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", 0x1000}, {&(0x7f0000001980)="cf9b547aafdf42f0492297723f036e254fe5d286499d1ec3861a61eb93810d2daff3a14c73abcf0194c5edfadbf00e27b483464e7db60d27392ed631a6ab0801278327ca", 0x44}, {&(0x7f0000001a00)="4389ec97d47db3bb30211957e1a7dd4a1f36d1da57ee983a2dd49376ca5f5cf0228782cd8368f99795c1a0b9faa0d056ea084137e8511fc29d100819dc9905aae471f3775b262a4a0cd1f9a50359cf143029eda1612f9b70789ab8270ecd654e80e48232e85a09ce46541018d84cad98bbaa2bd64d4fbc973f88cbc44a82cc64ab06deb8fa8bde55628608537e089a051e77ae945c17b4ce6dd14bbb32de50edc5fd623dae9d0f", 0xa7}], 0x4}}, {{&(0x7f0000001b80)={0xa, 0x4e23, 0x151c, @loopback}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001bc0)="1ad27fdb5cef8332c11381c27456f7c448e3edb59ad563b8a663a6b8c485e925dba4faeaf0", 0x25}], 0x1}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001c40)="d4790930bec3711dad34f735d5dfa0270b4fc14dd6c61db7cd39ee5c24649bd797f178963dc67be6ec2ceaec3e44dd3f7522a7b32fd7bffe382353c272cc03796cbe7410998e94e4bd7df248067fe38ed8bffcaca22a04fb143bfa8418cda0ff81d9b4f0c92ed34c8ce8177c3bdead2dae2893e5d97b31b02e6ff67b5581abbfef34a450d6fbb3175f8977be703d0a41ced3ccee6382ebd0f7a56bc9a166effc8fd6fa925f79a6684201f5240c8af6b045a5fac5145d4e69f052e74f809463ef42397e207eb9a630d19644635afb9374d7499d4e7d87ca36434eaf4d8a", 0xdd}, {&(0x7f0000001d40)="a7da9b596f2bddbe78baa67c123e1cca95212cca8a9dd61e3d80d70c4e84c215a114386937ae83dccdc36f8dffeba7c33f237be4a417caa849379da018d8792e1e5f89fdc7ca20ef0312088ab19e147a1a873b9b2eb0067e55127bd0bfc48e7a5e38a9c115", 0x65}, {&(0x7f0000001dc0)="0c65d34664be40ae496d533afe936984f3e531768f54fd999c00f82b82d4d1b00315627eace21b94a7c562a0889dac8707bd0930d31d858b78cd5e65c03169caeb", 0x41}, {&(0x7f0000001e40)="f120e107b011bc261e5a64acaef54b18786bddda98b8db0d264bd40a9295b574e37dfff4a77348ee0abaa0d1b34ed3efca0fe4c5c576cfe767758de9da68ed9f768e61c83dc31d01526614afff17ea557b3348410d93f4c824cbd687ce83d67a12d43504c952e17a1269b6bb14db41aecf9047b7d0b398db5fe6b58aecab5122c88162130366119aa7e6", 0x8a}], 0x4, &(0x7f0000001f40)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0xbe, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x1f}, @calipso={0x7, 0x38, {0x0, 0xc, 0x80, 0x0, [0xffffffff00000000, 0x6, 0x7fffffff, 0x2c6, 0x5, 0x1]}}, @ra={0x5, 0x2, 0x3699}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x80000000}}, @hoplimit={{0x14, 0x29, 0x34, 0x200}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002040)="3d7f2fa2ed3f1fb756f4994dc6252255b4b23e212aa13d51975bfab69a95657e372b46e8458c1ace41837d81cd5c64111dde062db9cacb0ecd773d92ee595ba8639826bc59d0e34321214e51fde214f3fd067e743977d65b9285751614d982574b0f9bcd2d3a4d78e101d1c5dbc4e540f4b8d2f8bd09ff4d39c6408c5cca78ac39ad50a5ddd3fad2b72b70a54c82", 0x8e}, {&(0x7f0000002100)="4d161d2883da712bff4c6327dbc2373631cc4fb6bd0880dd5f9767929532f4cfad051e3785035608bafdf6aafddcd721543aa3202bc519a6f67b1e6637b19634eaebd21f7629dd1980efdb37a4374229c718fa4d", 0x54}, {&(0x7f0000002180)="dfcf5e9a68735b159913908fb0f17c2325f6c1d43ac1ba8a4f6d82d9ab30c3690d022bbb3357e296a8a9c13c07c085837596a3", 0x33}, {&(0x7f00000021c0)="5f20e91d3731065c17cda695f596b692c1e85308db4afea70b", 0x19}, {&(0x7f0000002200)="18244730fdecafc9650eeac3fb9e2b5203b6604dbf1cd9cd6312189e5bd5630229fe62b908324d61b22d69848f4ec770600dcff0e6a8a31f1a2d63e2ae31f5e0f6783923b2f0fa9589854790f8c95d1d8c06022cb2e022c6972a0dcb", 0x5c}, {&(0x7f0000002280)="19f4ae686983d9f668fd163513d955a4734059f71ba4e7030db99ad28d381b54136360ba7310445d856919fa7834d2e74f71cea942d83cbed6df264e724e8e9a080a7e8478d2597c807c2a4936a694b5a45d2e50f1539ed7353026b54480b164", 0x60}, {&(0x7f0000002300)="73ed172b5c40906f16f5bb1a55877f92e6874539a6b50dd6927552f7ce8a552b0391dc48a5ad05c7d7e5ee5eb012aacc35592b5c909b34f01b21636dfd229edff40461b389e0a7c43d712eed0d6a0f9d44a3d064ef336219", 0x58}, {&(0x7f0000002380)="6f4f894db1d6e1dbfc9c096f", 0xc}, {&(0x7f00000023c0)="55b1cafd50ef24850fbce58b82ddcea7d627aac126faa3346e1ed4e9085fba7db0efb47362c4d49d35d0ce01c24350129fc6419ab07a5f5e", 0x38}], 0x9}}, {{0x0, 0x0, &(0x7f00000024c0), 0x0, &(0x7f0000002500)=[@dstopts_2292={{0x1f8, 0x29, 0x4, {0x87, 0x3b, '\x00', [@generic={0x0, 0xdc, "368e0b6f6cdb198954327973f0f79fdbe6d42005191d25d83f24a0b304fd307e2723fac66e9828dcce9922ef11ea0e7cbcfa484405ba0bad56010b0827a6939da5ae24a7d2930108850a13298acfa384e6e4bdc45e10fb0719eea5e1e6d9615ec8f5194cc3d5537d2990c35e678ee0582d01578ef8ee4aa8bc63b5281032917f253d01c307dea0ede2706d9c5524a8958147a554423c5cbc07524f1afbc6196f58b6ba9454e4cf3f4a5fff2d20d1710c0d49c4fd19727b448108b87783a65d457711d7bccb486ee00b0884a5f9da1cbc893ae5747dbc9f57dd8d641d"}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xf7}, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x42}, @generic={0x0, 0xdb, "5c9b8f56c67296bbadcdab99afaae292a245bb1d5a36dc3c2759441922161011cc3ec98351fbfa139e1263d790ae9987b6c5b71cc3238c242edefa4b0212d881398a876db9a41eaeba16c084e5ff8fa3a9d3b9887a4b45d35bffa0aefa2d97893e57741cd81871745cc28dfeea3f6c437b59402aec34134721276c68ff1d3e6d07a7a04fe62900f8c82d34350ea490afbcc95be49678ac3cce3dd4c40b738a55ce4ac6c856b9e2c4b430f5697b763b5688864e71d5eadb636126d1a538d4d6df489f839cbccca3c7a64812e5011d31ab251d5d00356dddf33a1665"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1d}, r5}}}], 0x220}}], 0x7, 0x40020) syz_emit_ethernet(0x42, &(0x7f0000001ac0)={@multicast, @link_local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, 'M}1', 0x8, 0x3a, 0x0, @remote, @loopback, {[], @echo_reply}}}}}, 0x0) [ 1475.078148] tmpfs: Unsupported parameter 'huge' [ 1475.080136] tmpfs: Unsupported parameter 'huge' 21:50:54 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x1c}, @local}, @parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast2}}}}}}, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000480)="af", 0x1, 0x1000000) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0x78) write$tun(r0, &(0x7f0000000000)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @random="1d2496ef1563", @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @private1}}, 0x34) 21:50:54 executing program 4: read(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1451c2, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1c8) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c632600781800"/18, @ANYRES16=r5, @ANYBLOB="010100000000000000002b0000000a0001007770616e300000000c0005000000000000000000"], 0x2c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, 0x0, 0x48011) pwrite64(r2, &(0x7f0000000480)="af", 0x1, 0x1000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0xb) openat(r0, &(0x7f0000000140)='./file0\x00', 0x412100, 0x2) fallocate(r1, 0x8, 0x0, 0x8000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) write$P9_RAUTH(r0, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x1, 0x3, 0x6}}, 0x14) 21:51:12 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000480)="af", 0x1, 0x1000000) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0x78) openat(r0, &(0x7f0000000080)='./file0\x00', 0x880, 0x8c) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x14000, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x4000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) dup2(r2, r1) 21:51:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:12 executing program 4: mount$9p_unix(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x20004, &(0x7f0000000380)={'trans=unix,', {[{@cache_loose}, {@privport}, {@access_client}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}], [{@obj_type={'obj_type', 0x3d, '&&'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@seclabel}]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x0, 0x0, "4fa2f8201eed6e500c32342a227989f18a88ab65bad4c23a441d66f462f1df77bc777d160562da8c50431b2a204f36c6ed27b00215909d75417aa68c9029c5fd", "176764fe8c2ff71a1633d53dafbecd823af97cf5831be9a6fed5449e9f77dd92"}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/locks\x00', 0x0, 0x0) lseek(r1, 0x9e46, 0x0) fcntl$setlease(r1, 0x400, 0x0) io_uring_enter(r1, 0x7986, 0x1a65, 0x3, &(0x7f0000000500)={[0x6]}, 0x8) fcntl$setlease(r1, 0x400, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000800)={{{@in=@remote, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f00000000c0)=0xfffffffffffffeca) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000900)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000680)={{{@in=@dev, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000540)=0xe8) faccessat2(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x102, 0x200) unlinkat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) 21:51:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:12 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e1e, 0x3, @remote, 0xfb}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000fffffdfd0000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000f1ff00000000000000000000000000341fc74d91a7f32cc2a07b00000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1757b020008000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f710142dcdba5c159fe91400d7800"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x2, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000280)={0xb7, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, {{0x2, 0x4e24, @loopback}}}, 0x108) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x4, @remote, 0x9}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @dev={0xac, 0x14, 0x14, 0x8}, 0x1, 0x1, [@multicast2]}, 0x14) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e20, 0x6, @empty, 0xfffffffe}, {0xa, 0x4e20, 0x6, @private0, 0x3}, 0x400, [0xbe, 0x0, 0x125, 0x0, 0x2, 0x8, 0x7, 0x6]}, 0x5c) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) 21:51:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:12 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) close(r0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x42800) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) splice(r1, 0x0, r0, 0x0, 0xfdef, 0x0) 21:51:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1494.360453] EXT4-fs: error -4 creating inode table initialization thread [ 1494.370688] EXT4-fs (loop4): mount failed 21:51:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:28 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\x82\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\xb5\xc6#w\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87\x8d\x8d\x82|\x94\x10\xdaU', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x10000, 0x800}, {0x7, 0x80000001}]}, 0x14, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/255, 0xff}], 0x1, 0x81, 0x8) 21:51:28 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2000, 0xc0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x8, 0x0, 0x8000) openat(r0, &(0x7f0000000000)='./file1\x00', 0x1812c2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x800, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1050}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount$bind(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x101044, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x34) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) sendfile(r2, r1, 0x0, 0x500000001) 21:51:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:28 executing program 7: ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}], 0x4148800, &(0x7f0000000800)=ANY=[@ANYBLOB]) 21:51:28 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:28 executing program 5: r0 = inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='ext4\x00', 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000240)=0x6) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x83, 0x7c, 0x1, 0x80, 0x0, 0x6, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4, 0x2, 0x5c01, 0x6, 0xffffffffffffffff, 0x9, 0x9, 0x0, 0x80000001, 0x0, 0x3ff}, 0x0, 0xb, r4, 0x2) sendmmsg$inet6(r5, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000850) r6 = openat$cgroup_devices(r3, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) r7 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) inotify_add_watch(r7, &(0x7f0000000140)='./file0\x00', 0x12000440) rmdir(&(0x7f0000000000)='./file0\x00') 21:51:28 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:28 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x4686}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000340)={0x28, 0x18, 0x0, 0x9, 0x2, 0x84, 0x4, 0x62, 0xffffffffffffffff}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)={0x0, 0x0, 0xa, 0x0, 0x0, 0x8f6}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000180)={0x0, 0x1f, 0x9, 0x9, 0x7, 0x7, 0x5, 0x26, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x1) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000300)) open(&(0x7f0000000080)='./file0\x00', 0x20003, 0x83) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000100)={0x38, 0x22, 0x15, 0x20010, 0x8, 0xc, 0x2, 0x56, 0x1}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x9, 0x32, 0x1, 0xc, 0x4, 0xd00, 0x3, 0x0, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(r0, 0x7003) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) [ 1508.910073] rtc_cmos 00:00: Alarms can be up to one day in the future 21:51:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:28 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:28 executing program 5: r0 = syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) preadv(r5, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/246, 0xf6}, {&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000400)=""/21, 0x15}, {&(0x7f0000000440)=""/155, 0x9b}], 0x5, 0x0, 0x0) dup3(r4, r3, 0x0) io_uring_enter(r0, 0x2271, 0x0, 0x0, 0x0, 0x0) 21:51:45 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:51:45 executing program 5: open(&(0x7f0000000280)='./file1\x00', 0x18000, 0x38) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) close(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB="2c616363f7d100000000000053d0"]) [ 1525.491519] 9pnet: Insufficient options for proto=fd 21:51:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:45 executing program 4: r0 = getpgrp(0x0) r1 = pidfd_open(r0, 0x0) stat(&(0x7f0000000040)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/vtconsole', 0xa3fcf02ebf44e2a1, 0x30) dup(r3) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup(r1) setns(r4, 0x20000000) 21:51:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:45 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r2, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') chroot(&(0x7f0000000240)='./file0\x00') unshare(0x48020200) 21:51:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1525.530833] 9pnet: Insufficient options for proto=fd 21:51:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@getspdinfo={0x14, 0x25, 0x10, 0x70bd27, 0x25dfdbff, 0x7fff, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008844}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000008a698fb3653fa003000800"]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000003c0), 0x8) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000300)="62a27196834f47426dc8a853c13b26abdca2b9e6fcf211431676ca6582e0097e3c0482748db573a3819e25664db9affd0f61144c08ce4455b7d82fa3c5430b4730175c329a19e2f3de0e16403251a30bad0e8876c49e062a253b259570021b17b770e4fc7f20dce17663c46bb9504f3cb86968c26811911fcb19331510861b888906b315e1f7f7892459061407eff4da0b7222961d15f414e5fe5c7c19b4884a2c9eae41108b772cd0a14fedbef7b29641e1af136dd6d6", 0xb7}, {&(0x7f0000000500)="6536bf68c6f737cfa9724cb7ba5e82b5bf91d0276aa9f6f92ef222dcc8e5b1901be5f2dd4eec8779474b7b5ae4afb5e391fe9fff5236d57fa5dba347abcee50de93c034ee38374617c6e9c359adb8d4c7451a42292b9099e347a88cb790b0044497038e030c032bf478f5fe009715eebac7d0ce0ae38261e159d5653d9eaa79209cec9127652ee9b83119f2e3a8bd261c0de85e4a2c48259dfe699d495c433ad68be492fdecf9b0ac44120db88c82a6c247b9c29e20122e1", 0xb8}, {&(0x7f0000000440)='e', 0x1}, {&(0x7f0000000600)}, {&(0x7f00000006c0)="dca5e78125dc8b8ec68cd38e7a802a840e0cd63af61edd5d9e715494f106b0d6788de84357691da1c3ffd05b912a692192b24dc94284d2d8aabb4f2753b4d45e561082e47cf2028ed5a5054a80204a01f7bb6b0cc1b5a6d71a2c195f4878d9e0d6fe9fdd48ac4bbf8b796d0077f87f2e4038ed6167ac49819a23cf0366080e80c24133de", 0x84}, {0x0}], 0x6}}], 0x1, 0x8000) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x6) umount2(&(0x7f0000000000)='./file0\x00', 0xc) 21:51:45 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:51:45 executing program 