92f15986b7292cc8f0b330455665d2c12275a7daffbe785871c35b8d755d71aa56ad00c6e69a3e0eaf3c85024e519a4544463dee46f99fd50985a8992e5ce914b8f0e7ecccb997edbb2eaf19a724b2ce7015efa4de7ffffffff00fcffffb6f8f436bbe981e1a6ba91259a6aafd3f1d466f93c0bc7999af2f655667a9b00416bfdc4e235b51ea1ad92a70c0d9684450de3b7696289ed9921c9528bb2d716c6cdeae30a001a9f552d7ae0d31519e5d6b524da27bf3da3e419b5250cfc74e1f97b1eff071aa5f18b0f98a6d7339a932350233310973883ee24d3cfb1d3ce451d074b2ba9e9a064a98f17d08cdcd8de7888c0de42ed8444543b659612f66d6f017f348b9505c0247fa3bcdb6d018afdec803e8341be25eb6bf5fc9fb7e3aba34aa524ca0c0314f350b7fe2727153f62852a53eb555c329887f6a218595b1c4598f78cd8ef53b1c192f268cc63bb5c06b54ae9021a659a9fed5653cc28e39dced94c5594f3c760d2ebf0b23c4966acde2cd309f52744143015996942d2c8b586257a47fee179819f8546623faa10d8ffab802ac670dc6a0c08c40b922a43b3dadbd6823d4eb9a8cf79dcee43"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x13104a8, &(0x7f0000000940)=ANY=[@ANYBLOB="04a6d92b54b930c45ca4f674d605ceda2a1eb7bb805ba06dd8d4c6018f069f7a651553a647894e78310349651d6cc5c35355a43f339a546914fc6e94a986c17ea5b7e46c0fe6aed55374f19c5d42e907a6880cfde8d128bd84afa10bc95730cd40f6276a4a0f1680d1f3fa6f35b2dd2d7ed6b7576d7e3b1a4f74c7c24f7ca116d6438775f14d29516648512c4a65078d9a1a8671a6f7e949328361e58d5a2fe4571d0ce0a672828aeae0d3", @ANYRESHEX, @ANYRESDEC, @ANYRES32]) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00'], 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES16=r2, @ANYRESDEC=r3], 0x134}, 0x1, 0x0, 0x0, 0x801}, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) 02:39:34 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x38, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) [ 2606.247017] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2606.253556] FAULT_INJECTION: forcing a failure. [ 2606.253556] name failslab, interval 1, probability 0, space 0, times 0 [ 2606.256285] CPU: 0 PID: 14465 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2606.257856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2606.259743] Call Trace: [ 2606.260345] dump_stack+0x107/0x167 [ 2606.261172] should_fail.cold+0x5/0xa [ 2606.262041] ? __register_sysctl_table+0x9ef/0x1090 [ 2606.263175] should_failslab+0x5/0x20 [ 2606.264041] __kmalloc+0x72/0x390 [ 2606.264834] __register_sysctl_table+0x9ef/0x1090 [ 2606.265936] ? proc_sys_evict_inode+0x180/0x180 [ 2606.266982] ? __kmalloc_track_caller+0x2c6/0x370 [ 2606.268071] ? nf_log_net_init+0x9c/0x370 [ 2606.269008] ? memcpy+0x39/0x60 [ 2606.269763] nf_log_net_init+0x101/0x370 [ 2606.270683] ? nf_log_bind_pf+0xf0/0xf0 [ 2606.271587] ops_init+0xbb/0x6b0 [ 2606.272367] setup_net+0x2f4/0x900 [ 2606.273174] ? ops_init+0x6b0/0x6b0 [ 2606.274003] ? down_read_interruptible+0x460/0x460 [ 2606.275117] ? kasan_unpoison_shadow+0x33/0x50 [ 2606.276159] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2606.277308] copy_net_ns+0x2c0/0x5d0 [ 2606.278157] create_new_namespaces+0x3f6/0xb20 [ 2606.279201] copy_namespaces+0x3fb/0x4f0 [ 2606.280135] copy_process+0x393a/0x78b0 [ 2606.281046] ? SOFTIRQ_verbose+0x10/0x10 [ 2606.281970] ? __lockdep_reset_lock+0x180/0x180 [ 2606.283018] ? mark_lock+0xf5/0x2df0 [ 2606.283901] ? __cleanup_sighand+0xb0/0xb0 [ 2606.284882] ? _copy_from_user+0xfb/0x1b0 [ 2606.285829] kernel_clone+0xe7/0x980 [ 2606.286676] ? __lockdep_reset_lock+0x180/0x180 [ 2606.287736] ? create_io_thread+0xf0/0xf0 [ 2606.288686] ? ksys_write+0x21a/0x260 [ 2606.289544] ? lock_downgrade+0x6d0/0x6d0 [ 2606.290493] __do_sys_clone3+0x1e5/0x320 [ 2606.291418] ? __do_sys_clone+0x110/0x110 [ 2606.292389] ? rcu_read_lock_any_held+0x75/0xa0 [ 2606.293448] ? vfs_write+0x354/0xb10 [ 2606.294287] ? fput_many+0x2f/0x1a0 [ 2606.295113] ? ksys_write+0x1a9/0x260 [ 2606.295984] ? __ia32_sys_read+0xb0/0xb0 [ 2606.296902] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2606.298091] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2606.299253] ? trace_hardirqs_on+0x5b/0x180 [ 2606.300244] do_syscall_64+0x33/0x40 [ 2606.301082] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2606.302239] RIP: 0033:0x7f5655a9cb19 [ 2606.303082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2606.307239] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2606.308967] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2606.310574] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2606.312188] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2606.313796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2606.315412] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2606.317143] sysctl could not get directory: /net/netfilter//nf_log -12 [ 2606.318813] CPU: 0 PID: 14465 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2606.320376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2606.322245] Call Trace: [ 2606.322840] dump_stack+0x107/0x167 [ 2606.323679] __register_sysctl_table+0xdf4/0x1090 [ 2606.324780] ? proc_sys_evict_inode+0x180/0x180 [ 2606.325826] ? __kmalloc_track_caller+0x2c6/0x370 [ 2606.326909] ? nf_log_net_init+0x9c/0x370 [ 2606.327855] ? memcpy+0x39/0x60 [ 2606.328609] nf_log_net_init+0x101/0x370 [ 2606.329539] ? nf_log_bind_pf+0xf0/0xf0 [ 2606.330440] ops_init+0xbb/0x6b0 [ 2606.331214] setup_net+0x2f4/0x900 [ 2606.332035] ? ops_init+0x6b0/0x6b0 [ 2606.332861] ? down_read_interruptible+0x460/0x460 [ 2606.333968] ? kasan_unpoison_shadow+0x33/0x50 [ 2606.335011] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2606.336179] copy_net_ns+0x2c0/0x5d0 [ 2606.337028] create_new_namespaces+0x3f6/0xb20 [ 2606.338080] copy_namespaces+0x3fb/0x4f0 [ 2606.339002] copy_process+0x393a/0x78b0 [ 2606.339909] ? SOFTIRQ_verbose+0x10/0x10 [ 2606.340834] ? __lockdep_reset_lock+0x180/0x180 [ 2606.341875] ? mark_lock+0xf5/0x2df0 [ 2606.342742] ? __cleanup_sighand+0xb0/0xb0 [ 2606.343734] ? _copy_from_user+0xfb/0x1b0 [ 2606.344676] kernel_clone+0xe7/0x980 [ 2606.345515] ? __lockdep_reset_lock+0x180/0x180 [ 2606.346574] ? create_io_thread+0xf0/0xf0 [ 2606.347546] ? ksys_write+0x21a/0x260 [ 2606.348408] ? lock_downgrade+0x6d0/0x6d0 [ 2606.349350] __do_sys_clone3+0x1e5/0x320 [ 2606.350292] ? __do_sys_clone+0x110/0x110 [ 2606.351251] ? rcu_read_lock_any_held+0x75/0xa0 [ 2606.352305] ? vfs_write+0x354/0xb10 [ 2606.353154] ? fput_many+0x2f/0x1a0 [ 2606.353983] ? ksys_write+0x1a9/0x260 [ 2606.354845] ? __ia32_sys_read+0xb0/0xb0 [ 2606.355787] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2606.356972] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2606.358138] ? trace_hardirqs_on+0x5b/0x180 [ 2606.359116] do_syscall_64+0x33/0x40 [ 2606.359966] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2606.361125] RIP: 0033:0x7f5655a9cb19 [ 2606.361969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2606.366151] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2606.367882] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2606.369488] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2606.371102] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2606.372721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2606.374329] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2606.379034] FAULT_INJECTION: forcing a failure. [ 2606.379034] name failslab, interval 1, probability 0, space 0, times 0 [ 2606.382145] CPU: 1 PID: 14466 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2606.383640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2606.385424] Call Trace: [ 2606.386000] dump_stack+0x107/0x167 [ 2606.386787] should_fail.cold+0x5/0xa [ 2606.387620] ? create_object.isra.0+0x3a/0xa20 [ 2606.388600] should_failslab+0x5/0x20 [ 2606.389419] kmem_cache_alloc+0x5b/0x310 [ 2606.390300] create_object.isra.0+0x3a/0xa20 [ 2606.391241] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2606.392346] kmem_cache_alloc_trace+0x151/0x320 [ 2606.393351] alloc_super+0x52/0xa90 [ 2606.394134] ? test_bdev_super_fc+0x80/0x80 [ 2606.395058] sget+0x110/0x510 [ 2606.395739] ? __put_super.part.0+0x2a0/0x2a0 [ 2606.396704] mount_bdev+0xf8/0x400 [ 2606.397467] ? msdos_mount+0x40/0x40 [ 2606.398266] ? setup+0xd0/0xd0 [ 2606.398954] legacy_get_tree+0x105/0x220 [ 2606.399839] vfs_get_tree+0x8e/0x300 [ 2606.400637] path_mount+0x1331/0x21c0 [ 2606.401463] ? strncpy_from_user+0x9e/0x470 [ 2606.402388] ? finish_automount+0xa90/0xa90 [ 2606.403316] ? getname_flags.part.0+0x1dd/0x4f0 [ 2606.404339] __x64_sys_mount+0x282/0x300 [ 2606.405214] ? copy_mnt_ns+0xa00/0xa00 [ 2606.406060] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2606.407187] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2606.408309] do_syscall_64+0x33/0x40 [ 2606.409109] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2606.410211] RIP: 0033:0x7fb4e3052b19 [ 2606.411005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2606.414954] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2606.416594] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2606.418117] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2606.419669] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2606.421197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2606.422734] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 [ 2606.462179] FAT-fs (loop2): bogus logical sector size 22820 [ 2606.463566] FAT-fs (loop2): Can't find a valid FAT filesystem 02:39:51 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 48) 02:39:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x1c0f, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:39:51 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x39, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 02:39:51 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x62010000}}}, 0xb8}}, 0x0) 02:39:51 