7: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)=ANY=[@ANYBLOB="1349ea826bdc57e6fdcb7ede143bbe99f02bb60c6f5da6e8575ab7c2cf9f712a47c9426a60d1334489f5d70ec5bfd16ae37be10a2e847d5b9e7797d518288ec5dcbd2a9986ffc53a737ca96a35ca6129bf8b8888896a01f0c05e54794bd00000", @ANYRES32=0xffffffffffffffff]) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000480)="af", 0x1, 0x1000000) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0x78) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f0000000480)="af", 0x1, 0x1000000) write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0x78) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000000)={{r2}, {@void, @max}}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x80) recvmsg(0xffffffffffffffff, 0x0, 0x2102) mknodat$loop(0xffffffffffffffff, &(0x7f0000000280)='./mnt\x00', 0x20, 0x0) stat(&(0x7f0000000040)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e53a92264ba971ffe2cb49418afd33d756e69782c726f6f74636f6e746578743d73797374656d5f752c736d61636b6673726f6f743d7072656665722c26736d616769633d30ea4c3030303030303030303030303030342c7569643c270c9a37e836cd6e", @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r3, @ANYBLOB=',fsmagyc=0x0000001000000006,\x00']) recvfrom(0xffffffffffffffff, &(0x7f0000000500)=""/102, 0x66, 0x20, &(0x7f00000007c0)=@nl=@kern={0x10, 0x0, 0x0, 0x8000}, 0x80) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r4, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000001c0)=""/89, 0x59}], 0x3, 0x5545, 0x0) 21:51:45 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:51:45 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:45 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x1f, 0x20, 0x0, 0x7f, 0x0, 0x80000001, 0x18000, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_config_ext={0x7f, 0x8}, 0x100c8, 0x3, 0x7ff, 0x8, 0x7, 0x2, 0x6, 0x0, 0xf6f, 0x0, 0x5}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1b) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000000c0)=0x3) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) [ 1526.251426] device veth0_vlan entered promiscuous mode 21:51:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:51:45 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6_vti0\x00', {0x2, 0x0, @broadcast}}) 21:51:45 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:00 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:00 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:00 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x1f, 0x20, 0x0, 0x7f, 0x0, 0x80000001, 0x18000, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_config_ext={0x7f, 0x8}, 0x100c8, 0x3, 0x7ff, 0x8, 0x7, 0x2, 0x6, 0x0, 0xf6f, 0x0, 0x5}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1b) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000000c0)=0x3) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) [ 1541.514259] device veth0_vlan entered promiscuous mode 21:52:01 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:01 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:01 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:01 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:01 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:01 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:01 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x1f, 0x20, 0x0, 0x7f, 0x0, 0x80000001, 0x18000, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_config_ext={0x7f, 0x8}, 0x100c8, 0x3, 0x7ff, 0x8, 0x7, 0x2, 0x6, 0x0, 0xf6f, 0x0, 0x5}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1b) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000000c0)=0x3) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) [ 1542.579242] device veth0_vlan entered promiscuous mode 21:52:02 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:18 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1558.853402] EXT4-fs (loop7): Unrecognized mount option "_4¸~c‰XÖâ*)H [ 1558.853402] W¡Õ" or missing value 21:52:18 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x1f, 0x20, 0x0, 0x7f, 0x0, 0x80000001, 0x18000, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_config_ext={0x7f, 0x8}, 0x100c8, 0x3, 0x7ff, 0x8, 0x7, 0x2, 0x6, 0x0, 0xf6f, 0x0, 0x5}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1b) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000000c0)=0x3) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) 21:52:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:18 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4b4183, 0x8) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x88) lseek(r1, 0x800, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000000000)=""/46) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000000000000", @ANYRES32=r3, @ANYBLOB="04000000ffffffdf717766696c653100"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) r5 = open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x9101) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0x20002001}) sendfile(r1, r3, 0x0, 0x100000001) 21:52:18 executing program 7: [ 1558.873743] EXT4-fs (loop7): Unrecognized mount option "_4¸~c‰XÖâ*)H [ 1558.873743] W¡Õ" or missing value syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30313738333335313800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000003aa2ac8103a046169889a50d8894c561010040000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000004300000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000e0f4655fe0f4655fe0f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2100}, {&(0x7f0000011600)="20000000688aa2d2688aa2d200000000e0f4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011700)="8081000000601020e0f4655fe0f4655fe0f4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000e0f4655f00"/160, 0xa0, 0x2600}, {&(0x7f0000011800)="c041000000380000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800000000000af301000400000000000000000000000700000020000000", 0x40, 0x2a00}, {&(0x7f0000011900)="20000000000000000000000000000000e0f4655f000000000000000000000000000002ea00"/64, 0x40, 0x2a80}, {&(0x7f0000011a00)="ed4100003c000000e0f4655fe0f4655fe0f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000001fb537300000000000000000000000000000000000000000000000020000000688aa2d2688aa2d2688aa2d2e0f4655f688aa2d20000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2b00}, {&(0x7f0000011b00)="ed8100001a040000e0f4655fe0f4655fe0f4655f00000000000001004000000000000800010000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000c6914ad800000000000000000000000000000000000000000000000020000000688aa2d2688aa2d2688aa2d2e0f4655f688aa2d20000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011c00)="ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3031373833333531382f66696c65302f66696c6530000000000000000000000000000000000000000000001f44752800000000000000000000000000000000000000000000000020000000688aa2d2688aa2d2688aa2d2e0f4655f688aa2d20000000000000000", 0xa0, 0x2d00}, {&(0x7f0000011d00)="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", 0x1a0, 0x2e00}, {&(0x7f0000011f00)="ed81000064000000e0f4655fe0f4655fe0f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c0514d06100000000000000000000000000000000000000000000000020000000688aa2d2688aa2d2688aa2d2e0f4655f688aa2d20000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x3000}, {&(0x7f0000012000)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000012100)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x10000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012700)="00000000000100000000000000000000000000000000000000000000004aab9c", 0x20, 0x13000}, {&(0x7f0000012800)="504d4d00504d4dffe0f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033310075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x28000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="5f34b87e638958d6e22a2948160a57a1d50200739a294d0e35f5fca58998f250ef132407740c54d2bb80f998cb1a51d7e6b5b3199b391323e157d694b475a58c0699f400401e3b69bd1d067cda59d86ab6ecb2a720e771ad3c97e031e1"]) 21:52:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1558.968567] device veth0_vlan entered promiscuous mode 21:52:34 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:34 executing program 7: fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@md5={0x1, "1843949bfb6c192f55eab12db10e8ae2"}, 0x11, 0x2) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000d0a9da48497c4915a7449265c083aec0010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1800}, {&(0x7f0000011000)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000050000000020000000400000052", 0x49, 0x1c00}, {&(0x7f0000000380)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001002000000010000800000000000af30200040000000000000000000000000000006000000002000000040000006200000000000000f22a6eb0a7525e14e9f2a4757df8d399f73f5f33cf457c3c4f9d3b07825affdd93a7cdd74353dfa8b9535e6b53e8be546b", 0x81, 0x2000}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x14000}], 0x0, &(0x7f0000013800)) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000140)='&\x00', &(0x7f0000000180)='@+,!$:%&\\,]\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='[!./&#}\'\xab*),.^\x00'], &(0x7f0000000580)=[&(0x7f0000000480)='$\x00', &(0x7f00000004c0)=':*-8\x00', &(0x7f0000000500)='security.ima\x00', &(0x7f0000000540)='ext4\x00'], 0x100) 21:52:34 executing program 5: r0 = epoll_create(0x3ff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000010}) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xff, 0xc5, 0x71, 0x0, 0x0, 0x2, 0x980, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x10000, 0x1, 0x100, 0x3, 0x62, 0xb9f, 0x7, 0x0, 0x8, 0x0, 0x70}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x20000001}) 21:52:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1575.541887] EXT4-fs error (device loop7): ext4_quota_enable:6423: inode #4: comm syz-executor.7: iget: bad extra_isize 107 (inode size 1024) [ 1575.564547] EXT4-fs error (device loop7): ext4_quota_enable:6425: comm syz-executor.7: Bad quota inode: 4, type: 1 [ 1575.574467] EXT4-fs warning (device loop7): ext4_enable_quotas:6463: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. 21:52:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1575.604685] EXT4-fs (loop7): mount failed 21:52:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:35 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x5, 0x7, 0x1) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x0, 0xfffffffb, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/if_inet6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x88) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000280)={{}, "71b9b7f977a792ae49364c2ccfdd33ab37acba403387d2c72f43daf973dc830089a627be1eeeaf09a29e9e503f16f0d841af09a9c797c8ec99f63a645d5ae07aa17c4376365088402030f561b1bcdfcd6183ad8edb06d498fa5ac2cb3dfecad84544a02b835bf7d16ba1a78bedcde1934eacb35e16d44c64ad1829dcf26d16733f2f652b894df7308bfe01ee24a640767c2870a98a79e85eb081f13ee4f8c0cc17710317532ec5cfc773928846c3124a8b5acd37907656a4ce0fce2e09dc0d6569c6e09f02f9f938cf6055a403e1ddfa6136fcce5d26cdb937e2b070dbd3dc59a76208eeccaed0971a3938a2193e4a76f8d1c1e5dc8a2c9e7682339c2d6089b475dd83df93e67bcc8c7c81955da6d58deb44b9792b3fdcd7f6cff890aad237af64e2b65d2b98b88dc01dd1a17570a30571394ec5928ff89b5f50adab84d073b5ad13c2debdb6c46b6a339a6f8a869bb6d0b873b4bebf1f5e4b8347ea108b2bfd119f86e23948c33b42875b51ce0de12b38c3f6eb688a82a6e6f05c3ddd89de097d8e01e4b03a0d9520cf46c5e507b198ac4972a6de2f1da2ef1919ec519b9da4a43a2906616f4c8cceeb92a7a9b44763a87aad5d767523f7f5c3f4bd6cc0a12c0d48a5fcd681b839e68ee24f8368d0725fd4f3177422769fe6a8bc8b3545d128963d30f67d6b83ed9fba7a3b4fb1138338d6b04c4b69040da506761579781b617e04b2e5cb2b2ee253e3468eee0e845fe2ba199c194cd823e7289c236da50a6f96419994d7914af46d4044049c40825819bde00021101a23f9096c7f0b35d147ccb24922119a44602c95fc0caea526771e8b09e5726b379acf2a8d3b948d990c7088b2eb5c516e689498af16c7433763aaccdfb9690c10f27e1c80ce2e520d6ad1608114d91794254584409b54ce621fb98738c97c7827a78b5b33a320c6825314efbfa9f6666f3ed3e47acba93068fe2851c8050c350747e690b7d0a5738d8da849a631b86e478e999d4ee28a4d53f0d8c0a7bbd122e56552106ad4bc99dc0fa2c5007c646b53029de796e03176bb4e5006e6bb6f65c9336f90f85f330f7d2af53cee047b1139cb80388ebdd98cc2a7bb4c3b435c22cffcf12112506afc74ee26c3591b951384a7833ccda0044a9f6ba5920ff6bba44a82d71db020d8789a29bb21acacaef2a8345d31ab86be55abca188e9825ac3e38bbe35f322a6d385a9c54a16a9dcbee38c31651c0ebe2691a84512a01dd2a392964388c295ae9fff29c4560290b52219ad01050bef63ed1577fa3202514a4d2b2f375f32fc46bc8840f337b65f58040e492da26cabe29bb7d530b88a47e6915c4bbc21acf8a57d42e799eae33024ed0714ace42e285dd879ec5509e350ebc3b142d7ff5da2c6b6857d17fdaa558f6dfb7063498d650dc6e328859156bdeab820d421bb6d4e77bcf1a60887a0d472abcf2971e0138a1137b7325a5a39965799e092f8f74f5fb7d7ab8d0ef604912c5155bb68bd47195b83b6fd3c219dacd3d0cb26a4f40c702e5d67236a9d5898d613e91ea3c5159ffd1ebfcd3006c6ef816b3ff4d3ad44725ffd9b62acecb746450da208c9e29ed2138f1983c566d3d84eaa3111fecb3742d90ecd8b1c5eabed86f752d97a57c91c59a6b580c5925614b1b6c4593d97dcfc92b10192431ec4237aee932df8972ffdd6a923fa29b3d60d861b7dbb4bd68625f4bc3c8eedbbd7300cfd77e5853713196ce8e37d8457d689d0f5ec3ef674f1011d7ebf17026d2b30f2551605ab1c0902ffbcd881058b7a321d11d864361683bf6175fc1467718bf61441bc1e02796827d18e4cd42b1517f197d3203d928d6d1dd14a0081b6f4bd552d3c02da2ccde568049d16b9190971c1a34ab7baec6f6a92d2f944b1298c2963f38910f4f51e620f979a125c33c9090f8f32b71007a34b08d0f4e16f20fef70e90a507e8086c89120b2c28071760a0fd08620d712adb17a581eacdfbeffb088d3976e4a955bb953797830587e44d5e0797db9f705b5559d693e3595142d06d2103dc3a1a3c485038d1ed7da32b2ca12ee76e6a4163fbb9c6c16c42e934305db2bc7997af2057d5344c965471918dd9b9e39f93cb6e57ccb1a96c12b7c396f88babfa92fd34025454fe22f6a95904be657e1d844d64de184fcf77fddbb8cbead2462b6b060692c2665b194b2cdce1b97287708d783fbf621d951465e6cf0e553ceeaef7cd21b0a5baf65b36659baa459928ee8edac97a70bc2e9a1a2ea6b36ef13f9ecb1af469c47869c611ca42803a141c146d42a0626ce9cc89301ad3d4ad8bbb4e5c29001b3d5c4088274bb95a954ea87137f0ef57cc30f9b6a9270d2c01cd5e6e2d663e71e4632948e7fa2d8da7dc6e049d89ad523bc394feb660154cd6242b80ea433560e556e543a0995809bfee9c33d11db770cab0267d502a9fe262e62c9967243402cddd45eae0185018189c5ced8b966a57aabe430a1170d04d7b60a136790e13376426686eecd85a29bbaa427043c095010ef715ffc539c82d283944114b7cd484cbfef8e362278f8ec960edb3d6a6dc9cc8b72287a828e8a421b66fff5612af42d8def68881fa4e95882632caedee3212c1b339b56238c2b6db47ee3ef429f6c28d6068f71b1faa10f58c0318030131882925ee55ea793bde765e55d8227fbc188a3e68196d6b3ffbd6355edb8beeb66d390ea65119de3066bfc28aab4b54bed4cfc0de006fc2307efdb518061909c59904c76c6dfa017656e19b658ef982a81f61d35db74afa392e4c5556e290e1e68079b64bc6a2c1885f185093942be98a4092c5dc5e84779b40df7b582a0a920f4ba85fb813d6d00358a552133196d1420f9f3231489205be2e55133c40a6c4537d0df809c1b02fa8b75abf868c8a8018f549e0d493a2e056794c1f97ae52bf689e5b9d5b3bdca657ed4185da8562f70ea1c1054d870949b6b26e0555f3bac46a7c04723b1930559137213410c5c811f08667bfe6205ecb4d811c5955627c68f80f125cd866c2d3eb84e33ba76e1e1993f3fe844f3982b76af540fdcee340622f2e262f52ddf03c798528b4e44698ad9f5c282f69ecc6a57885ffd8b1198614df3f80ee5ae82f06759f702d53e3211d739a117e8d7e284c91b06b0dbfd2c1a9e504f92e6c9dc22eced6aa07a3a30ba10d23ecca4e63125c2c2dadb0d1cb951b3146818c7c857591939d1e3dd985904903f3bec1a8901e046dab351366a0cb44338dc33430f7b8b742845280941683ec2538c3e34baa5b183968a5e6f367aa31f0d3a5606e34be42c2c96f78a90ed296b2366ba1784b442cce70899e73661bdd5eb960041f6ef7d98722231f3bcef1ddfbde927ce127e18a8f4ce163a464965d22ff7d8dafbb6a26f865ba506aa0ef50edc40e0b404a8e5262a4f5d0ef7e14eaa66cbb111be7526b6b9cbbb0fd2505ffa4f7fd2ca7e4d83ec201bb6b8fc234cab0511f61d4dc25896c53cdee07a5437cd75c9fe9e56607d9176b1b834556e46295accfffd477f7642b080ec0e5e2428db27f436137d9f9021aa51c08d32f91b21e3632831b584152c2dbf0286c1d2043eff1075f9cec47b61091423633e28f65d218bb1b3fa2a1945b5f46aa9250236353956120eb7be1e1d59ee9a96335087a6caeef1fb9fe7be36751b9398b1f41247283a981cee2ac4993a244b7a2b3a0d1e25a9623b54f1b578563d29cc00a476ddcedfba15ca174b607dc456f5fe293454b09d6ac3e91578a31da0c77f03ee4bf426cd05211529bc0903485520ecd5047ff496169471cf0d64fa42ad0565275239c676208981521192dc99211a4b7e9707bb97a3835d83a6965f335cc2157e43551280105823397631a88ad2340840e3b8be9a97840b849e36e0aa6c2f15360886684211f29572f62696c05ddb4364471abd89e963f380662974369f04f6bdd211e46659c7fd20dc9d8b2b4a141e231ff7360ef5237cbe2cd4580bea619650002ffe397489967ef3344c65cf67d63fa18785cb3cdbebdaab0c87f969d5c6ed6059e49693d72cc5a980115128b05102a726b0410261734843fe6a1d02e3d32fcb4d5a12c3eb3d3438902ba87393d8b5e7afba0122c990558b73a5a5cd985e3dec88e1efd224689b990f2e7c0ffdf9a70e592f7dd3e96cf956e89ffbd2e50e154027e6aead9a49b49bf56c9329e46722fc3ecfc7b71779ffeb84b50d8dde0a685e54f0e265b601762b9b65766ea20c7a50724dea5b0b0ec6a8fd8d4e907c42fd4fc0f99e4e9b2cf0aac8863db8631064e06e511a53cf68bc28aff252cf2f2ba25f969a8f5468b1766d87442aef9c284369d823da84a68956b7a1da690bc56856f095c135ac4c83fa50a28610403fcfdc795afcfe36bb080cc1a4b538742d8cfe1ac97cbbdfba7b7bfc565d47869ccee20f44bc0dc8485c42f1d74013d7ea825641a737253bd025eea94d138d81410cc98decd80bc5bd15567aed84965198960fea2005cc10da88ae72e462403b00e8e6e4b677d2ea710c26d20e2ac114c1f10cef3693c899c2133192900deb75fd1f1c3466d148ea028cfe2cf23295602a89dd00cb1d89dc822ec45f68480b038c073fbc0ef25ba54fcb7a1a493b2cf57191576f7640520b7035cbcfac45e26e7c52477d44560f33c06b3a54a40b34421e8b639da7e572a4d522794f0549136c1aaec2a91a2e3d13b2ec570dccbaa1ed041a6b987b593332a8dfff885f2cac9e13064c0fae3058bab7d02130304cf23f5575d763e29d0df1cb2eff3358641213b791d318d853661fd33ae2a5708dfd4c7d59a1f4f3aa15d4c56939df7d028a28f60da24e77b52c48b78e51c30159fdef18910df88c254d955b3c098bc65253fd28d838976fec42a8fbb433bafaddcc1502ee493fc84d0aaa1736b6a7e35f537166c499329f7895290d0a5730fdae0fcf482dea698e7894332737c48f589aa52938df718dbbcd3f536cd7b938050e16a361c9f3c79dfdc47f0eea648948c54b29ef189fb09ff4143b786a8bb36fa717c87d92936f63f204a97c740630c1383518aa4188a26d6e9d8a1dd40dfd0413d6f177830d179afc94f4142817f272422944f97f6bdee566b53f416e88fd15adbd29e111560c084d7ff4e7a77beab76d055650b95646b4fdf1dd598857ae25aa34423f59f06ab268a7ced049a769e99b7c9975c0c27917cd2fbc5e1c21dabae70e50904cfe380fad6179ccb1def44a12993dbef50b67f58a5c099e68fdad40ffc7808926f301132bccfc2377b18918416468e4e5fe8dfcd615530659288de7f7373df4bc054069c4b3654efbb4a4438a3050db11bad7429a3d52497eb1b113eeec3ec048ca929288dd19db1b4a9e9b454a168c47adaa3e70e8358c34bc73b409da0c1bfb07d644678dd64faafc1cc15a1c15e899c6f940abdd06367aa1f86256985fa2884253bff64b1fb8e23476460f1663f8b7401b09f5a2e3bf8f42612e9f389ad550efe21e387225740c3e3442f81c397c288e9a631780405f22fc1ff6ebb024e2b456fd2b27a1c6ffd3d75cf738174ff101030b98f07b59ba285674238b8980b4e1583ed34b00d79b5da5800767862156dc5bad6967671849eee20f413d52eeb29658ed05027c27379d9b551253127e125d3ecb55794a9f37051c2216158ee1c185daf13812aadbbd3f39a690721f2d4b970a7df6960d6bf4a0bfb5fd417a48e2e80a46fd8f2f998e5309780467ec1416f8df3a7ed530d8ce0ed6447b675b4c05d58776f7491a006c42dba0d2077b40d1b52ea64f"}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001800)=ANY=[@ANYBLOB="01000000010695e844000000e4c81c72a55250f44be970266b56fc220dec11e8c86d7623ea592667ebb5f9123f8a922d37dd3b632e1a0d7678a9110d1bec90455aa5ac8557487b6cbfc83098843d2d13be56bd437825f926e88faab5171e5f12e6", @ANYRES32=r2, @ANYBLOB="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"]) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x3) readahead(r0, 0xfffffffffffff045, 0x5a) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000239}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) madvise(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0xe) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x380, 0x100) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x6df) 21:52:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:35 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0xfffffffd, 0xc, 0x1c, 0x1ba}) 21:52:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:35 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:35 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:52:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:35 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:52:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:49 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) write(r0, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x10300, 0x7) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(r2, 0x0, r3, 0x0, 0xa1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) flistxattr(r1, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000080)={0x1, 0x0, 0x401}) lseek(r3, 0x100, 0x1) unshare(0x48020200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000340)={0x6, &(0x7f0000001440)=[{0xa49, 0x1000, &(0x7f0000000440)="42ed98f9938285c1d6fcf7991790b4847f322604436c3abc9e09e0dfc0256a814f7903a324bebf986102738fd00e6a3623b5d5d9f3522e0123c950c7b9fb330f14b99379609c17e85af6249b97f4ae0c76618b33457b94e0bc1a8d4a75bcc1efd2e15074b3c30aad32efac47994bf662bd12a8cb741e7c4191f75d37ddf36732d856cf1622a52792cfaebe97054d0d70e6337aeca0e5ecf7cc1149039d067553beee262ac5a126e0fb2639cc30369c023f1ced58cc79dee533dc92f1ca46f7ee46ac2326b36c1c84bdd41d5693593f77de56146c9f9404a191c4eadec8490bca0791132cf8201b4e140a79da0a040225b65b1fb648f4a6dbc41e0095e02b754756324d8824d5b4a3d2d0b8832690c6736a653a6085460d3721b56f5d1b284527f23dac4f460fc41d7fef1d35073461e20cdbbd84f0d83183f30c8b2ae386c1b3e0192cad61ca25fa90adc19c8e6b6878d287c9ecf972d8fa2f18b080bd1a15c860048cad07e8179223e379c2f222ad117e058f43732b927f3280362c4764695e92bef72f08f42ff567cc3a344158ec70284cb00c9804b35d2d6690a2eadb57c4e77d8d2aa4d94fe8302f4ce42147c7fe84b1ff7579eebc690593749e3497a372cf80d595b06e673bf1cb63dfa3b88dfc7c1f096ace64d29b07446cc83d6dd3e1e324641af8724f20d1239db3ab62ad983abcbef887bbac4a45846d699d5fce1469a747d3e510e59b80c14417f106d436d622b1d5540b9de9956992f532e1cfaecfa1dc861e6689051f313f6ebcfd99cb656f3d13ab8f13c9b80df443519ac616f6035ae03c30c4efb8b95ffeded8f9e90f84547fad85909ec63e96c735c50bab666b815d6f7e33aff726b1c710729e95fb8609d01a41a5b59c03c23ae85da3fc8b82a9b40133c4f481a610073bb19b8d146798eb8136f653bfb794f42f7468002abbc611a9b0ed0d545202289698e7ce2673b1d2a538ba0b03be7ac2a1e3369adfd426b238849cef58b2db0ee92af96084774b4ab42caff9334f0340d30aea65524c352b10f5f7a24ac5dc72164adeba145e1005ffe46a1c311a273bba21b66c8660e68499ae9ca7707f519da03a620d3057ff134cc4f6197713b20f5de9f51be3fa48654271905bbdb3c0254e7159ad05e30d7c1a23081ac9090f07b7c7c8a15d789b3633c6de28d331e8ff4753bf7d7215b9a3d4e20c890eb94f3f29531f501b5d0d78556129636e7ec2bd57fb397510a0cb06a37cb555646784cdef569a91d2a8d64fdfdf5f24a5ba39c96e4940b0d748079a8d32b7b8000dd1f38efc657ba64015f9b5a63087008054226098ed3a88f3a7c08382ab1c2604d2bf42ab6148d2b220b8bbbccbddef7d806ce44ef5b5a06f179addcb04cf708fdf227252898c1f7ca7533fe32217c56d834599bf7b13b20358ce30c3532408db67c64d6d0ec538a288b5de4fcd9a4b7efe4983821f3a1e85d660735617a23be51d863543ad318d06ecaf82b400e8e5dbf256c7ebe5713aec6417c9140c98a02a7bfd9322533cd26afd05ef6a43d93e67bdbb6a655f025d1b7122f2e01124ad409b865e15682924b9e89eb3ba7d8c4a52d14146fe8af672cd326284f34bbecd0174f49e27aa0816ed26ea6d2d81d486a4d540ca8922ff0010bb81dff3a817329afd8b64356036b3322843ca52216f71600bafcb87e57500fabfc37f4545f7c5974789e86b4354a60950163eb731a243d7cce232e1415dcfdc833bfa607268e1b1b768ca884b8037492319cda2bf857680971ad40ee09df4b767298a3636e1cf5a62b3b901c0a5ce7915027f1dd1a7770a03fd5f353b3539e9742ded985bd058c641a02cb91cfe0f44380fe40f45705416f307b02ea331a9d951a1dc32ad3337e81cc660b25138bd7018750dc0b7565e7c9d924772dd679ae36ffdea598675f365a378dd20d2e56343a00bd08e8882a3fede3bc1c123998023cd3562a9d4f5a0fd622f2a3c196ef0ba3375d3154e09718d26c366f7d4afeb2469410d75474bde96ab8c08922a7f789c46ef48bd1b7c491b9a44de24b2d24b6dd5fd26d6dc2f29c0a03503ebd701d20d731525a8a9b47687549f8521e054f47110f393f40c9509c8a4bc38cc721305a52c621a5a8518221b7b26b20a3823c83ee3b14b855ac09347742517398a87dd09b01cd0bbbd3762237cc24ba73c4998763999842a39f7ac49ca45a9c07d0ee859a22fe9b8764a4dd93325ef216ebc6d26de16dae8dfb6003338665a3abac3ae502d9084ff4973a1ba2db585dcc5043b163e483961e5bf31c643eaff5638150923984d4cb7f4d2f4f2af26fafc5af06b39a31361e830c367c184137e6ef2b09f6dd350ea6292b9d19253291a0fad535b55d2fc8adfadef34ed8abae5b934a719e82a59ab504e86b29b5116f26795879aeabf38d059e2c8bde5a1f95a474ed68c340c89b8a4632782fa01e6348ee24ace0570f808706676b5ea7cf3c72f29f7411b5c7d2014c99239de086f455acc7323c0270b55c372b8b31fa6e05b1241ec56f182ae036df5cb209ff740adfdaf8a829dcd306215b283ceaaac642d8ffce253e98d7850b6cd7dcf782bfd27eb1e4cea6b959d905c2158fc0442fdad3aa2a606913facb89a6e5536974e0c753ad7ae7a157ab7c7bbe118cd036ee7b74681937d5118be650b085cca35c3a2203b8c71fe7e5085e6a7884d983592dcdf17fb6935a4488723a75885da5bc8354222a09c8af10fb0829896c9a2ed59b4dc6c476bc373cae0bd41360b6cd17fd22cc221cf8a89e614b232c641ec56142f36c44df8cb3bf590c758dc85c79b2062ba7de0cffa5a6a6e338c990324e4292b224dfcd204017a430d5679d803dcade2eb9cdf141cab5d6af36860a729e56b100270d9450f6ab070c9713fbbd34d6485050ee58c592cefa885df9d1e8cc1d5fa2b85fe8298f5b2f2d80bc9280b234a32860ee4f15463dd206c5d4bd745743464ca99fe23f117cdaff715744373782bf408e65e6ae5ea428b31125b019caabd6546ffc1b5b82b324a7284f3433c4ac6ba8ff48f1a0ab7ea9de89e03b5a6957b6d639d4a74cba1ae3a3e5df2d526cb5b81fd4ed3699013ba2370025d58b813c2236ffce64eedb78294afcb0c3784d0a3df91a170838202bb0341a30068d1afbc7f2864d82bf223d732cca704ba349b7c0e2b91b5b8326f4e5778f71c43474baf9fd0ad2e803dcdaa54d1c5466b96780e443bd0a15728d7fe0423ba46adc68e96939b1f43f9fd460509bb41ef12437afc5e7897f8742fcfa380caab39fda17447bfcc54e571c166b5a84ce8061f198da709880ecfcd8708edba633f827f1287171161af06250cb1e1fe3536f085b64ee47abe970d22e41922237369cd28631959860749d3b45c679846f826de7ca194ea6a62f58a4453855b945f2408c2eee9aff34a8bd6e20497303a53b61bd22ed192a25881e935df603e3e965fb5eeda69c909bc9ff5d9fbd0c073bede5794ef0620375d47ab6063676e494f90e4d93bf2b75b251235eed49bc0200f4a00cb9d9551dcbbb4d5d7a943a9beda54f49defc6775c2527fbea5d7af772fed17df69f1081f1c27049b8714c7d2cec688ee859ef2deab1833c65caf2b7bc4659c6b27f4560c256bdefce82e35bb73b8183dc6957a93222c590c3af255f6ad9a6310198c2d7013cad23dfcc2bd4e935e6eb2b0343b9ca5785e1d4cf024cfb11dd17865bc06a02ad41c422d16a1bd46695de196b215ee7ea98dc1d8d9489ec95b225a076c79e5e95edd52de04c101d2595456a3d768f16f061782239067834a0294c13e5381b35022e7c2b46e1b79c989f8d614762365c3c57a4db4cad0f36530ba32866055ed1ef1a0adac33e5bf1851ae0f43ead6c66361ffd638c96b1e1ce42d3212401ad474fb52d40a6be38a9bf12ffa6601903b57a0529a078587de81bcc2a1b694a4875abf9908cfe179e67745c29350a6133f1eea8bf366ff3e02df8f89f13b8fdcebe8c2106be6886f6f86046c298613bc589272ee8e2f15a16275f403bb778e566d5c4d87ec232fe7cd862f5ea794d4761a8ae6b2d61ad7780a6ae7b5281a31287f59bf8dc09accd076fb5588add14f2530622f03ac169d673d61656a82294677fd77ee20d0cec30155498cfafc615bd866ab27a5e979396f45d052bb55ef8e57f1724bf2eff2b27c0db7323a85f9bfc497de5095389dc27dfedd3882543af2bddf4f4497a88f56fd1829f21340642c08c661bc3cf67425c845418649681882917cf5cc06350e9e82a1105d605c10ad4f5f7d3259731d7d6f98c60dbe52d78f3bb5c36643a0801b7961447d1bb058533530515a0d38c5cbe8a5d46ccf0193c2a9891389909239dde3d30bdddd2db067058f4d1c210db5929a705436112602db318803efd0592259a18f07c54dd2b7ef0428cfdc0c2db3d29707ba9dfec8989ce392419f8239fad2ba46d0e3d63ab71d0fc3878d75ea7fb638a4dc97c0a0a2375b4a9c311bebda5c48eae589932117a3e9aa29c0fa6bc314c9beefacad04888edbec318d6592bc2687f2943f156b9a1b1afd79d0594fd027722d2b88ba9042005fff7bea92b25f3f7fc4682b1a290650e13c78dd067071d7f5b6635c5c1aacee01e2153f1f0b0b45279a9ea5dced3f8173f0830d4e39d56621ccb3a52eaeafa2509f8255051dd128f73922bed3c2c90ae50f8b4db3f87b611edea20ebf9210be3054320207a96cab8b0107726c02fc6a890ceb135fd96b94fbf0b7391fef7ddb3b7a7a9fe02b79a91d366174208727931689286679e7deaa38233bda76f4676c765ed858e4cc0f3db91e5d7d315f6eabdbf27cdd82e93938e589c65ae501ba8408e885a7e95c62df25ceb948b146c45e9fedcd7acf4b017bcebedee9451aaf7e0145f7a1bd1d8bbae24fee4e4431d90ea956d2e463707a2430e2da59673facb29a64acf7a0e40cb0ae7d82a4369bef6730b21e8f96b94fb67ce129c2ad436f8e4e591aa9add533732d3f436e58bd767554bd19bb2888346a9af7fd5a0bcc6b8782f64c85fd40ec5173d90eee3b285e744a2ef0179d92d05f27c461a5030ec586da344422e6435f687948c0b54f13be1984a2006ef88bcf34e0dc9740da84958de78ed8f1586e77ee360c5e1785309cbd2aa8bcd4030d98d931d3342fc708166358e9ff6c16f9f3481b7ca0478adf479cacc7b8d581aa97f7d39d7b1c8ec5120824ef8c1d6fbcc72d0be157a3889578c0034604a6b5aeeefd5f79f4ca6eb421f5d6a3cd9dc3e194a2fac6841ccbfd09a396d111f3df70e022c29cdded06dcdecc90eae6552e5e43246b01d6b0841e4cbc7621f222d210aa45657b055354d8c33ab1ccf33a7b711598a1526accf3c4e74938782a050570f9fd321cdbe062e13c4261863a7f5dd4bebc5d3f3702c595d78684fcc6a5c5dd786e8eaf61b97e7d28be63b61982d9ecd240138fff8bde195fa6b353015a93582b451eec951cdffc01c00ba9d11f69f3c0f6cf8f82743e1a16198e6a8c272b2dc499baf9a17cc634d2fd5cbd0db1e1e4368012649207f29002fb62d427b364825b0216bd8b5fe9ab8d87e0dec9c08efe461308eb0fe72f7b3fab150002dbe6db51b31db31a7792f660a44a8dd5e4c23f480c23b0fe25419657488f0f0a3785a29bdcc63690fb11335970026f29f6bfdeaea931201a0f3c7578aabf1db8793e678738ae315cbbc24ea255a50bd9eb7f34ffd0041ec3c69a193753187f47b2757cfcd447804bafd7a332f88f2019d722913bdc4d105b20124befd599347a9dffc80", 0x0, 0x1}, {0xfffffffa, 0x28, &(0x7f0000000140)="e16dc1153a8456dd459608245b04c29a34f214d52acdf3da7adffddfcbf2fc6db4884524afdda466", 0x0, 0x1}, {0xffff, 0x19, &(0x7f0000000180)="90fcae08968178f4872b9d7dca524a92d2c4cc49b44c2435e5", 0x1, 0x1}, {0x3, 0xad, &(0x7f00000001c0)="44ae772da73a7c51229f14db25c5e2336ff902bea6bb5091739fe015b4a6eb987bf6bda9fa83fb39b5cf761e8e26b0889ef67e0c52d67f9a0228e6b212178faa759768e1bca68cff637cb44bb9147d68236ac3c98d45e8d9d9a4b2b28360584931a05e4e5513b0ea59ba9b28f8a6e324f4a08d9228acc1f1df6d61d1b941a2ff7aadb9d079cd156c9c99113f94802b3fe791afd61fce10880c08f89a8fc42fc73e175f80cbc8f1ede83ed54c68"}, {0x1ff, 0x16, &(0x7f0000000280)="1b244a18c0a4661b686d02629e3022019c41d656042a", 0x0, 0x1}, {0x3, 0x5c, &(0x7f00000002c0)="f9f2408202695d660b656d0760de7d4635659cdd31ce335dfae78270266de440fe7be765eda4040f18a66220909b0e00442c67577c0bbfb00b7b62d44f2b6720459f481ce8781c6153c790ef8647160e890c48b2d00485aa953dd28f", 0x0, 0x1}]}) r5 = fork() ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000040)={&(0x7f0000000380)=""/165, 0x6d}) 21:52:49 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:49 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:52:49 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) pipe2(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffe01}, 0x1c) 21:52:49 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:52:49 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:03 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:03 executing program 5: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, 0x0, 0x400, 0x8, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) r1 = syz_open_dev$vcsn(0x0, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x70b6c2, 0x0) syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x400, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 21:53:03 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, 0x0, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:03 executing program 7: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x3, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00072dbd7000fcdbf7250b00000006000a00a3aa00000c00060003000000000000000c000600010000000100000006000a0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x20, 0x0, 0x321, 0x0, 0x0, {0x13}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x20, r5, 0x321, 0x0, 0x0, {0x13}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x20, r9, 0x321, 0x0, 0x0, {0x13}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000940)={0x8ac, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x36c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x55, 0x5, "600dc909cf04c6f3e6b8ea61deb73474a5052d03a38baa3d2b3588495b00b5b7abe5a051ef09cbba33d0132921f3ee3fa0c3e72f97caa487c94fda22d75f35abd16429b0393705e65b0a4140f89717f78b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0xb1, 0x4, "ec5af9ca8bb647f18d6b7a52ca7973df9671c8f236cbf9ff06e57c5a0675ca84b058caa9747887bc14c2a2c60a6f4436e1b8c1eab17e6da933d8d553e978c44377287912de66eb388a51b700167a3e9694dd6b71869968863fb587ce514dd187fc55e256e8c1d30d60f3fae5333a643bc5f486bf43dd1c7bbd7141af35a3f913352dfdd9a0f4e8c375baa997d8684823ca56ce5c6bb61eee98da9e0284c1ab665ab33d3a0f4fa81e04414aff69"}, @ETHTOOL_A_BITSET_VALUE={0xa3, 0x4, "8d4d48f813f16f975b2ab65bc30a317b1119864592c79e306a69a9f8a970c63bb7bc6de9eecce0b1e7bc035239852e30eb70196f34f4ce4b6612b813d106e0b29c63016722eaaa659f9d9491575a226a64565207509c94630c051f1a8af71d9025deea830bfb7dfc5bd8c974129a25859a467ec77eaa384cff008c38e8927078d51eec805a2c32358f18c7d228a22094ccc8d66ff68563f093c6983d398a14"}, @ETHTOOL_A_BITSET_VALUE={0x101, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0xa, 0x4, "242137452994"}, @ETHTOOL_A_BITSET_MASK={0x98, 0x5, "9a69cfe9cf979774a8dd40f11ab8c7bed9b7c7f4ed1be017f62e7d86c3531f71d39d6fecca99948edaac28e9dd5594c784040a16b4f9f58e76b198ba7a58342d43fcc2da94b61057e40a5287d34305ada1e6d040738d8ce83d9859481fb65f918d1a13f2c198213338092fc3fec0e410ef962665a727a468d9247f7bfde53caef2f05b9653153ab815d7b2b8e1f3c45653b1c11f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe7, 0x4, "497dcea044181d935f2427e930c8c46c93fd2a7677db111ad6110a19063aec1e915e98a04f75ef57900c433bc13d4625a9bd5460c59018662bc1990baa0ece62da37998046691103c6f47a53c8a966a653a4afd37a9e05d2ff04926bbd30fb40f5b2b3c58a4ce8f59edc4c362f188b8fbf2c1e653282da01e0ff29c97ccee2ee3e559215d7f93bcd765605d4619b1ae734e0d475395eb2da3c421991159a373506e91c111044b261a796f2262d8781c170c4f29ee7b9cc6e98681365679e2a245c550954f59fc5d301da1e0652231caf69e5f04761378d0b4551931a658f7fe0b3698b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xcc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '{^.]