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x8, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:39:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="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"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x13104a8, &(0x7f0000000940)=ANY=[@ANYBLOB="04a6d92b54b930c45ca4f674d605ceda2a1eb7bb805ba06dd8d4c6018f069f7a651553a647894e78310349651d6cc5c35355a43f339a546914fc6e94a986c17ea5b7e46c0fe6aed55374f19c5d42e907a6880cfde8d128bd84afa10bc95730cd40f6276a4a0f1680d1f3fa6f35b2dd2d7ed6b7576d7e3b1a4f74c7c24f7ca116d6438775f14d29516648512c4a65078d9a1a8671a6f7e949328361e58d5a2fe4571d0ce0a672828aeae0d3", @ANYRESHEX, @ANYRESDEC, @ANYRES32]) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00'], 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) 02:39:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, 0x0) 02:39:51 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 20) [ 2623.804405] FAULT_INJECTION: forcing a failure. [ 2623.804405] name failslab, interval 1, probability 0, space 0, times 0 [ 2623.807335] CPU: 0 PID: 14474 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2623.809037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2623.811049] Call Trace: [ 2623.811702] dump_stack+0x107/0x167 [ 2623.812591] should_fail.cold+0x5/0xa [ 2623.813528] ? create_object.isra.0+0x3a/0xa20 [ 2623.814640] should_failslab+0x5/0x20 [ 2623.815593] kmem_cache_alloc+0x5b/0x310 [ 2623.816600] create_object.isra.0+0x3a/0xa20 [ 2623.817663] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2623.818899] __kmalloc+0x16e/0x390 [ 2623.819781] __register_sysctl_table+0x9ef/0x1090 [ 2623.820966] ? proc_sys_evict_inode+0x180/0x180 [ 2623.822090] ? __kmalloc_track_caller+0x2c6/0x370 [ 2623.823260] ? nf_log_net_init+0x9c/0x370 [ 2623.823298] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2623.824274] ? memcpy+0x39/0x60 [ 2623.824303] nf_log_net_init+0x101/0x370 [ 2623.824331] ? nf_log_bind_pf+0xf0/0xf0 [ 2623.829270] ops_init+0xbb/0x6b0 [ 2623.830109] setup_net+0x2f4/0x900 [ 2623.830981] ? ops_init+0x6b0/0x6b0 [ 2623.831875] ? down_read_interruptible+0x460/0x460 [ 2623.833069] ? kasan_unpoison_shadow+0x33/0x50 [ 2623.834183] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2623.835433] copy_net_ns+0x2c0/0x5d0 [ 2623.836350] create_new_namespaces+0x3f6/0xb20 [ 2623.837475] copy_namespaces+0x3fb/0x4f0 [ 2623.838470] copy_process+0x393a/0x78b0 [ 2623.839444] ? SOFTIRQ_verbose+0x10/0x10 [ 2623.840443] ? __lockdep_reset_lock+0x180/0x180 [ 2623.841568] ? mark_lock+0xf5/0x2df0 [ 2623.842511] ? __cleanup_sighand+0xb0/0xb0 [ 2623.843577] ? _copy_from_user+0xfb/0x1b0 [ 2623.844597] kernel_clone+0xe7/0x980 [ 2623.845506] ? __lockdep_reset_lock+0x180/0x180 [ 2623.846637] ? create_io_thread+0xf0/0xf0 [ 2623.847671] ? ksys_write+0x21a/0x260 [ 2623.848598] ? lock_downgrade+0x6d0/0x6d0 [ 2623.849618] __do_sys_clone3+0x1e5/0x320 [ 2623.850603] ? __do_sys_clone+0x110/0x110 [ 2623.851653] ? rcu_read_lock_any_held+0x75/0xa0 [ 2623.852788] ? vfs_write+0x354/0xb10 [ 2623.853696] ? fput_many+0x2f/0x1a0 [ 2623.854592] ? ksys_write+0x1a9/0x260 [ 2623.855521] ? __ia32_sys_read+0xb0/0xb0 [ 2623.856529] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2623.857806] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2623.859068] ? trace_hardirqs_on+0x5b/0x180 [ 2623.860128] do_syscall_64+0x33/0x40 [ 2623.861041] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2623.862297] RIP: 0033:0x7f5655a9cb19 [ 2623.863206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2623.867692] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2623.869547] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2623.871291] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2623.873058] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2623.874797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2623.876560] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:39:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x9, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:39:52 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x80ffffff}}}, 0xb8}}, 0x0) [ 2623.893950] FAULT_INJECTION: forcing a failure. [ 2623.893950] name failslab, interval 1, probability 0, space 0, times 0 [ 2623.896981] CPU: 1 PID: 14487 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2623.898450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2623.900217] Call Trace: [ 2623.900779] dump_stack+0x107/0x167 [ 2623.901558] should_fail.cold+0x5/0xa [ 2623.902390] ? selinux_sb_alloc_security+0x41/0x220 [ 2623.903448] should_failslab+0x5/0x20 [ 2623.904258] kmem_cache_alloc_trace+0x55/0x320 [ 2623.905227] ? down_write_nested+0xe4/0x160 [ 2623.906152] selinux_sb_alloc_security+0x41/0x220 [ 2623.907172] security_sb_alloc+0x46/0xa0 [ 2623.908055] alloc_super+0x1ed/0xa90 [ 2623.908852] ? test_bdev_super_fc+0x80/0x80 [ 2623.909768] sget+0x110/0x510 [ 2623.910435] ? __put_super.part.0+0x2a0/0x2a0 [ 2623.911397] mount_bdev+0xf8/0x400 [ 2623.912165] ? msdos_mount+0x40/0x40 [ 2623.912972] ? setup+0xd0/0xd0 [ 2623.913652] legacy_get_tree+0x105/0x220 [ 2623.914521] vfs_get_tree+0x8e/0x300 [ 2623.915308] path_mount+0x1331/0x21c0 [ 2623.916131] ? strncpy_from_user+0x9e/0x470 [ 2623.917047] ? finish_automount+0xa90/0xa90 [ 2623.917966] ? getname_flags.part.0+0x1dd/0x4f0 [ 2623.918970] __x64_sys_mount+0x282/0x300 [ 2623.919840] ? copy_mnt_ns+0xa00/0xa00 [ 2623.920667] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2623.921780] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2623.922881] do_syscall_64+0x33/0x40 [ 2623.923682] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2623.924783] RIP: 0033:0x7fb4e3052b19 [ 2623.925571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2623.929411] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2623.931029] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2623.932536] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2623.934032] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2623.935549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2623.937042] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 02:39:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, 0x0) 02:39:52 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4800, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:39:52 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x9effffff}}}, 0xb8}}, 0x0) 02:39:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="00000000000000002e2f66696c6530002c8782c2197694905ffe872c5237e05628a38d4083bb8b3f8819dedb65c8fa8891ef2e1462c2cfba9e00000000001695db9c96825fae6b40b92f15986b7292cc8f0b330455665d2c12275a7daffbe785871c35b8d755d71aa56ad00c6e69a3e0eaf3c85024e519a4544463dee46f99fd50985a8992e5ce914b8f0e7ecccb997edbb2eaf19a724b2ce7015efa4de7ffffffff00fcffffb6f8f436bbe981e1a6ba91259a6aafd3f1d466f93c0bc7999af2f655667a9b00416bfdc4e235b51ea1ad92a70c0d9684450de3b7696289ed9921c9528bb2d716c6cdeae30a001a9f552d7ae0d31519e5d6b524da27bf3da3e419b5250cfc74e1f97b1eff071aa5f18b0f98a6d7339a932350233310973883ee24d3cfb1d3ce451d074b2ba9e9a064a98f17d08cdcd8de7888c0de42ed8444543b659612f66d6f017f348b9505c0247fa3bcdb6d018afdec803e8341be25eb6bf5fc9fb7e3aba34aa524ca0c0314f350b7fe2727153f62852a53eb555c329887f6a218595b1c4598f78cd8ef53b1c192f268cc63bb5c06b54ae9021a659a9fed5653cc28e39dced94c5594f3c760d2ebf0b23c4966acde2cd309f52744143015996942d2c8b586257a47fee179819f8546623faa10d8ffab802ac670dc6a0c08c40b922a43b3dadbd6823d4eb9a8cf79dcee43"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x13104a8, &(0x7f0000000940)=ANY=[@ANYBLOB="04a6d92b54b930c45ca4f674d605ceda2a1eb7bb805ba06dd8d4c6018f069f7a651553a647894e78310349651d6cc5c35355a43f339a546914fc6e94a986c17ea5b7e46c0fe6aed55374f19c5d42e907a6880cfde8d128bd84afa10bc95730cd40f6276a4a0f1680d1f3fa6f35b2dd2d7ed6b7576d7e3b1a4f74c7c24f7ca116d6438775f14d29516648512c4a65078d9a1a8671a6f7e949328361e58d5a2fe4571d0ce0a672828aeae0d3", @ANYRESHEX, @ANYRESDEC, @ANYRES32]) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00'], 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') lseek(r1, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 2624.054864] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:39:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xf, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:39:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, 0x0) [ 2640.679384] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:40:08 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 49) 02:40:08 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4c00, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:40:08 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:40:08 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xf0ffffff}}}, 0xb8}}, 0x0) 02:40:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x2f, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:40:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="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"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x13104a8, &(0x7f0000000940)=ANY=[@ANYBLOB="04a6d92b54b930c45ca4f674d605ceda2a1eb7bb805ba06dd8d4c6018f069f7a651553a647894e78310349651d6cc5c35355a43f339a546914fc6e94a986c17ea5b7e46c0fe6aed55374f19c5d42e907a6880cfde8d128bd84afa10bc95730cd40f6276a4a0f1680d1f3fa6f35b2dd2d7ed6b7576d7e3b1a4f74c7c24f7ca116d6438775f14d29516648512c4a65078d9a1a8671a6f7e949328361e58d5a2fe4571d0ce0a672828aeae0d3", @ANYRESHEX, @ANYRESDEC, @ANYRES32]) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00'], 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) lseek(r1, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) 02:40:08 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x3a, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) [ 2640.695380] EXT4-fs (sda): Unrecognized mount option "uid=00000000000000060928" or missing value [ 2640.702394] FAULT_INJECTION: forcing a failure. [ 2640.702394] name failslab, interval 1, probability 0, space 0, times 0 [ 2640.704969] CPU: 0 PID: 14522 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2640.706546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2640.708443] Call Trace: [ 2640.709043] dump_stack+0x107/0x167 [ 2640.709880] should_fail.cold+0x5/0xa [ 2640.710746] ? create_object.isra.0+0x3a/0xa20 [ 2640.711805] should_failslab+0x5/0x20 [ 2640.712688] kmem_cache_alloc+0x5b/0x310 [ 2640.713618] create_object.isra.0+0x3a/0xa20 [ 2640.714623] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2640.715781] kmem_cache_alloc_trace+0x151/0x320 [ 2640.716837] ? down_write_nested+0xe4/0x160 [ 2640.717834] selinux_sb_alloc_security+0x41/0x220 02:40:08 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 21) [ 2640.718944] security_sb_alloc+0x46/0xa0 [ 2640.720055] alloc_super+0x1ed/0xa90 [ 2640.720896] ? test_bdev_super_fc+0x80/0x80 [ 2640.721873] sget+0x110/0x510 [ 2640.722588] ? __put_super.part.0+0x2a0/0x2a0 [ 2640.723608] mount_bdev+0xf8/0x400 [ 2640.724434] ? msdos_mount+0x40/0x40 [ 2640.725281] ? setup+0xd0/0xd0 [ 2640.726013] legacy_get_tree+0x105/0x220 [ 2640.726932] vfs_get_tree+0x8e/0x300 [ 2640.727788] path_mount+0x1331/0x21c0 [ 2640.728656] ? strncpy_from_user+0x9e/0x470 [ 2640.729633] ? finish_automount+0xa90/0xa90 [ 2640.730617] ? getname_flags.part.0+0x1dd/0x4f0 [ 2640.731690] __x64_sys_mount+0x282/0x300 [ 2640.732622] ? copy_mnt_ns+0xa00/0xa00 [ 2640.733514] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2640.734712] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2640.735985] do_syscall_64+0x33/0x40 [ 2640.736837] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2640.738014] RIP: 0033:0x7fb4e3052b19 [ 2640.738861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2640.743062] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2640.744799] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2640.746434] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2640.748060] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2640.749686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2640.751305] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 [ 2640.762267] FAULT_INJECTION: forcing a failure. [ 2640.762267] name failslab, interval 1, probability 0, space 0, times 0 [ 2640.764867] CPU: 0 PID: 14524 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2640.766441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2640.768333] Call Trace: [ 2640.768937] dump_stack+0x107/0x167 [ 2640.769780] should_fail.cold+0x5/0xa [ 2640.770651] ? create_object.isra.0+0x3a/0xa20 [ 2640.771685] should_failslab+0x5/0x20 [ 2640.772565] kmem_cache_alloc+0x5b/0x310 [ 2640.773504] create_object.isra.0+0x3a/0xa20 [ 2640.774524] kmemleak_alloc_percpu+0xa0/0x100 [ 2640.775549] pcpu_alloc+0x4e2/0x1240 [ 2640.776421] ? sock_inuse_exit_net+0x70/0x70 [ 2640.777417] sock_inuse_init_net+0x26/0x110 [ 2640.778394] ops_init+0xbb/0x6b0 [ 2640.779181] setup_net+0x2f4/0x900 [ 2640.780009] ? ops_init+0x6b0/0x6b0 [ 2640.780851] ? down_read_interruptible+0x460/0x460 [ 2640.781976] ? kasan_unpoison_shadow+0x33/0x50 [ 2640.783015] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2640.784191] copy_net_ns+0x2c0/0x5d0 [ 2640.785051] create_new_namespaces+0x3f6/0xb20 [ 2640.786108] copy_namespaces+0x3fb/0x4f0 [ 2640.787037] copy_process+0x393a/0x78b0 [ 2640.787955] ? SOFTIRQ_verbose+0x10/0x10 [ 2640.788884] ? __lockdep_reset_lock+0x180/0x180 [ 2640.789935] ? mark_lock+0xf5/0x2df0 [ 2640.790813] ? __cleanup_sighand+0xb0/0xb0 [ 2640.791817] ? _copy_from_user+0xfb/0x1b0 [ 2640.792767] kernel_clone+0xe7/0x980 [ 2640.793612] ? __lockdep_reset_lock+0x180/0x180 [ 2640.794668] ? create_io_thread+0xf0/0xf0 [ 2640.795634] ? ksys_write+0x21a/0x260 [ 2640.796508] ? lock_downgrade+0x6d0/0x6d0 [ 2640.797457] __do_sys_clone3+0x1e5/0x320 [ 2640.798376] ? __do_sys_clone+0x110/0x110 [ 2640.799330] ? rcu_read_lock_any_held+0x75/0xa0 [ 2640.800392] ? vfs_write+0x354/0xb10 [ 2640.801247] ? fput_many+0x2f/0x1a0 [ 2640.802077] ? ksys_write+0x1a9/0x260 [ 2640.802937] ? __ia32_sys_read+0xb0/0xb0 [ 2640.803867] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2640.805060] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2640.806233] ? trace_hardirqs_on+0x5b/0x180 [ 2640.807223] do_syscall_64+0x33/0x40 [ 2640.808074] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2640.809244] RIP: 0033:0x7f5655a9cb19 [ 2640.810087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2640.814257] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2640.815994] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 02:40:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x7e, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2640.817615] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2640.819389] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2640.821015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2640.822636] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 [ 2640.826060] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 02:40:08 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x6800, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:40:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="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"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x13104a8, &(0x7f0000000940)=ANY=[@ANYBLOB="04a6d92b54b930c45ca4f674d605ceda2a1eb7bb805ba06dd8d4c6018f069f7a651553a647894e78310349651d6cc5c35355a43f339a546914fc6e94a986c17ea5b7e46c0fe6aed55374f19c5d42e907a6880cfde8d128bd84afa10bc95730cd40f6276a4a0f1680d1f3fa6f35b2dd2d7ed6b7576d7e3b1a4f74c7c24f7ca116d6438775f14d29516648512c4a65078d9a1a8671a6f7e949328361e58d5a2fe4571d0ce0a672828aeae0d3", @ANYRESHEX, @ANYRESDEC, @ANYRES32]) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00'], 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) lseek(r1, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) 02:40:08 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfcffffff}}}, 0xb8}}, 0x0) [ 2640.875336] FAT-fs (loop2): bogus logical sector size 22820 [ 2640.876132] FAT-fs (loop2): Can't find a valid FAT filesystem 02:40:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x6c00, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:40:09 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x60, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 02:40:09 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 22) 02:40:09 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) [ 2640.947916] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2640.969046] EXT4-fs (sda): Unrecognized mount option "uid=00000000000000060928" or missing value [ 2640.999956] FAULT_INJECTION: forcing a failure. [ 2640.999956] name failslab, interval 1, probability 0, space 0, times 0 [ 2641.001288] CPU: 1 PID: 14540 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2641.002103] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2641.003092] Call Trace: [ 2641.003407] dump_stack+0x107/0x167 [ 2641.003855] should_fail.cold+0x5/0xa [ 2641.004318] ? selinux_sb_alloc_security+0x41/0x220 [ 2641.004920] should_failslab+0x5/0x20 [ 2641.005376] kmem_cache_alloc_trace+0x55/0x320 [ 2641.005918] ? down_write_nested+0xe4/0x160 [ 2641.006435] selinux_sb_alloc_security+0x41/0x220 [ 2641.007009] security_sb_alloc+0x46/0xa0 [ 2641.007491] alloc_super+0x1ed/0xa90 [ 2641.007942] ? test_bdev_super_fc+0x80/0x80 [ 2641.008458] sget+0x110/0x510 [ 2641.008833] ? __put_super.part.0+0x2a0/0x2a0 [ 2641.009369] mount_bdev+0xf8/0x400 [ 2641.009795] ? msdos_mount+0x40/0x40 [ 2641.010221] ? setup+0xd0/0xd0 [ 2641.010604] legacy_get_tree+0x105/0x220 [ 2641.011089] vfs_get_tree+0x8e/0x300 [ 2641.011534] path_mount+0x1331/0x21c0 [ 2641.012003] ? strncpy_from_user+0x9e/0x470 [ 2641.012490] ? finish_automount+0xa90/0xa90 [ 2641.013001] ? getname_flags.part.0+0x1dd/0x4f0 [ 2641.013557] __x64_sys_mount+0x282/0x300 [ 2641.014039] ? copy_mnt_ns+0xa00/0xa00 [ 2641.014488] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2641.015109] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2641.015722] do_syscall_64+0x33/0x40 [ 2641.016175] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2641.016779] RIP: 0033:0x7fb4e3052b19 [ 2641.017203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2641.019375] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2641.020284] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2641.021089] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2641.021931] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2641.022774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2641.023575] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 02:40:25 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x5, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x61, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 02:40:25 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x0, 0x0) (fail_nth: 23) 02:40:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xf0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:40:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="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"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x13104a8, &(0x7f0000000940)=ANY=[@ANYBLOB="04a6d92b54b930c45ca4f674d605ceda2a1eb7bb805ba06dd8d4c6018f069f7a651553a647894e78310349651d6cc5c35355a43f339a546914fc6e94a986c17ea5b7e46c0fe6aed55374f19c5d42e907a6880cfde8d128bd84afa10bc95730cd40f6276a4a0f1680d1f3fa6f35b2dd2d7ed6b7576d7e3b1a4f74c7c24f7ca116d6438775f14d29516648512c4a65078d9a1a8671a6f7e949328361e58d5a2fe4571d0ce0a672828aeae0d3", @ANYRESHEX, @ANYRESDEC, @ANYRES32]) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00'], 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) 