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x5d, 0x4, "b16f68d3b7b94559f0a1fe375e87babe14b92640250db0b6aac8159ccb59c841ed0d75193373327d652c64e0aa9c217d675f2e7fa7587c0ca581e6b459c87984935c58c25ba668ae7d56be7a8cbcf60ff7b678948fa240b558"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x23c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x144, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'phy1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd65d}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'phy1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x248}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x71}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffe00}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'phy1\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'phy1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xec, 0x5, "063d41fbbf18ff9d70c85b2b4a10e0b29796a278902645a55652848b9b0cc63e8dfcceef8aedfad18ce19e70d54260a5e691ee7dd8d916458617c8de1ffe9e27dc7dd3cb807f459211a77267762cb96b935a1095be41920934bfe12e503be98b5b51e5e04f941fac755726c0dc1b3c375d51a9296b71442ccfbb737cddd31d5e78d7f7529fe89f9b7db289eb015a84d3931c1ab037b8ca7b308944d975395de68e25d4b417e380234587581e4b8ee9813c8a8f84dfe608b40f031af5bbf22326dbff745aed3e42a6df3401a7fc70b60d785e24a5947bc63bd37118f7c6b99101249a69b5caf67bf4"}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 21:53:03 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001600)) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() tkill(r0, 0x2e) tkill(r0, 0x14) wait4(r0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}, 0x0, 0x0, 0x0, 0xa}, r0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='autofs\x00', 0x0, &(0x7f0000000000)='\x8dU\x93\xd3@\xe0\xe2\xdaJb#\xadMGxb\xd8[8\x16\xff\xa3%\xb1\xc3\x8b\x99J\xc2\xf5\t\x1b\x97W\xf0]\x97842\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00') 21:53:03 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x8, 0x0, 0x8000) fcntl$getflags(r0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x35, 0x0, 0x0, 0x400}, {0x6, 0x0, 0x0, 0x81}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 21:53:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:04 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000580)) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xa5) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x809089, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x400, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) [ 1604.657932] autofs4:pid:10967:autofs_fill_super: called with bogus options 21:53:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:04 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14040}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES64, @ANYRES64=r1]) r2 = signalfd4(r0, &(0x7f0000000080)={[0x46ff]}, 0x8, 0x80000) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @local}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x20, {0x2, 0x4e22, @remote}, 'vcan0\x00'}) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) fcntl$notify(r0, 0x402, 0x80000045) shutdown(r1, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000003c0)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0x0, 0x8000, 0x0, 0xfffffffb}) recvmmsg$unix(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98}}], 0x1, 0x120, &(0x7f0000000340)={0x77359400}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x509940, 0x11) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x1) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000200)=0x4, &(0x7f0000000380)=0x1) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e24, @empty}, 0x10) unshare(0x48020200) 21:53:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:18 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:18 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000001c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r1, 0x8acd, 0x0, 0x200, 0x1, 0x80, 0x1000, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x8, 0xffffffffffffff08, 0x4}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x0, 0x88b5}, @void, @mpls={[{0x7fa, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7f}, {0x9}, {0x5, 0x0, 0x1}], @generic="0896ad249d57647badcd2f28b7d639d5aa98f83053c6ad8063667e687a9cb98890905139b2ac8dad51c65db1c0915b14c320bc72a29686a1b38a5f81b47871b6b1163d95ef9d04814ca6bcba7b67706aa693db57d5dfeae2ea91d0734939313d5b5f88a0b2f900ecad608cdc8a1a5bfbf564c2e7c825e857cffe4c52d154b3cfdae662f34a9245f52a13ac7b5accc054b8bfb645e5f1c6572a166d8535c874bde06b71f880b48434dfd6867bcf27fe049e1b4bfa55556fd6c6674aa0416bb655ca0ace2b647bca7675c13025034099c517dcb5153882da932a4adba733b5ad"}}, 0xf7) r2 = dup2(r0, r0) dup2(r0, r2) 21:53:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffff8001, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x9}, {&(0x7f0000000140)="ed29870000655f000004ffffff7fc824388ea6453f869ffb50c8c957af372f793d62a745", 0x24, 0x1600}], 0x2840000, &(0x7f0000012900)=ANY=[]) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x8, 0x0, 0x8000) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x13) 21:53:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, 0x0, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:18 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:18 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) flock(r1, 0x2) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1cf}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000380)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @loopback}}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/553], 0x190}, 0x0, 0x80, 0x1}, 0x9) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r6, r0, 0x0) [ 1619.529075] device veth0_vlan entered promiscuous mode 21:53:19 executing program 5: timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000080)={{r1, r2+10000000}, {0x77359400}}, &(0x7f00000000c0)) clock_gettime(0x1, &(0x7f0000000100)) 21:53:19 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:19 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:19 executing program 5: r0 = creat(0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) fchown(r0, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x92) getdents64(r3, &(0x7f00000000c0)=""/149, 0x95) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r4 = epoll_create(0x3) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x46041, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000200)=0xffffff29) socket$netlink(0x10, 0x3, 0x0) unshare(0x48020200) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0xb, 0xff7ffffffffffffc, 0x8000) sendfile(r5, r0, &(0x7f0000000040)=0xffffffffffff8000, 0xffffffff00000000) 21:53:19 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:19 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, 0x0, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:19 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) read(0xffffffffffffffff, 0x0, 0x0) r3 = signalfd(r1, &(0x7f0000000140), 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/174, 0xae}], 0x1) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000004c0)={0xffffff7f, 0x0, 0x3f, &(0x7f0000000500)="4ee327a47bf6651605a3bc"}) write(r3, &(0x7f0000000180)="dd8975d9d2eb389518e6d5ece8f722e079e9ec8f10122e84986aee763238801c24194552756d9bae3023bb6c959f570655f3ab442d7fbbcf28d9", 0x3a) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/hid', 0x0, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r5, 0x0, 0x80000001) socket$inet6_tcp(0xa, 0x1, 0x0) 21:53:19 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1619.982846] device veth0_vlan entered promiscuous mode 21:53:33 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:33 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) read(0xffffffffffffffff, 0x0, 0x0) r3 = signalfd(r1, &(0x7f0000000140), 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/174, 0xae}], 0x1) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000004c0)={0xffffff7f, 0x0, 0x3f, &(0x7f0000000500)="4ee327a47bf6651605a3bc"}) write(r3, &(0x7f0000000180)="dd8975d9d2eb389518e6d5ece8f722e079e9ec8f10122e84986aee763238801c24194552756d9bae3023bb6c959f570655f3ab442d7fbbcf28d9", 0x3a) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/hid', 0x0, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r5, 0x0, 0x80000001) socket$inet6_tcp(0xa, 0x1, 0x0) 21:53:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:33 executing program 7: ustat(0x5, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_TXPOWER={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}]}, 0x24}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)}, 0x0) ftruncate(0xffffffffffffffff, 0x1) ustat(0x3, &(0x7f00000001c0)) unshare(0x48020200) unshare(0x40040000) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) 21:53:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:34 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:34 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:50 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1a}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48085}, 0x200008c0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x20, 0xff, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r3, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r3, &(0x7f0000000080)={0x24, @short={0x2, 0x3}}, 0x14) sendmmsg$sock(r3, &(0x7f0000000980)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0xa35b, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)="8033461616064fef79de160c3cae42e33b20b6dab02076bf69217fde9bce5f7fcb53", 0x22}], 0x1, &(0x7f0000000400)=[@mark={{0x14, 0x1, 0x24, 0xffffff82}}], 0x18}}, {{&(0x7f0000000440)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)="2d506fdc1ea2b7f2753f0a85228550a9507a798d20333efbede3110b34dd6b8b3a", 0x21}], 0x1, &(0x7f00000005c0)=[@timestamping={{0x14, 0x1, 0x25, 0x7f}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xdd67}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xfffff000}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}], 0x90}}, {{&(0x7f0000000680)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000740)="4c84f8d92b786436f9d77037c05e589f58b0c52f32f2f2b9bbec73699a43920ae0f6de6a212005f45b03e05bede6b9511d3412f3bca1f2e5ba542b62f95e4fedabf3ab7862840b034c00701cc4e47ef4e3869774e5e144b1037f255e891de69ee45cafa88e90811115535956afda0696aef1a15a829f83f8cc13691fb69be5680cc93f32b3cde9a624e328b0a84334fdbaa5a68a038402547aa3ab414ffb", 0x9e}, {&(0x7f0000000800)="cd7d955579fc84b26240b06ccc26ed14f73db224ed512b2774dd530b8ee44e82d6ce4f82e1c662884735da2fb4877fb5f3baa539603ee72ceb043c0cfa19e1aaf9d9cdb83f7500e02c69e2760e8c976109bc5de25348a2fdd83fe6e3", 0x5c}, {&(0x7f0000000880)="15253a77395783f3a5254dfe3bfb5a51d48ec2f051a7d1efc1812ff4ea7d3183a743889f55edcb9cc6345021c5fb7cccdcd2c9b82f7e26675ae7f68e7a3cb97adddee823deab4ecff4f4735f91cc71fc76dcbcf6fc963da81870fa9a61", 0x5d}], 0x3, &(0x7f0000000900)=[@txtime={{0x18, 0x1, 0x3d, 0x401}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1c}}], 0x60}}], 0x3, 0x4040050) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0x8000}) r5 = dup(0xffffffffffffffff) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x4202, 0x0) connect$802154_dgram(r7, &(0x7f0000000100)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="ddd8312b5695af1944881f92247c4ecd", 0x10) close(r6) 21:53:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:50 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:53:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup2(r1, r0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x100000001) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, @perf_config_ext, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x2000, 0x20) creat(&(0x7f0000000000)='./file0\x00', 0x0) 21:53:50 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:53:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:50 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/149, 0x95) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRESHEX=r2]) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x6) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r3, 0x8, 0x0, 0x8000) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) dup(r0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000200)=0xffffff29) unshare(0x48020200) socket$netlink(0x10, 0x3, 0x19) 21:53:50 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:53:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:53:51 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000010077000018000c", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0x0, 0x0, 0xfc, 0x0, 0x5e, 0x1048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401, 0x0, 0x800}, 0x0, 0xffffffffffffffff, r1, 0xb) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/137, 0x89}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/102, 0x66}], 0x3, 0x8, 0x6aa12b08) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/213, 0xd5}], 0x1) dup2(r4, r3) readv(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x39e}, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) write$binfmt_elf64(r2, &(0x7f0000003600)=ANY=[@ANYBLOB="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"], 0x1040) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000000340)={&(0x7f0000000500)=""/126, 0x7e}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fork() ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 21:54:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:06 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r1, 0x4b41, &(0x7f00000000c0)={0x0, 0x0}) timer_create(0x0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4001, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) symlinkat(&(0x7f0000000100)='.