02:40:25 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 50) 02:40:25 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) 02:40:25 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffff000}}}, 0xb8}}, 0x0) 02:40:25 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x7400, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2657.743658] EXT4-fs (sda): Unrecognized mount option "uid=00000000000000060928" or missing value [ 2657.772567] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2657.793472] FAULT_INJECTION: forcing a failure. [ 2657.793472] name failslab, interval 1, probability 0, space 0, times 0 [ 2657.796002] CPU: 1 PID: 14562 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2657.797519] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2657.799289] Call Trace: [ 2657.799867] dump_stack+0x107/0x167 [ 2657.800671] should_fail.cold+0x5/0xa [ 2657.801507] ? create_object.isra.0+0x3a/0xa20 [ 2657.802495] should_failslab+0x5/0x20 [ 2657.802537] FAULT_INJECTION: forcing a failure. [ 2657.802537] name failslab, interval 1, probability 0, space 0, times 0 [ 2657.803323] kmem_cache_alloc+0x5b/0x310 [ 2657.803383] ? mark_held_locks+0x9e/0xe0 [ 2657.807867] create_object.isra.0+0x3a/0xa20 [ 2657.808832] kmemleak_alloc_percpu+0xa0/0x100 [ 2657.809798] pcpu_alloc+0x4e2/0x1240 [ 2657.810621] __percpu_init_rwsem+0x22/0x150 [ 2657.811543] alloc_super+0x232/0xa90 [ 2657.812354] ? test_bdev_super_fc+0x80/0x80 [ 2657.813274] sget+0x110/0x510 [ 2657.813947] ? __put_super.part.0+0x2a0/0x2a0 [ 2657.814910] mount_bdev+0xf8/0x400 [ 2657.815668] ? msdos_mount+0x40/0x40 [ 2657.816471] ? setup+0xd0/0xd0 [ 2657.817155] legacy_get_tree+0x105/0x220 [ 2657.818026] vfs_get_tree+0x8e/0x300 [ 2657.818833] path_mount+0x1331/0x21c0 [ 2657.819654] ? strncpy_from_user+0x9e/0x470 [ 2657.820590] ? finish_automount+0xa90/0xa90 [ 2657.821511] ? getname_flags.part.0+0x1dd/0x4f0 [ 2657.822532] __x64_sys_mount+0x282/0x300 [ 2657.823397] ? copy_mnt_ns+0xa00/0xa00 [ 2657.824239] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2657.825356] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2657.826461] do_syscall_64+0x33/0x40 [ 2657.827252] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2657.828342] RIP: 0033:0x7fb4e3052b19 [ 2657.829135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2657.833062] RSP: 002b:00007fb4e05c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2657.834673] RAX: ffffffffffffffda RBX: 00007fb4e3165f60 RCX: 00007fb4e3052b19 [ 2657.836197] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 2657.837713] RBP: 00007fb4e05c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2657.839237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2657.840767] R13: 00007ffe269abd3f R14: 00007fb4e05c8300 R15: 0000000000022000 [ 2657.842331] CPU: 0 PID: 14564 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2657.844088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2657.846138] Call Trace: [ 2657.846797] dump_stack+0x107/0x167 [ 2657.847701] should_fail.cold+0x5/0xa [ 2657.848642] ? create_object.isra.0+0x3a/0xa20 [ 2657.849761] should_failslab+0x5/0x20 [ 2657.850690] kmem_cache_alloc+0x5b/0x310 [ 2657.851693] ? mark_held_locks+0x9e/0xe0 [ 2657.852700] create_object.isra.0+0x3a/0xa20 [ 2657.853788] kmemleak_alloc_percpu+0xa0/0x100 [ 2657.854905] pcpu_alloc+0x4e2/0x1240 [ 2657.855829] ? sock_inuse_exit_net+0x70/0x70 [ 2657.856915] sock_inuse_init_net+0x26/0x110 [ 2657.857969] ops_init+0xbb/0x6b0 [ 2657.858800] setup_net+0x2f4/0x900 [ 2657.859673] ? ops_init+0x6b0/0x6b0 [ 2657.860569] ? down_read_interruptible+0x460/0x460 [ 2657.861773] ? kasan_unpoison_shadow+0x33/0x50 [ 2657.862907] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2657.864182] copy_net_ns+0x2c0/0x5d0 [ 2657.865113] create_new_namespaces+0x3f6/0xb20 [ 2657.866231] copy_namespaces+0x3fb/0x4f0 [ 2657.867226] copy_process+0x393a/0x78b0 [ 2657.868218] ? SOFTIRQ_verbose+0x10/0x10 [ 2657.869208] ? __lockdep_reset_lock+0x180/0x180 [ 2657.870337] ? mark_lock+0xf5/0x2df0 [ 2657.871272] ? __cleanup_sighand+0xb0/0xb0 [ 2657.872342] ? _copy_from_user+0xfb/0x1b0 [ 2657.873368] kernel_clone+0xe7/0x980 [ 2657.874290] ? __lockdep_reset_lock+0x180/0x180 [ 2657.875433] ? create_io_thread+0xf0/0xf0 [ 2657.876465] ? ksys_write+0x21a/0x260 [ 2657.877403] ? lock_downgrade+0x6d0/0x6d0 [ 2657.878450] __do_sys_clone3+0x1e5/0x320 [ 2657.879440] ? __do_sys_clone+0x110/0x110 [ 2657.880493] ? rcu_read_lock_any_held+0x75/0xa0 [ 2657.881625] ? vfs_write+0x354/0xb10 [ 2657.882534] ? fput_many+0x2f/0x1a0 [ 2657.883426] ? ksys_write+0x1a9/0x260 [ 2657.884378] ? __ia32_sys_read+0xb0/0xb0 [ 2657.885370] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2657.886650] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2657.887948] ? trace_hardirqs_on+0x5b/0x180 [ 2657.889005] do_syscall_64+0x33/0x40 [ 2657.889914] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2657.891175] RIP: 0033:0x7f5655a9cb19 [ 2657.892095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2657.896644] RSP: 002b:00007f5653012188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2657.898493] RAX: ffffffffffffffda RBX: 00007f5655baff60 RCX: 00007f5655a9cb19 [ 2657.900260] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2657.902016] RBP: 00007f56530121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2657.903789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2657.905530] R13: 00007ffe977ed49f R14: 00007f5653012300 R15: 0000000000022000 02:40:26 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x7a00, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:40:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x2d8, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:40:26 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000040)={[{@abort}]}) 02:40:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="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"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x13104a8, &(0x7f0000000940)=ANY=[@ANYBLOB="04a6d92b54b930c45ca4f674d605ceda2a1eb7bb805ba06dd8d4c6018f069f7a651553a647894e78310349651d6cc5c35355a43f339a546914fc6e94a986c17ea5b7e46c0fe6aed55374f19c5d42e907a6880cfde8d128bd84afa10bc95730cd40f6276a4a0f1680d1f3fa6f35b2dd2d7ed6b7576d7e3b1a4f74c7c24f7ca116d6438775f14d29516648512c4a65078d9a1a8671a6f7e949328361e58d5a2fe4571d0ce0a672828aeae0d3", @ANYRESHEX, @ANYRESDEC, @ANYRES32]) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00'], 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) 02:40:26 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xffffff7f}}}, 0xb8}}, 0x0) [ 2657.975408] FAT-fs (loop2): bogus logical sector size 22820 [ 2657.976866] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2657.997222] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2658.005073] EXT4-fs error (device sda): ext4_remount:5895: Abort forced by user [ 2658.019349] Aborting journal on device sda-8. 02:40:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x300, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 2658.030448] EXT4-fs error (device sda): ext4_journal_check_start:83: Detected aborted journal [ 2658.033146] EXT4-fs error (device sda): ext4_journal_check_start:83: Detected aborted journal [ 2658.034002] EXT4-fs error (device sda): ext4_journal_check_start:83: Detected aborted journal [ 2658.046577] EXT4-fs (sda): Remounting filesystem read-only [ 2658.047868] EXT4-fs (sda): Remounting filesystem read-only [ 2658.055021] EXT4-fs (sda): Remounting filesystem read-only [ 2658.056065] EXT4-fs (sda): Remounting filesystem read-only 02:40:26 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0xe701, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:40:26 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xffffff80}}}, 0xb8}}, 0x0) 2025/08/23 02:40:40 executor 7 failed 11 times: failed to create temp dir: mkdir syzkaller-testdir903948769: read-only file system VM DIAGNOSIS: 02:40:39 Registers: info registers vcpu 0 RAX=ffffffff8567a47c RBX=0000000000000000 RCX=ffffffff81473b58 RDX=ffff88801a85cec0 RSI=ffffffff81473b71 RDI=ffffffff816c2a88 RBP=ffffffff816c2a88 RSP=ffff88806ce09da8 R8 =0000000000000000 R9 =ffffffff8567944f R10=0000000000000000 R11=0000000000000001 R12=ffff88806ce09e28 R13=ffff88804b84d290 R14=0000000000000206 R15=ffff88804b84d290 RIP=ffffffff8126e7d8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f53fd310328 CR3=000000001b984000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000258 XMM01=000000000000000000000000ff0000ff XMM02=000000000000000000000000ff0000ff XMM03=746964646120726f66206b6365684320 XMM04=737973722e7777772f2f3a7370747468 XMM05=2e656e6f20736968742065726f666562 XMM06=6c616e6f69746964646120726f66206b XMM07=656220746f6e20646c756f63202c7473 XMM08=7261747320676f6c73797372004b4f00 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff85a302e4 RDX=1ffff1100304cf47 RSI=ffff888018267e68 RDI=ffff888018267e68 RBP=ffff888018267a35 RSP=ffff888018267928 R8 =ffffffff85a302e9 R9 =ffff888018267e70 R10=0000000000032046 R11=1ffff1100304cf2d R12=ffff888018267e70 R13=ffff888018267a00 R14=1ffff1100304cf2d R15=ffffffff85a302e8 RIP=ffffffff81108c36 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd249c20900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd24912ba90 CR3=00000000094f6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000069767265732e676f XMM02=ffffffffffffffff0000000000000000 XMM03=427061430a6666666666666666666631 XMM04=6d654d0a31303030303030302c303030 XMM05=00000000000000000000000000000000 XMM06=6d654d0a312d3009303030302c303030 XMM07=00000000000000000000000000000000 XMM08=00000000000000510000000000000000 XMM09=00000000000000000000000000000000 XMM10=00002020202020200020202020200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000