\x00', r0, &(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000040)='./file0/../file0\x00', 0x100) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0xb) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) unlinkat(r3, &(0x7f0000000180)='./file0/../file0\x00', 0x875e1e1c05f4327d) fspick(r0, &(0x7f00000013c0)='./file0/../file0\x00', 0x0) 21:54:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:06 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:06 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x13, r0, 0xb1bb6000) fallocate(r1, 0x8, 0x0, 0x8000) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f0000000480)="af", 0x1, 0x1000000) write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0x78) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x3, 0x4, 0xd0, 0x2, 0x0, 0x2, 0x800, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0xffffffffffff0000, 0x5}, 0x40100, 0x0, 0x76a, 0x9, 0x200, 0x22, 0x0, 0x0, 0x7fffffff, 0x0, 0x9}, 0x0, 0x0, r2, 0x1) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x40700) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000000)) unshare(0x42000000) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="3f00000061000000c6bf000000000000ac79ff36b6e6813ef5337f485a4100000300000000000000"], 0x808b7b80bb5ed522) 21:54:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1666.953176] tmpfs: Unknown parameter './file0/../file0' 21:54:06 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() setpriority(0x0, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0xfffffffd}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x5d5440, 0x21) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES32]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r2, 0x100, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcd}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000) unshare(0x48020200) 21:54:06 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000100)=ANY=[@ANYBLOB="04000008000000000000000000"]) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[]) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = creat(0x0, 0xa2) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) close(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x92004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x85, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:54:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:06 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x0, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:07 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x3) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x0, 0x989680}) dup(0xffffffffffffffff) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000005c0)=ANY=[]) mkdirat(r1, &(0x7f0000000340)='./file0\x00', 0x20) r2 = syz_io_uring_complete(0x0) dup(r2) r3 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000040)={0x0, 0x1f9, [0x0, 0xc8a2, 0x0, 0x8000, 0x0, 0x4]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket$netlink(0x10, 0x3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @private=0xa010100}, 0x10) mkdirat(r3, 0x0, 0x0) unshare(0x48020200) dup(r1) 21:54:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x0, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1668.131189] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1668.366346] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 21:54:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x0, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:23 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:23 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) perf_event_open(&(0x7f00000194c0)={0x0, 0x80, 0x10, 0x1f, 0x1f, 0x1, 0x0, 0x101, 0x22, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x401, 0x5}, 0x408, 0x2, 0x1, 0x5, 0x1ff, 0xbb9, 0x0, 0x0, 0xee0a, 0x0, 0x3}, 0x0, 0x9, r0, 0xb) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000019800)=ANY=[@ANYBLOB="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"]) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) 21:54:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x3) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x0, 0x989680}) dup(0xffffffffffffffff) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000005c0)=ANY=[]) mkdirat(r1, &(0x7f0000000340)='./file0\x00', 0x20) r2 = syz_io_uring_complete(0x0) dup(r2) r3 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000040)={0x0, 0x1f9, [0x0, 0xc8a2, 0x0, 0x8000, 0x0, 0x4]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket$netlink(0x10, 0x3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @private=0xa010100}, 0x10) mkdirat(r3, 0x0, 0x0) unshare(0x48020200) dup(r1) [ 1684.047905] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 21:54:24 executing program 7: capset(&(0x7f0000001c40)={0x19980330}, &(0x7f0000001c80)) r0 = getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) r1 = fork() r2 = fork() tkill(r2, 0x2e) tkill(r2, 0x14) wait4(r2, 0x0, 0x2, 0x0) ptrace(0x4216, r2) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r3, 0x8, 0x0, 0x8000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f00000000c0)={0x5, 0x2, 0xfffffffffffffffd, 0x5, 0x101}) tkill(r1, 0x2e) tkill(r1, 0x14) wait4(r1, 0x0, 0x2, 0x0) r5 = pidfd_open(r0, 0x0) wait4(r2, &(0x7f0000000100), 0x1, &(0x7f0000000140)) dup(r5) [ 1684.641478] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 21:54:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="f0000000190017000000000000000000b3577d0f000000000001ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc01000000000000000000000000000000000000000000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/168], 0xf0}}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x8, 0x0, 0x8000) write$binfmt_aout(r1, &(0x7f00000005c0)={{0x0, 0xc2, 0x6, 0x3ce, 0x358, 0x678, 0x350, 0x2}, "0da0efa341ff9fcfef68e571f9e7cb2a0283d297983add1c1251c5c5fb8d79816fdaaf44946f3fece0369878aae9dd69aa575be7c8b5ac1e9b17f72eec15762386d2006c4eca6d746fe784cf1a9580d748133b05b24fd269a9d01151edbd42dc5669e3f74c36c77f612849a6", ['\x00']}, 0x18c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x20, r4, 0x321, 0x0, 0x0, {0x13}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=@acquire={0x2c0, 0x17, 0x100, 0x70bd2a, 0x25dfdbff, {{@in=@broadcast, 0x4d3, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010101, 0x4e20, 0x1000, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0x6, r2, 0xee01}, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24, 0x40, 0x4e24, 0x2, 0xa, 0x40, 0x20, 0x1, r6, 0xee01}, {0x6, 0x4c69, 0x5918c93f, 0x7, 0x0, 0x40, 0x7, 0x261}, {0xff, 0x401, 0x800, 0x6}, 0x1, 0x6e6bb4, 0x1, 0x0, 0x0, 0x3}, 0x3, 0x9, 0x4, 0x70bd2c}, [@algo_aead={0x113, 0x12, {{'aegis128l-generic\x00'}, 0x638, 0x0, "4caf92f5625dd665e7bde7324038005cd519df449ffdba1a6800d64f208ac2804aaa5fc81a62f5cc8287e35b2298986954959cfa70563a67e5886f7c9c73e63c398bfa697342aa1a67ec19af0b992c1834d1a5d27f04c5376ff2d57cf1a87a9d1487e8449ee32ef5fa8948b64cfa868eea437a6f593ecda20a0d53236ffc4ef18bda138fdb93fc757cfbb473cdb5e03f256d30f3b273c34dd335c1eee3b37ebbf0c93afc50f6fa2fcc23138f5ea8c92140c40a2f939784504526d710421aa539fae51d5cd9b793"}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd25, 0x1}}, @address_filter={0x28, 0x1a, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x1, 0x1}}, @lastused={0xc, 0xf, 0x6c}, @offload={0xc, 0x1c, {0x0, 0x3}}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd29, 0x70bd2a, 0x70bd2a, 0x70bd28, 0x6, [0x6, 0x7f, 0xfffffff8, 0x89]}}, @extra_flags={0x8, 0x18, 0x4}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4c012) [ 1684.771386] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. 21:54:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1684.896994] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. 21:54:24 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x0, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:41 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x0, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:41 executing program 5: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(r0, &(0x7f0000000080)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x9) write$binfmt_elf64(r1, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x4ce, 0x0, 0x0, 0x0, 0x40}], "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"}, 0x190) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x8, 0x0, 0x8000) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xf6, 0xff, 0x80, 0x3, 0x0, 0x3f, 0x5030, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7c, 0x4, @perf_config_ext={0x2, 0x3}, 0x4252, 0x80000001, 0x1, 0x4, 0x6, 0x1, 0xffff, 0x0, 0x3, 0x0, 0x820}, 0x0, 0x4, r2, 0x9) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000000)) 21:54:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x543, 0x0) close(r0) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) r1 = epoll_create1(0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x1e0, 0x34, 0x4, 0x70bd2d, 0x25dfdbfb, {0x3}, [@generic="a3570323819a481e30db7f6ab7ab7661fffbb1f026260398e543078867fd5943c317f837bdc1a2159bbf15b2f26fa2481cecb5385a3b57b871d87e0775ee8d3d50b0e7a0e15a9793f5430639a4b0e7f411fb160da3db2c46c942fef00f2541f6786070245a8422ecaa3202981f86626280877da58285de2f956c5aeb4289e47e6188842a661ac2f83aabb48b8e9c8f969c9213921d94939576cd99f44283171c952f43b949089940ffab443a61e98c24f589c78843ffda6dd44ff4a900c69953e3ebcb639707a80d0a4b5d4dda58b9b10d4dfb62e4f2a7abffa88b4676b1d2", @typed={0x8, 0x83, 0x0, 0x0, @fd=r0}, @generic="e891525247b536373da2cebc47c900c02d27383a5cb30e066f394d5b65588e2ca1ee8642f36d992c15b5468c8c56b3a9", @typed={0x14, 0x16, 0x0, 0x0, @ipv6=@private1}, @generic="088bb454f0d77e536a2754b0dff7167c38adfec5437f98fa24659d2f0a6ff53c08b653448b61c222c430f16f1742332c43333db325ca7059c1a98baa7164fea7ec5bcde15b6ed4de00627a278af3458a177dcff3f2f3b1cceb314d972985bef3367fe852d1629f3dc470cd2d2b2573158d237889b12e6e84743f97560aad85a72fafd4c9a5ee145a0960f65a1bbf4d33c210a4e2987fd21dfd", @typed={0x8, 0x67, 0x0, 0x0, @ipv4=@multicast1}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000090}, 0x2004c800) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="3177669b17935681f98e02bc17646e6f0f220126c7f43b9e966ed51e60b4b3707c3b01d054360933e8a2d092a4d5d1566452d130c878f6ad290f8088db250f0f3e50d986cbbd7f42126eb23ee01ab9086a66554fdae2a2f4b87316ebeed7e90e06c5285fc8204d471484748447c3ef41ef3716c9f9044443c4ddc119680728", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 21:54:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:41 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1702.054283] 9pnet: Insufficient options for proto=fd [ 1702.095908] 9pnet: Insufficient options for proto=fd 21:54:41 executing program 7: process_madvise(0xffffffffffffffff, &(0x7f0000002280)=[{&(0x7f0000000000)="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", 0x1000}, {&(0x7f0000001000)}, {&(0x7f00000010c0)="a180c168dc0c564bcf229082bbf51c9f68e527ec6208bea198cc8484ef0fee12c0ebbd0dd2478336e6420009436c693cfacdadf93c5fc22a4bd0602403abf72b5d9aeeeed8970ce19e7bc3edcfd1ddec748533a9661a52bcdbd7e1d38000e2236cebef8d79fd70303f01f15c34ed67bd49cac0e67cc9fcc8a458a1", 0x7b}, {&(0x7f0000001180)}, {&(0x7f0000002180)}], 0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000002300)=']$*])\x00', 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, r4, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x38, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x66}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1000, 0x22}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x480200}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x30, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x16) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002e80)={'syztnl1\x00', 0x0}) clone3(&(0x7f0000003300)={0x400, 0x0, &(0x7f00000030c0), &(0x7f0000003100), {0x23}, &(0x7f0000003140)=""/132, 0x84, &(0x7f0000003200)=""/157, &(0x7f00000032c0)=[0xffffffffffffffff], 0x1}, 0x58) 21:54:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:54:42 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/21, 0x15}, {&(0x7f0000000340)=""/45, 0x2d}], 0x2, 0x2, 0x5, 0x4) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, r2, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xb8, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x34}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5c}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x5c, 0xbe, "215e090740b1476c9e17ef4db7a17bb987c24be0e9ce29ebae26dca2eeb21115419ba59fa1a0992134932d6a8962e8d0a4238a3baed236142b71b536ef6ebdd213715e72ad808a519c6ef7cbabe1a595e56d3e2fd8259cbd"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x240448e4}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400048001000270000004f801", 0x17, 0xfffffffffffffffc}, {0x0, 0x0, 0x10005}], 0x0, &(0x7f00000001c0)) 21:54:42 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd_index, 0x80000001, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) getpgrp(0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x505357303924421e, 0x0, r3, &(0x7f0000000180), 0x0, 0x0, 0x81800}, 0xc40) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwrite64(r7, &(0x7f0000000480)="af", 0x1, 0x1000000) write$binfmt_elf64(r7, &(0x7f00000004c0)=ANY=[], 0x78) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000080)) [ 1702.699665] FAT-fs (loop7): bogus number of reserved sectors [ 1702.700923] FAT-fs (loop7): Can't find a valid FAT filesystem 21:54:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:00 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000280)=ANY=[]) mknod(&(0x7f0000000140)='./file0\x00', 0x8000, 0x5f8) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0xa8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0x7, 0xffffffff) sendfile(r2, r3, 0x0, 0x100000001) 21:55:00 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x8, 0x0, 0x8000) copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xf6, r0, &(0x7f0000000100)=0x40, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000380)="eb3c906d6b66732e666174000208", 0xe, 0x1}, {0x0, 0x0, 0x1001000a00}], 0x8000, &(0x7f0000000240)=ANY=[]) chmod(&(0x7f0000000040)='./file0\x00', 0x10) 21:55:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x0, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:55:00 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) [ 1721.017725] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 21:55:00 executing program 7: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x7ff) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x6c) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x80000000) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x2) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x100000001) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x4) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x3) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xd24) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x3f) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1ff) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x9) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x4) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xfffffffffffffff7) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x7) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x80000000) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) 21:55:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:55:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 21:55:01 executing program 7: syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_io_uring_setup(0x8, &(0x7f0000000180), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, "4cfa52a749d2e5c4"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001000010000000000000096000000000005000000ff7f000000000000040014"], 0x24}}, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020201000ace670325132510000e670325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c45312020202020202000ace670325132510000e670325107", 0x9b, 0x600}], 0x0, &(0x7f0000000080)=ANY=[]) io_setup(0x5, &(0x7f0000000000)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='timerslack_ns\x00') close_range(r0, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004815}, 0x4000004) openat(r3, &(0x7f00000000c0)='./file2\x00', 0x8040, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) 21:55:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 21:55:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1721.742427] FAT-fs (loop7): Unrecognized mount option "€" or missing value 21:55:01 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) perf_event_open(&(0x7f00000194c0)={0x0, 0x80, 0x10, 0x1f, 0x1f, 0x1, 0x0, 0x101, 0x22, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x401, 0x5}, 0x408, 0x2, 0x1, 0x5, 0x1ff, 0xbb9, 0x0, 0x0, 0xee0a, 0x0, 0x3}, 0x0, 0x9, r0, 0xb) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000019580)=ANY=[@ANYBLOB="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"]) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) 21:55:01 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:01 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 21:55:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1ff, 0x440000) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f0000000180)={0xd, 0x28ee}) r5 = syz_open_dev$vcsa(&(0x7f0000004700), 0xa8dc, 0x400) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000004780)={{r5}, 0x2, &(0x7f0000004740)=[0xd25, 0x3], 0xffffffffffff3b49, 0x2, [0xb91f, 0x0, 0x4, 0x9]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB='\a\b\x00\x00\x00\x00\x00\x00.2file1\x00']) r6 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x7eea, 0x8, 0x0, 0x235}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={r6, 0x2, 0x0, 0x8001}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x1, 0xffffffffffffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) 21:55:16 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:16 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x8a, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='mnt/encrypted_dir\x00', 0x9, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000200)="0082ceabeab199d16e83397cea62e61ee722dc306761c322911890e921e884c68cb2446730072aa8a9395422212535286f2955b078eaa3eb923a80298c3bcfe69401075fd53745cba8b544e1240cbceaf90fc7047c06201f6e715fb75551fa81c8691ab6d708b6ff19e72dd5fe35559f2f1c91a6ad21689f27ff96ae31331a4d6000cf8ebdd9158c50d9646a48a66cc47fba967cd316567bb4612774d08a9687fd062ff2f004dd500abd360f3ce21a460c176863a5290c7c9b5d87", 0xbb, 0x401}], 0x210000, &(0x7f0000000140)={[{@check_strict}], [{@euid_lt={'euid<', 0xffffffffffffffff}}]}) renameat2(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r1 = getuid() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) ioprio_set$uid(0x0, r3, 0x4007) setresuid(0xffffffffffffffff, r2, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./mnt\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={'trans=unix,', {[{@posixacl}], [{@permit_directio}, {@uid_lt={'uid<', r1}}, {@euid_gt={'euid>', r2}}, {@subj_role={'subj_role', 0x3d, 'iso9660\x00'}}]}}) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') 21:55:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:16 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 1) 21:55:16 executing program 7: flock(0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="81"]) [ 1737.253261] FAULT_INJECTION: forcing a failure. [ 1737.253261] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1737.255820] CPU: 1 PID: 11376 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1737.257264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1737.258964] Call Trace: [ 1737.259511] dump_stack+0x107/0x167 [ 1737.260289] should_fail.cold+0x5/0xa [ 1737.261089] _copy_from_user+0x2e/0x1b0 [ 1737.261910] __copy_msghdr_from_user+0x91/0x4b0 [ 1737.262874] ? __ia32_sys_shutdown+0x80/0x80 [ 1737.263783] ? __lock_acquire+0xbb1/0x5b00 [ 1737.264680] sendmsg_copy_msghdr+0xa1/0x160 [ 1737.265559] ? do_recvmmsg+0x6d0/0x6d0 [ 1737.266340] ? perf_trace_lock+0xac/0x490 [ 1737.267181] ? SOFTIRQ_verbose+0x10/0x10 [ 1737.268008] ? __lockdep_reset_lock+0x180/0x180 [ 1737.268979] ? perf_trace_lock+0xac/0x490 [ 1737.269831] ___sys_sendmsg+0xc6/0x170 [ 1737.270618] ? sendmsg_copy_msghdr+0x160/0x160 [ 1737.271547] ? __fget_files+0x26d/0x4c0 [ 1737.272375] ? lock_downgrade+0x6d0/0x6d0 [ 1737.273237] ? lock_downgrade+0x6d0/0x6d0 [ 1737.274090] ? __fget_files+0x296/0x4c0 [ 1737.274920] ? __fget_light+0xea/0x290 [ 1737.275727] __sys_sendmmsg+0x195/0x470 [ 1737.276559] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1737.277435] ? lock_downgrade+0x6d0/0x6d0 [ 1737.278289] ? ksys_write+0x12d/0x260 [ 1737.279098] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1737.280090] ? wait_for_completion_io+0x270/0x270 [ 1737.281089] ? rcu_read_lock_any_held+0x75/0xa0 [ 1737.282037] ? vfs_write+0x354/0xa70 [ 1737.282795] ? fput_many+0x2f/0x1a0 [ 1737.283534] ? ksys_write+0x1a9/0x260 [ 1737.284327] ? __ia32_sys_read+0xb0/0xb0 [ 1737.285163] __x64_sys_sendmmsg+0x99/0x100 [ 1737.286038] do_syscall_64+0x33/0x40 [ 1737.286796] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1737.287832] RIP: 0033:0x7fd6f698fb19 [ 1737.288609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1737.292391] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1737.293944] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1737.295399] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1737.296867] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1737.298333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.299805] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 [ 1737.311687] EXT4-fs (loop7): Unrecognized mount option "" or missing value 21:55:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, 0x0, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:17 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xaaaaaaaaaaaab45, &(0x7f00000003c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000400000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7de03446b4ca4eaf4655fd7f4655fc0d7f4655f00", 0x1d, 0x1600}, {&(0x7f00000002c0)="b705e589cdec66701d027d291c56e6b6b113e0090ed9e6ce57066195e501e122b8fc87881fab6bd58ca43565d0763f7a2a57786daf0b804457e9ee25e88089edbd6ad4eb97fab420db36bcc98513562257a329eba23b214095eb3d376a64c95d0a802e5c22394cc44b07506a0db0f93ac499986cf2bee4b83bcd2551abc9addfc5cc3834c6f9ace473f2a535e8bc30c63ac30bff7363a399bf6427d0886d435907dfef493e290c08da370f6d95592366516cf4d7380e3af49f709cd3460749787ff3b20e9854820ffff66401be77791542b80aafc1d93d0de2dfb0c95e2581ff48af194f68", 0xe5, 0xcf2}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f00000063c0), &(0x7f0000006400)=0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r4, 0xffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x240000000, 0x3) sendfile(r0, r1, 0x0, 0x20d315) r5 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRES64=r1, @ANYRESDEC=r5], 0xfdef) getpgid(0x0) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x80000, 0x144) socket$packet(0x11, 0x3, 0x300) 21:55:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 2) [ 1737.666836] FAULT_INJECTION: forcing a failure. [ 1737.666836] name failslab, interval 1, probability 0, space 0, times 1 [ 1737.668733] CPU: 0 PID: 11388 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1737.669859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1737.671198] Call Trace: [ 1737.671616] dump_stack+0x107/0x167 [ 1737.672205] should_fail.cold+0x5/0xa [ 1737.672810] ? __alloc_skb+0x6d/0x5b0 [ 1737.673401] should_failslab+0x5/0x20 21:55:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1737.674001] kmem_cache_alloc_node+0x55/0x330 [ 1737.674807] __alloc_skb+0x6d/0x5b0 [ 1737.675378] alloc_skb_with_frags+0x92/0x570 [ 1737.676076] ? mark_lock+0xf5/0x2df0 [ 1737.676674] ? lock_acquire+0x197/0x470 [ 1737.677299] sock_alloc_send_pskb+0x7af/0x930 [ 1737.678019] ? sk_alloc+0x350/0x350 [ 1737.678597] ? perf_trace_lock+0xac/0x490 [ 1737.679237] ? SOFTIRQ_verbose+0x10/0x10 [ 1737.679870] ? lock_chain_count+0x20/0x20 [ 1737.680539] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1737.681316] ? ip6_mtu+0x1bb/0x3d0 [ 1737.681853] ? lock_downgrade+0x6d0/0x6d0 [ 1737.682482] ? ip_frag_init+0x350/0x350 [ 1737.683095] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1737.683812] ? ip6_mtu+0x1e9/0x3d0 [ 1737.684363] ? ip6_setup_cork+0xfb7/0x1740 [ 1737.685021] ip6_make_skb+0x2de/0x4e0 [ 1737.685609] ? ip_frag_init+0x350/0x350 [ 1737.686226] ? ip_frag_init+0x350/0x350 [ 1737.686846] ? ip6_push_pending_frames+0xf0/0xf0 [ 1737.687613] ? ip6_dst_hoplimit+0x199/0x440 [ 1737.688337] ? lock_downgrade+0x6d0/0x6d0 [ 1737.689027] udpv6_sendmsg+0x20d0/0x2af0 [ 1737.689691] ? ip_frag_init+0x350/0x350 [ 1737.690351] ? udp_v6_push_pending_frames+0x360/0x360 [ 1737.691188] ? _down_write_nest_lock+0x160/0x160 [ 1737.691960] ? vmacache_update+0xce/0x140 [ 1737.692652] ? do_user_addr_fault+0x5b0/0xc60 [ 1737.693379] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1737.694224] ? asm_exc_page_fault+0x1e/0x30 [ 1737.694879] ? sock_has_perm+0x1ea/0x280 [ 1737.695524] ? __import_iovec+0x458/0x590 [ 1737.696189] ? udp_v6_push_pending_frames+0x360/0x360 [ 1737.696991] inet6_sendmsg+0x105/0x140 [ 1737.697608] ? inet6_compat_ioctl+0x320/0x320 [ 1737.698298] __sock_sendmsg+0xf2/0x190 [ 1737.698894] ____sys_sendmsg+0x334/0x870 [ 1737.699517] ? sock_write_iter+0x3d0/0x3d0 [ 1737.700177] ? do_recvmmsg+0x6d0/0x6d0 [ 1737.700813] ? perf_trace_lock+0xac/0x490 [ 1737.701474] ? __lockdep_reset_lock+0x180/0x180 [ 1737.702185] ? perf_trace_lock+0xac/0x490 [ 1737.702840] ___sys_sendmsg+0xf3/0x170 [ 1737.703450] ? sendmsg_copy_msghdr+0x160/0x160 [ 1737.704189] ? __fget_files+0x26d/0x4c0 [ 1737.704820] ? lock_downgrade+0x6d0/0x6d0 [ 1737.705491] ? lock_downgrade+0x6d0/0x6d0 [ 1737.706161] ? __fget_files+0x296/0x4c0 [ 1737.706803] ? __fget_light+0xea/0x290 [ 1737.707429] __sys_sendmmsg+0x195/0x470 [ 1737.708059] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1737.708747] ? lock_downgrade+0x6d0/0x6d0 [ 1737.709427] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1737.710211] ? wait_for_completion_io+0x270/0x270 [ 1737.710989] ? rcu_read_lock_any_held+0x75/0xa0 [ 1737.711695] ? vfs_write+0x354/0xa70 [ 1737.712289] ? fput_many+0x2f/0x1a0 [ 1737.712862] ? ksys_write+0x1a9/0x260 [ 1737.713473] ? __ia32_sys_read+0xb0/0xb0 [ 1737.714148] __x64_sys_sendmmsg+0x99/0x100 [ 1737.714797] do_syscall_64+0x33/0x40 [ 1737.715377] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1737.716216] RIP: 0033:0x7fd6f698fb19 [ 1737.716809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1737.719771] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1737.720998] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1737.722192] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1737.723327] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1737.724460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.725562] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:55:18 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 3) 21:55:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1739.061049] FAULT_INJECTION: forcing a failure. [ 1739.061049] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.062859] CPU: 0 PID: 11397 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1739.063909] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1739.065189] Call Trace: [ 1739.065611] dump_stack+0x107/0x167 [ 1739.066186] should_fail.cold+0x5/0xa [ 1739.066773] ? create_object.isra.0+0x3a/0xa20 [ 1739.067506] should_failslab+0x5/0x20 [ 1739.068114] kmem_cache_alloc+0x5b/0x310 [ 1739.068751] create_object.isra.0+0x3a/0xa20 [ 1739.069430] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1739.070245] kmem_cache_alloc_node+0x169/0x330 [ 1739.070973] __alloc_skb+0x6d/0x5b0 [ 1739.071559] alloc_skb_with_frags+0x92/0x570 [ 1739.072269] ? mark_lock+0xf5/0x2df0 [ 1739.072851] ? lock_acquire+0x197/0x470 [ 1739.073471] sock_alloc_send_pskb+0x7af/0x930 [ 1739.074231] ? sk_alloc+0x350/0x350 [ 1739.074808] ? perf_trace_lock+0xac/0x490 [ 1739.075458] ? SOFTIRQ_verbose+0x10/0x10 [ 1739.076095] ? lock_chain_count+0x20/0x20 [ 1739.076757] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1739.077536] ? ip6_mtu+0x1bb/0x3d0 [ 1739.078098] ? lock_downgrade+0x6d0/0x6d0 21:55:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1739.078723] ? ip_frag_init+0x350/0x350 [ 1739.079463] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1739.080194] ? ip6_mtu+0x1e9/0x3d0 [ 1739.080747] ? ip6_setup_cork+0xfb7/0x1740 [ 1739.081414] ip6_make_skb+0x2de/0x4e0 [ 1739.082009] ? ip_frag_init+0x350/0x350 [ 1739.082631] ? ip_frag_init+0x350/0x350 [ 1739.083262] ? ip6_push_pending_frames+0xf0/0xf0 [ 1739.084000] ? ip6_dst_hoplimit+0x199/0x440 [ 1739.084670] ? lock_downgrade+0x6d0/0x6d0 [ 1739.085319] udpv6_sendmsg+0x20d0/0x2af0 [ 1739.085941] ? ip_frag_init+0x350/0x350 [ 1739.086575] ? udp_v6_push_pending_frames+0x360/0x360 [ 1739.087393] ? _down_write_nest_lock+0x160/0x160 [ 1739.088119] ? vmacache_update+0xce/0x140 [ 1739.088779] ? do_user_addr_fault+0x5b0/0xc60 [ 1739.089462] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1739.090273] ? asm_exc_page_fault+0x1e/0x30 [ 1739.090926] ? sock_has_perm+0x1ea/0x280 [ 1739.091567] ? __import_iovec+0x458/0x590 [ 1739.092199] ? udp_v6_push_pending_frames+0x360/0x360 [ 1739.093020] inet6_sendmsg+0x105/0x140 [ 1739.093650] ? inet6_compat_ioctl+0x320/0x320 [ 1739.094337] __sock_sendmsg+0xf2/0x190 [ 1739.094942] ____sys_sendmsg+0x334/0x870 [ 1739.095569] ? sock_write_iter+0x3d0/0x3d0 [ 1739.096213] ? do_recvmmsg+0x6d0/0x6d0 [ 1739.096799] ? perf_trace_lock+0xac/0x490 [ 1739.097443] ? __lockdep_reset_lock+0x180/0x180 [ 1739.098152] ? perf_trace_lock+0xac/0x490 [ 1739.098810] ___sys_sendmsg+0xf3/0x170 [ 1739.099448] ? sendmsg_copy_msghdr+0x160/0x160 [ 1739.100144] ? __fget_files+0x26d/0x4c0 [ 1739.100758] ? lock_downgrade+0x6d0/0x6d0 [ 1739.101394] ? lock_downgrade+0x6d0/0x6d0 [ 1739.102041] ? __fget_files+0x296/0x4c0 [ 1739.102657] ? __fget_light+0xea/0x290 [ 1739.103283] __sys_sendmmsg+0x195/0x470 [ 1739.103910] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1739.104574] ? lock_downgrade+0x6d0/0x6d0 [ 1739.105242] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1739.105973] ? wait_for_completion_io+0x270/0x270 [ 1739.106703] ? rcu_read_lock_any_held+0x75/0xa0 [ 1739.107425] ? vfs_write+0x354/0xa70 [ 1739.108004] ? fput_many+0x2f/0x1a0 [ 1739.108589] ? ksys_write+0x1a9/0x260 [ 1739.109183] ? __ia32_sys_read+0xb0/0xb0 [ 1739.109817] __x64_sys_sendmmsg+0x99/0x100 [ 1739.110471] do_syscall_64+0x33/0x40 [ 1739.111036] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1739.111819] RIP: 0033:0x7fd6f698fb19 [ 1739.112393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.115210] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1739.116418] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1739.117558] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1739.118636] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1739.119724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1739.120862] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:55:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, 0x0, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, 0x0, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:33 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:33 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x78) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r1, &(0x7f0000000140)=0x80000000, r3, &(0x7f0000000180)=0x4, 0x9, 0x0) close(r2) perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x5, 0x81, 0x4, 0x0, 0x10001, 0xa2050, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x240, 0x7, 0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x2}, 0x0, 0xc, r2, 0x3) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x100000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) lseek(r1, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r1, 0x0, 0x200f5ef, 0x0) 21:55:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 4) 21:55:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1753.748415] FAULT_INJECTION: forcing a failure. [ 1753.748415] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.750778] CPU: 0 PID: 11421 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1753.752223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.753968] Call Trace: [ 1753.754517] dump_stack+0x107/0x167 [ 1753.755287] should_fail.cold+0x5/0xa [ 1753.756095] should_failslab+0x5/0x20 [ 1753.756909] __kmalloc_node_track_caller+0x74/0x3b0 [ 1753.757940] ? alloc_skb_with_frags+0x92/0x570 [ 1753.758894] __alloc_skb+0xb1/0x5b0 [ 1753.759664] alloc_skb_with_frags+0x92/0x570 [ 1753.760604] ? mark_lock+0xf5/0x2df0 [ 1753.761371] ? lock_acquire+0x197/0x470 [ 1753.762208] sock_alloc_send_pskb+0x7af/0x930 [ 1753.763161] ? sk_alloc+0x350/0x350 [ 1753.763921] ? perf_trace_lock+0xac/0x490 [ 1753.764804] ? SOFTIRQ_verbose+0x10/0x10 [ 1753.765646] ? lock_chain_count+0x20/0x20 [ 1753.766518] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1753.767567] ? ip6_mtu+0x1bb/0x3d0 [ 1753.768312] ? lock_downgrade+0x6d0/0x6d0 [ 1753.769179] ? ip_frag_init+0x350/0x350 [ 1753.770017] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1753.770978] ? ip6_mtu+0x1e9/0x3d0 [ 1753.771713] ? ip6_setup_cork+0xfb7/0x1740 [ 1753.772608] ip6_make_skb+0x2de/0x4e0 [ 1753.773394] ? ip_frag_init+0x350/0x350 [ 1753.774219] ? ip_frag_init+0x350/0x350 [ 1753.775045] ? ip6_push_pending_frames+0xf0/0xf0 [ 1753.776031] ? ip6_dst_hoplimit+0x199/0x440 [ 1753.776926] ? lock_downgrade+0x6d0/0x6d0 [ 1753.777802] udpv6_sendmsg+0x20d0/0x2af0 [ 1753.778640] ? ip_frag_init+0x350/0x350 [ 1753.779473] ? udp_v6_push_pending_frames+0x360/0x360 [ 1753.780564] ? _down_write_nest_lock+0x160/0x160 [ 1753.781548] ? vmacache_update+0xce/0x140 [ 1753.782420] ? do_user_addr_fault+0x5b0/0xc60 [ 1753.783350] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.784482] ? asm_exc_page_fault+0x1e/0x30 [ 1753.785380] ? sock_has_perm+0x1ea/0x280 [ 1753.786252] ? __import_iovec+0x458/0x590 [ 1753.787109] ? udp_v6_push_pending_frames+0x360/0x360 [ 1753.788176] inet6_sendmsg+0x105/0x140 [ 1753.788986] ? inet6_compat_ioctl+0x320/0x320 [ 1753.789916] __sock_sendmsg+0xf2/0x190 [ 1753.790720] ____sys_sendmsg+0x334/0x870 [ 1753.791563] ? sock_write_iter+0x3d0/0x3d0 [ 1753.792435] ? do_recvmmsg+0x6d0/0x6d0 [ 1753.793224] ? perf_trace_lock+0xac/0x490 [ 1753.794075] ? __lockdep_reset_lock+0x180/0x180 [ 1753.795030] ? perf_trace_lock+0xac/0x490 [ 1753.795892] ___sys_sendmsg+0xf3/0x170 [ 1753.796715] ? sendmsg_copy_msghdr+0x160/0x160 [ 1753.797662] ? __fget_files+0x26d/0x4c0 [ 1753.798469] ? lock_downgrade+0x6d0/0x6d0 [ 1753.799333] ? lock_downgrade+0x6d0/0x6d0 [ 1753.800195] ? __fget_files+0x296/0x4c0 [ 1753.801035] ? __fget_light+0xea/0x290 [ 1753.801849] __sys_sendmmsg+0x195/0x470 [ 1753.802675] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1753.803577] ? lock_downgrade+0x6d0/0x6d0 [ 1753.804472] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1753.805475] ? wait_for_completion_io+0x270/0x270 [ 1753.806474] ? rcu_read_lock_any_held+0x75/0xa0 [ 1753.807432] ? vfs_write+0x354/0xa70 [ 1753.808210] ? fput_many+0x2f/0x1a0 [ 1753.808969] ? ksys_write+0x1a9/0x260 [ 1753.809761] ? __ia32_sys_read+0xb0/0xb0 [ 1753.810606] __x64_sys_sendmmsg+0x99/0x100 [ 1753.811490] do_syscall_64+0x33/0x40 [ 1753.812262] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1753.813342] RIP: 0033:0x7fd6f698fb19 [ 1753.814112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.817963] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1753.819540] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1753.821023] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1753.822495] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1753.823974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1753.825479] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:55:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 5) [ 1754.070893] FAULT_INJECTION: forcing a failure. [ 1754.070893] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.072381] CPU: 1 PID: 11429 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1754.073162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1754.074070] Call Trace: [ 1754.074364] dump_stack+0x107/0x167 [ 1754.074766] should_fail.cold+0x5/0xa [ 1754.075189] ? create_object.isra.0+0x3a/0xa20 [ 1754.075692] should_failslab+0x5/0x20 [ 1754.076110] kmem_cache_alloc+0x5b/0x310 [ 1754.076588] create_object.isra.0+0x3a/0xa20 [ 1754.077073] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1754.077635] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1754.078190] ? alloc_skb_with_frags+0x92/0x570 [ 1754.078696] __alloc_skb+0xb1/0x5b0 [ 1754.079096] alloc_skb_with_frags+0x92/0x570 [ 1754.079586] ? mark_lock+0xf5/0x2df0 [ 1754.080004] ? lock_acquire+0x197/0x470 [ 1754.080462] sock_alloc_send_pskb+0x7af/0x930 [ 1754.080981] ? sk_alloc+0x350/0x350 [ 1754.081397] ? perf_trace_lock+0xac/0x490 [ 1754.081859] ? SOFTIRQ_verbose+0x10/0x10 [ 1754.082321] ? lock_chain_count+0x20/0x20 [ 1754.082797] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1754.083372] ? ip6_mtu+0x1bb/0x3d0 [ 1754.083769] ? lock_downgrade+0x6d0/0x6d0 [ 1754.084238] ? ip_frag_init+0x350/0x350 [ 1754.084708] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1754.085236] ? ip6_mtu+0x1e9/0x3d0 [ 1754.085635] ? ip6_setup_cork+0xfb7/0x1740 [ 1754.086119] ip6_make_skb+0x2de/0x4e0 [ 1754.086542] ? ip_frag_init+0x350/0x350 [ 1754.086990] ? ip_frag_init+0x350/0x350 [ 1754.087443] ? ip6_push_pending_frames+0xf0/0xf0 [ 1754.087981] ? ip6_dst_hoplimit+0x199/0x440 [ 1754.088486] ? lock_downgrade+0x6d0/0x6d0 [ 1754.088960] udpv6_sendmsg+0x20d0/0x2af0 [ 1754.089421] ? ip_frag_init+0x350/0x350 [ 1754.089878] ? udp_v6_push_pending_frames+0x360/0x360 [ 1754.090459] ? _down_write_nest_lock+0x160/0x160 [ 1754.090992] ? vmacache_update+0xce/0x140 [ 1754.091469] ? do_user_addr_fault+0x5b0/0xc60 [ 1754.091973] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1754.092581] ? asm_exc_page_fault+0x1e/0x30 [ 1754.093074] ? sock_has_perm+0x1ea/0x280 [ 1754.093551] ? __import_iovec+0x458/0x590 [ 1754.094022] ? udp_v6_push_pending_frames+0x360/0x360 [ 1754.094614] inet6_sendmsg+0x105/0x140 [ 1754.095053] ? inet6_compat_ioctl+0x320/0x320 [ 1754.095562] __sock_sendmsg+0xf2/0x190 [ 1754.095999] ____sys_sendmsg+0x334/0x870 [ 1754.096463] ? sock_write_iter+0x3d0/0x3d0 [ 1754.096941] ? do_recvmmsg+0x6d0/0x6d0 [ 1754.097382] ? perf_trace_lock+0xac/0x490 [ 1754.097855] ? __lockdep_reset_lock+0x180/0x180 [ 1754.098389] ? perf_trace_lock+0xac/0x490 [ 1754.098863] ___sys_sendmsg+0xf3/0x170 [ 1754.099308] ? sendmsg_copy_msghdr+0x160/0x160 [ 1754.099833] ? __fget_files+0x26d/0x4c0 [ 1754.100281] ? lock_downgrade+0x6d0/0x6d0 [ 1754.100778] ? lock_downgrade+0x6d0/0x6d0 [ 1754.101245] ? __fget_files+0x296/0x4c0 [ 1754.101710] ? __fget_light+0xea/0x290 [ 1754.102159] __sys_sendmmsg+0x195/0x470 [ 1754.102617] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1754.103110] ? lock_downgrade+0x6d0/0x6d0 [ 1754.103597] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1754.104138] ? wait_for_completion_io+0x270/0x270 [ 1754.104695] ? rcu_read_lock_any_held+0x75/0xa0 [ 1754.105223] ? vfs_write+0x354/0xa70 [ 1754.105651] ? fput_many+0x2f/0x1a0 [ 1754.106066] ? ksys_write+0x1a9/0x260 [ 1754.106502] ? __ia32_sys_read+0xb0/0xb0 [ 1754.106972] __x64_sys_sendmmsg+0x99/0x100 [ 1754.107447] do_syscall_64+0x33/0x40 [ 1754.107868] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1754.108476] RIP: 0033:0x7fd6f698fb19 [ 1754.108902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1754.110988] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1754.111854] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1754.112672] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1754.113472] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1754.114268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1754.115073] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:55:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x4000, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000001c0)=ANY=[@ANYBLOB="010700000100000018000000", @ANYRES32, @ANYBLOB="05000000000000002e2f66696c65312f66696c653000"]) syz_io_uring_complete(0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x92004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80010}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:55:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:47 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:47 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x400000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)={0x2, {0x2, 0xfffe, 0x3, 0xffff, 0x4, 0xf}}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r2, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000300)=@IORING_OP_NOP={0x0, 0x2}, 0x5) fallocate(r2, 0x8, 0x0, 0x8000) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000240)={0x3f, 0x1, 0x7}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) fallocate(r0, 0x1a, 0xdde, 0x5) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwrite64(r4, &(0x7f0000000480)="af", 0x1, 0x1000000) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0x78) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, 0x4000010, r4, 0x559f000) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/139, 0x8b}, {&(0x7f00000000c0)=""/208, 0xd0}, {&(0x7f00000001c0)=""/13, 0xd}], 0x3, 0x0, 0xa971) openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x200100, 0x0) unshare(0x48020200) 21:55:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 6) 21:55:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:55:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c34", 0x1b}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1767.992620] FAULT_INJECTION: forcing a failure. [ 1767.992620] name failslab, interval 1, probability 0, space 0, times 0 [ 1767.994182] CPU: 0 PID: 11442 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1767.994980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1767.995937] Call Trace: [ 1767.996256] dump_stack+0x107/0x167 [ 1767.996696] should_fail.cold+0x5/0xa [ 1767.997144] ? lock_release+0x680/0x680 [ 1767.997609] ? skb_clone+0x14f/0x3d0 [ 1767.998043] should_failslab+0x5/0x20 [ 1767.998486] kmem_cache_alloc+0x5b/0x310 [ 1767.998967] skb_clone+0x14f/0x3d0 [ 1767.999385] dev_queue_xmit_nit+0x3a7/0xb00 [ 1767.999890] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1768.000427] dev_hard_start_xmit+0xab/0x6f0 [ 1768.000938] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1768.001553] __dev_queue_xmit+0x17ec/0x2710 [ 1768.002068] ? find_held_lock+0x2c/0x110 [ 1768.002541] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1768.003072] ? lock_downgrade+0x6d0/0x6d0 [ 1768.003545] ? lock_acquire+0x197/0x470 [ 1768.004006] ? ip6_finish_output2+0x203/0x1fe0 [ 1768.004552] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1768.005163] neigh_connected_output+0x382/0x4d0 [ 1768.005705] ip6_finish_output2+0xaaf/0x1fe0 [ 1768.006222] __ip6_finish_output.part.0+0x4f7/0xb50 [ 1768.006797] ip6_output+0x3aa/0x7e0 [ 1768.007224] ip6_local_out+0xb4/0x1a0 [ 1768.007666] ip6_send_skb+0xb7/0x350 [ 1768.008107] udp_v6_send_skb+0x7aa/0x15b0 [ 1768.008602] udpv6_sendmsg+0x2113/0x2af0 [ 1768.009073] ? ip_frag_init+0x350/0x350 [ 1768.009539] ? udp_v6_push_pending_frames+0x360/0x360 [ 1768.010129] ? _down_write_nest_lock+0x160/0x160 [ 1768.010677] ? vmacache_update+0xce/0x140 [ 1768.011162] ? do_user_addr_fault+0x5b0/0xc60 [ 1768.011679] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1768.012288] ? asm_exc_page_fault+0x1e/0x30 [ 1768.012793] ? sock_has_perm+0x1ea/0x280 [ 1768.013281] ? __import_iovec+0x458/0x590 [ 1768.013759] ? udp_v6_push_pending_frames+0x360/0x360 [ 1768.014354] inet6_sendmsg+0x105/0x140 [ 1768.014803] ? inet6_compat_ioctl+0x320/0x320 [ 1768.015322] __sock_sendmsg+0xf2/0x190 [ 1768.015779] ____sys_sendmsg+0x334/0x870 [ 1768.016249] ? sock_write_iter+0x3d0/0x3d0 [ 1768.016756] ? do_recvmmsg+0x6d0/0x6d0 [ 1768.017210] ? perf_trace_lock+0xac/0x490 [ 1768.017690] ? __lockdep_reset_lock+0x180/0x180 [ 1768.018246] ? perf_trace_lock+0xac/0x490 [ 1768.018736] ___sys_sendmsg+0xf3/0x170 [ 1768.019184] ? sendmsg_copy_msghdr+0x160/0x160 [ 1768.019712] ? __fget_files+0x26d/0x4c0 [ 1768.020168] ? lock_downgrade+0x6d0/0x6d0 [ 1768.020688] ? lock_downgrade+0x6d0/0x6d0 [ 1768.021178] ? __fget_files+0x296/0x4c0 [ 1768.021659] ? __fget_light+0xea/0x290 [ 1768.022120] __sys_sendmmsg+0x195/0x470 [ 1768.022596] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1768.023098] ? lock_downgrade+0x6d0/0x6d0 [ 1768.023604] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1768.024181] ? wait_for_completion_io+0x270/0x270 [ 1768.024765] ? rcu_read_lock_any_held+0x75/0xa0 [ 1768.025329] ? vfs_write+0x354/0xa70 [ 1768.025774] ? fput_many+0x2f/0x1a0 [ 1768.026222] ? ksys_write+0x1a9/0x260 [ 1768.026675] ? __ia32_sys_read+0xb0/0xb0 [ 1768.027185] __x64_sys_sendmmsg+0x99/0x100 [ 1768.027713] do_syscall_64+0x33/0x40 [ 1768.028168] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1768.028799] RIP: 0033:0x7fd6f698fb19 [ 1768.029248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1768.031506] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1768.032443] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1768.033338] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1768.034219] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1768.035100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.035983] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:55:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c34", 0x1b}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:06 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xe) pwrite64(r1, &(0x7f0000000480)="af", 0x1, 0x1000000) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0x78) openat(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x4b) 21:56:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:06 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 7) 21:56:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:06 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x8cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = dup(0xffffffffffffffff) ftruncate(r0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000080)=""/18, 0x12}], 0x1, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000340)=0x1f, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'gre0\x00', {0xf6}, 0x7}) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x18000, 0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x6, 0x8, 0x8}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000003c0)={0xffffffffffffffff, 0x4, 0x1f}) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000100)=0xfffffff8, 0x19) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) [ 1786.780535] FAULT_INJECTION: forcing a failure. [ 1786.780535] name failslab, interval 1, probability 0, space 0, times 0 [ 1786.781958] CPU: 1 PID: 11477 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1786.782784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1786.783767] Call Trace: [ 1786.784088] dump_stack+0x107/0x167 [ 1786.784537] should_fail.cold+0x5/0xa [ 1786.785004] ? create_object.isra.0+0x3a/0xa20 [ 1786.785557] should_failslab+0x5/0x20 [ 1786.785988] kmem_cache_alloc+0x5b/0x310 [ 1786.786512] ? lock_acquire+0x197/0x470 [ 1786.786976] create_object.isra.0+0x3a/0xa20 [ 1786.787496] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1786.788131] kmem_cache_alloc+0x159/0x310 [ 1786.788661] skb_clone+0x14f/0x3d0 [ 1786.789116] dev_queue_xmit_nit+0x3a7/0xb00 [ 1786.789669] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1786.790230] dev_hard_start_xmit+0xab/0x6f0 [ 1786.790778] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1786.791417] __dev_queue_xmit+0x17ec/0x2710 [ 1786.791956] ? find_held_lock+0x2c/0x110 [ 1786.792463] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1786.793021] ? lock_downgrade+0x6d0/0x6d0 [ 1786.793528] ? lock_acquire+0x197/0x470 [ 1786.794024] ? ip6_finish_output2+0x203/0x1fe0 [ 1786.794591] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1786.795237] neigh_connected_output+0x382/0x4d0 [ 1786.795819] ip6_finish_output2+0xaaf/0x1fe0 [ 1786.796372] __ip6_finish_output.part.0+0x4f7/0xb50 [ 1786.797010] ip6_output+0x3aa/0x7e0 [ 1786.797462] ip6_local_out+0xb4/0x1a0 [ 1786.797942] ip6_send_skb+0xb7/0x350 [ 1786.798398] udp_v6_send_skb+0x7aa/0x15b0 [ 1786.798928] udpv6_sendmsg+0x2113/0x2af0 [ 1786.799443] ? ip_frag_init+0x350/0x350 [ 1786.799971] ? udp_v6_push_pending_frames+0x360/0x360 [ 1786.800649] ? _down_write_nest_lock+0x160/0x160 [ 1786.801283] ? vmacache_update+0xce/0x140 [ 1786.801836] ? do_user_addr_fault+0x5b0/0xc60 [ 1786.802414] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1786.803103] ? asm_exc_page_fault+0x1e/0x30 [ 1786.803652] ? sock_has_perm+0x1ea/0x280 [ 1786.804189] ? __import_iovec+0x458/0x590 [ 1786.804673] ? udp_v6_push_pending_frames+0x360/0x360 [ 1786.805331] inet6_sendmsg+0x105/0x140 [ 1786.805820] ? inet6_compat_ioctl+0x320/0x320 [ 1786.806398] __sock_sendmsg+0xf2/0x190 [ 1786.806890] ____sys_sendmsg+0x334/0x870 [ 1786.807415] ? sock_write_iter+0x3d0/0x3d0 [ 1786.807954] ? do_recvmmsg+0x6d0/0x6d0 [ 1786.808447] ? perf_trace_lock+0xac/0x490 [ 1786.808987] ? __lockdep_reset_lock+0x180/0x180 [ 1786.809572] ? perf_trace_lock+0xac/0x490 [ 1786.810101] ___sys_sendmsg+0xf3/0x170 [ 1786.810589] ? sendmsg_copy_msghdr+0x160/0x160 [ 1786.811182] ? __fget_files+0x26d/0x4c0 [ 1786.811698] ? lock_downgrade+0x6d0/0x6d0 [ 1786.812235] ? lock_downgrade+0x6d0/0x6d0 [ 1786.812778] ? __fget_files+0x296/0x4c0 [ 1786.813310] ? __fget_light+0xea/0x290 [ 1786.813821] __sys_sendmmsg+0x195/0x470 [ 1786.814337] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1786.814882] ? lock_downgrade+0x6d0/0x6d0 [ 1786.815432] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1786.816058] ? wait_for_completion_io+0x270/0x270 [ 1786.816675] ? rcu_read_lock_any_held+0x75/0xa0 [ 1786.817280] ? vfs_write+0x354/0xa70 [ 1786.817759] ? fput_many+0x2f/0x1a0 [ 1786.818235] ? ksys_write+0x1a9/0x260 [ 1786.818725] ? __ia32_sys_read+0xb0/0xb0 [ 1786.819248] __x64_sys_sendmmsg+0x99/0x100 [ 1786.819806] do_syscall_64+0x33/0x40 [ 1786.820284] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1786.820958] RIP: 0033:0x7fd6f698fb19 [ 1786.821427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1786.823788] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1786.824731] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1786.825648] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1786.826553] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1786.827464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1786.828375] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:56:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c34", 0x1b}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:06 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x4) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x2, 0x4, 0x2, 0x6, 0xffffffffffffffff}) ioctl$CDROM_SELECT_SPEED(r0, 0x125e, 0x20000000) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x8, 0x0, 0x8000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xf0e}}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x1, 0x2, 0xaa, 0x800}) r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x10000, 0x0) getdents64(r3, &(0x7f00000000c0)=""/98, 0x62) 21:56:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:06 executing program 7: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x4, @dev, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @initdev}, &(0x7f0000000240)=0xc) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4007, @fd_index=0x2, 0xfffffffffffffff9, 0x200, 0xfffff41d, 0x0, 0x0, {0x2}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrusage(0x1, &(0x7f0000000140)) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975", 0x29}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 8) 21:56:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a", 0x1c}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:21 executing program 7: syz_mount_image$iso9660(0x0, 0x0, 0x4, 0x0, &(0x7f0000001600), 0x48000, &(0x7f0000001680)=ANY=[@ANYBLOB]) getpgid(0x0) wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x40a605, 0xd8) r1 = fcntl$getown(0xffffffffffffffff, 0x9) rt_tgsigqueueinfo(0x0, 0x0, 0x1a, &(0x7f00000001c0)={0xb, 0x0, 0x874}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x224100, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x4, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x2342, 0x4) clone3(&(0x7f0000003940)={0x10200, &(0x7f0000003780), &(0x7f00000037c0), &(0x7f0000003800), {0x20}, &(0x7f0000003840)=""/92, 0x5c, &(0x7f00000038c0)=""/44, &(0x7f0000003900)=[r1], 0x1, {r2}}, 0x58) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:21 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1801.630313] FAULT_INJECTION: forcing a failure. [ 1801.630313] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.632689] CPU: 0 PID: 11519 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1801.634136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1801.635890] Call Trace: [ 1801.636448] dump_stack+0x107/0x167 [ 1801.637236] should_fail.cold+0x5/0xa [ 1801.638043] ? skb_clone+0x14f/0x3d0 [ 1801.638844] should_failslab+0x5/0x20 [ 1801.639654] kmem_cache_alloc+0x5b/0x310 [ 1801.640526] skb_clone+0x14f/0x3d0 [ 1801.641291] packet_rcv+0x558/0x1410 [ 1801.642085] packet_rcv_fanout+0x278/0x9d0 [ 1801.642981] ? packet_getname_spkt+0x300/0x300 [ 1801.643936] dev_queue_xmit_nit+0x38b/0xb00 [ 1801.644856] dev_hard_start_xmit+0xab/0x6f0 [ 1801.645766] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1801.646874] __dev_queue_xmit+0x17ec/0x2710 [ 1801.647784] ? find_held_lock+0x2c/0x110 [ 1801.648642] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1801.649626] ? lock_downgrade+0x6d0/0x6d0 [ 1801.650501] ? lock_acquire+0x197/0x470 [ 1801.651328] ? ip6_finish_output2+0x203/0x1fe0 [ 1801.652298] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1801.653404] neigh_connected_output+0x382/0x4d0 [ 1801.654396] ip6_finish_output2+0xaaf/0x1fe0 [ 1801.655335] __ip6_finish_output.part.0+0x4f7/0xb50 [ 1801.656384] ip6_output+0x3aa/0x7e0 [ 1801.657181] ip6_local_out+0xb4/0x1a0 [ 1801.657970] ip6_send_skb+0xb7/0x350 [ 1801.658735] udp_v6_send_skb+0x7aa/0x15b0 [ 1801.659593] udpv6_sendmsg+0x2113/0x2af0 [ 1801.660433] ? ip_frag_init+0x350/0x350 [ 1801.661284] ? udp_v6_push_pending_frames+0x360/0x360 [ 1801.662358] ? _down_write_nest_lock+0x160/0x160 [ 1801.663327] ? vmacache_update+0xce/0x140 [ 1801.664200] ? do_user_addr_fault+0x5b0/0xc60 [ 1801.665150] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1801.666237] ? asm_exc_page_fault+0x1e/0x30 [ 1801.667130] ? sock_has_perm+0x1ea/0x280 [ 1801.668001] ? __import_iovec+0x458/0x590 [ 1801.668852] ? udp_v6_push_pending_frames+0x360/0x360 [ 1801.669943] inet6_sendmsg+0x105/0x140 [ 1801.670755] ? inet6_compat_ioctl+0x320/0x320 [ 1801.671673] __sock_sendmsg+0xf2/0x190 [ 1801.672467] ____sys_sendmsg+0x334/0x870 [ 1801.673304] ? sock_write_iter+0x3d0/0x3d0 [ 1801.674178] ? do_recvmmsg+0x6d0/0x6d0 [ 1801.674994] ? perf_trace_lock+0xac/0x490 [ 1801.675870] ? __lockdep_reset_lock+0x180/0x180 [ 1801.676841] ? perf_trace_lock+0xac/0x490 [ 1801.677727] ___sys_sendmsg+0xf3/0x170 [ 1801.678537] ? sendmsg_copy_msghdr+0x160/0x160 [ 1801.679492] ? __fget_files+0x26d/0x4c0 [ 1801.680321] ? lock_downgrade+0x6d0/0x6d0 [ 1801.681207] ? lock_downgrade+0x6d0/0x6d0 [ 1801.682079] ? __fget_files+0x296/0x4c0 [ 1801.682915] ? __fget_light+0xea/0x290 [ 1801.683741] __sys_sendmmsg+0x195/0x470 [ 1801.684576] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1801.685492] ? lock_downgrade+0x6d0/0x6d0 [ 1801.686382] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1801.687392] ? wait_for_completion_io+0x270/0x270 [ 1801.688395] ? rcu_read_lock_any_held+0x75/0xa0 [ 1801.689365] ? vfs_write+0x354/0xa70 [ 1801.690153] ? fput_many+0x2f/0x1a0 [ 1801.690913] ? ksys_write+0x1a9/0x260 [ 1801.691706] ? __ia32_sys_read+0xb0/0xb0 [ 1801.692565] __x64_sys_sendmmsg+0x99/0x100 [ 1801.693467] do_syscall_64+0x33/0x40 [ 1801.694249] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1801.695316] RIP: 0033:0x7fd6f698fb19 [ 1801.696093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1801.699936] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1801.701529] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1801.703013] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1801.704497] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1801.705997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1801.707477] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:56:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1", 0xf}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 9) 21:56:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1802.173627] FAULT_INJECTION: forcing a failure. [ 1802.173627] name failslab, interval 1, probability 0, space 0, times 0 [ 1802.176010] CPU: 0 PID: 11538 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1802.177447] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1802.179149] Call Trace: [ 1802.179689] dump_stack+0x107/0x167 [ 1802.180437] should_fail.cold+0x5/0xa [ 1802.181219] ? create_object.isra.0+0x3a/0xa20 [ 1802.182160] should_failslab+0x5/0x20 [ 1802.182945] kmem_cache_alloc+0x5b/0x310 [ 1802.183798] create_object.isra.0+0x3a/0xa20 [ 1802.184690] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1802.185749] kmem_cache_alloc+0x159/0x310 [ 1802.186616] skb_clone+0x14f/0x3d0 [ 1802.187365] packet_rcv+0x558/0x1410 [ 1802.188148] packet_rcv_fanout+0x278/0x9d0 [ 1802.189037] ? packet_getname_spkt+0x300/0x300 [ 1802.189962] dev_queue_xmit_nit+0x38b/0xb00 [ 1802.190843] dev_hard_start_xmit+0xab/0x6f0 [ 1802.191737] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1802.192829] __dev_queue_xmit+0x17ec/0x2710 [ 1802.193735] ? find_held_lock+0x2c/0x110 [ 1802.194577] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1802.195519] ? lock_downgrade+0x6d0/0x6d0 [ 1802.196371] ? lock_acquire+0x197/0x470 [ 1802.197211] ? ip6_finish_output2+0x203/0x1fe0 [ 1802.198166] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1802.199252] neigh_connected_output+0x382/0x4d0 [ 1802.200227] ip6_finish_output2+0xaaf/0x1fe0 [ 1802.201170] __ip6_finish_output.part.0+0x4f7/0xb50 [ 1802.202210] ip6_output+0x3aa/0x7e0 [ 1802.202979] ip6_local_out+0xb4/0x1a0 [ 1802.203779] ip6_send_skb+0xb7/0x350 [ 1802.204556] udp_v6_send_skb+0x7aa/0x15b0 [ 1802.205441] udpv6_sendmsg+0x2113/0x2af0 [ 1802.206287] ? ip_frag_init+0x350/0x350 [ 1802.207119] ? udp_v6_push_pending_frames+0x360/0x360 [ 1802.208185] ? _down_write_nest_lock+0x160/0x160 [ 1802.209181] ? vmacache_update+0xce/0x140 [ 1802.210048] ? do_user_addr_fault+0x5b0/0xc60 [ 1802.210988] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1802.212087] ? asm_exc_page_fault+0x1e/0x30 [ 1802.212998] ? sock_has_perm+0x1ea/0x280 [ 1802.213866] ? __import_iovec+0x458/0x590 [ 1802.214710] ? udp_v6_push_pending_frames+0x360/0x360 [ 1802.215780] inet6_sendmsg+0x105/0x140 [ 1802.216592] ? inet6_compat_ioctl+0x320/0x320 [ 1802.217525] __sock_sendmsg+0xf2/0x190 [ 1802.218329] ____sys_sendmsg+0x334/0x870 [ 1802.219172] ? sock_write_iter+0x3d0/0x3d0 [ 1802.220041] ? do_recvmmsg+0x6d0/0x6d0 [ 1802.220845] ? perf_trace_lock+0xac/0x490 [ 1802.221730] ? __lockdep_reset_lock+0x180/0x180 [ 1802.222687] ? perf_trace_lock+0xac/0x490 [ 1802.223557] ___sys_sendmsg+0xf3/0x170 [ 1802.224387] ? sendmsg_copy_msghdr+0x160/0x160 [ 1802.225336] ? __fget_files+0x26d/0x4c0 [ 1802.226155] ? lock_downgrade+0x6d0/0x6d0 [ 1802.227023] ? lock_downgrade+0x6d0/0x6d0 [ 1802.227887] ? __fget_files+0x296/0x4c0 [ 1802.228735] ? __fget_light+0xea/0x290 [ 1802.229557] __sys_sendmmsg+0x195/0x470 [ 1802.230393] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1802.231290] ? lock_downgrade+0x6d0/0x6d0 [ 1802.232180] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1802.233201] ? wait_for_completion_io+0x270/0x270 [ 1802.234211] ? rcu_read_lock_any_held+0x75/0xa0 [ 1802.235175] ? vfs_write+0x354/0xa70 [ 1802.235945] ? fput_many+0x2f/0x1a0 [ 1802.236693] ? ksys_write+0x1a9/0x260 [ 1802.237494] ? __ia32_sys_read+0xb0/0xb0 [ 1802.238336] __x64_sys_sendmmsg+0x99/0x100 [ 1802.239213] do_syscall_64+0x33/0x40 [ 1802.239985] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1802.241048] RIP: 0033:0x7fd6f698fb19 [ 1802.241810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1802.245521] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 21:56:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1802.247053] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1802.248612] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1802.250041] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1802.251488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1802.252950] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:56:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1", 0xf}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:36 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x8, 0x0, 0x8000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private2, @in=@broadcast, 0x4e22, 0x1, 0x4e24, 0x3, 0x8, 0x20, 0x20, 0x1d, 0x0, 0xffffffffffffffff}, {0x2, 0x8, 0x5, 0x8e7, 0x0, 0x8, 0x5, 0xd7}, {0x10001, 0x40, 0x3, 0x1}, 0x7, 0x6e6abd, 0x2, 0x0, 0x7}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x2b}, 0x853ba36a326a2e99, @in=@local, 0x0, 0x0, 0x3, 0x1, 0x8, 0xba, 0xfffffeff}}, 0xe8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x8, 0x0, 0x8000) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0xc8, 0x1, 0x3f, 0xf9, 0x0, 0x1, 0x2, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4, 0x1, 0x1, 0x9, 0x8, 0x3, 0xffff, 0x0, 0x7, 0x0, 0x6}, 0xffffffffffffffff, 0x9, r2, 0x8) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x6, 0x81, 0x7, 0x8, 0x0, 0x9, 0x50001, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000002c0), 0xc}, 0x80, 0x1, 0x4a2, 0x9, 0x2, 0x8, 0x80, 0x0, 0x401, 0x0, 0x100000001}, 0x0, 0xd, 0xffffffffffffffff, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=none,smackfsfloor=:,\x00']) fcntl$getown(0xffffffffffffffff, 0x9) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r4, 0x8, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="4200000038f7f400ae515eb7d600010000cab4d1762e5f52e625b9f2381566b2faa691fb56eea556f3519d247175fb80f5af1e5339b9271fd224b9c952667e891fd2cb3321ea8f75c7ee34fa25de8a097ca70e4e7e2a31ed609d20993ff152cc7e00ad3021a8dcba2f7829a467db1b683d5d81dd8366016e7ef9060a3bc3fccf84aa9e541d5910fefb0ba6647da00d8e99cbe7453ea976fb0725e602217764a6c7787f95c723c27251031f5a9e3f80c88136e181f9549253604cf96554f7909620c4eba9"]}) fsmount(r3, 0x0, 0x70) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 21:56:36 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 10) 21:56:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {0x0}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1816.968437] FAULT_INJECTION: forcing a failure. [ 1816.968437] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1816.971021] CPU: 0 PID: 11568 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1816.972345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1816.973882] Call Trace: [ 1816.974382] dump_stack+0x107/0x167 [ 1816.975066] should_fail.cold+0x5/0xa [ 1816.975802] __alloc_pages_nodemask+0x182/0x600 [ 1816.976685] ? lock_chain_count+0x20/0x20 [ 1816.977481] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1816.978625] ? perf_trace_lock+0xac/0x490 [ 1816.979436] alloc_pages_vma+0xbb/0x410 [ 1816.980214] wp_page_copy+0xee7/0x1f00 [ 1816.980974] ? print_bad_pte+0x5a0/0x5a0 [ 1816.981738] ? lock_downgrade+0x6d0/0x6d0 [ 1816.982491] ? vm_normal_page+0x162/0x2e0 [ 1816.983253] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1816.984201] do_wp_page+0x27b/0x1390 [ 1816.984878] handle_mm_fault+0x1cc7/0x3500 [ 1816.985652] ? __schedule+0x82c/0x1ea0 [ 1816.986349] ? __pmd_alloc+0x5e0/0x5e0 [ 1816.987065] ? vmacache_find+0x55/0x2a0 [ 1816.987798] do_user_addr_fault+0x56e/0xc60 [ 1816.988583] exc_page_fault+0xa2/0x1a0 [ 1816.989308] asm_exc_page_fault+0x1e/0x30 [ 1816.990068] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1816.990970] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca e9 91 2c 1e 02 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca e9 72 2c 1e 02 66 90 48 bb f9 ef ff ff ff 7f [ 1816.994282] RSP: 0018:ffff88803553fcf0 EFLAGS: 00050293 [ 1816.995240] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020004d38 [ 1816.996533] RDX: 0000000000040000 RSI: ffffffff830fa6f2 RDI: ffff8880483857f8 [ 1816.997825] RBP: 0000000000040000 R08: 0000000000000000 R09: 0000000000000000 [ 1816.999115] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 1817.000407] R13: 0000000020004d00 R14: 000000000000002f R15: 000000000000002e [ 1817.001714] ? __sys_sendmmsg+0x1c2/0x470 [ 1817.002456] __sys_sendmmsg+0x1cf/0x470 [ 1817.003177] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1817.003963] ? lock_downgrade+0x6d0/0x6d0 [ 1817.004734] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1817.005622] ? wait_for_completion_io+0x270/0x270 [ 1817.006489] ? rcu_read_lock_any_held+0x75/0xa0 [ 1817.007318] ? vfs_write+0x354/0xa70 [ 1817.007992] ? fput_many+0x2f/0x1a0 [ 1817.008656] ? ksys_write+0x1a9/0x260 [ 1817.009352] ? __ia32_sys_read+0xb0/0xb0 [ 1817.010083] __x64_sys_sendmmsg+0x99/0x100 [ 1817.010853] do_syscall_64+0x33/0x40 [ 1817.011530] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1817.012450] RIP: 0033:0x7fd6f698fb19 [ 1817.013120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1817.016434] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1817.017804] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1817.019077] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1817.020359] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1817.021650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1817.022920] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 [ 1817.117277] 9pnet: Insufficient options for proto=fd 21:56:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1817.213674] 9pnet: Insufficient options for proto=fd 21:56:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 11) [ 1817.349036] FAULT_INJECTION: forcing a failure. [ 1817.349036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1817.350634] CPU: 0 PID: 11581 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1817.351555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1817.352640] Call Trace: [ 1817.352993] dump_stack+0x107/0x167 [ 1817.353501] should_fail.cold+0x5/0xa [ 1817.354022] _copy_from_user+0x2e/0x1b0 [ 1817.354563] __copy_msghdr_from_user+0x91/0x4b0 [ 1817.355190] ? __ia32_sys_shutdown+0x80/0x80 [ 1817.355789] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1817.356507] ? perf_trace_lock+0xac/0x490 [ 1817.357074] sendmsg_copy_msghdr+0xa1/0x160 [ 1817.357671] ? do_recvmmsg+0x6d0/0x6d0 [ 1817.358196] ? handle_mm_fault+0x9e9/0x3500 [ 1817.358790] ? find_held_lock+0x2c/0x110 [ 1817.359369] ___sys_sendmsg+0xc6/0x170 [ 1817.359921] ? sendmsg_copy_msghdr+0x160/0x160 [ 1817.360564] ? vmacache_find+0x55/0x2a0 [ 1817.361144] ? do_user_addr_fault+0x5b0/0xc60 [ 1817.361806] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1817.362542] ? exc_page_fault+0xca/0x1a0 [ 1817.363119] ? trace_hardirqs_on+0x5b/0x180 [ 1817.363733] ? exc_page_fault+0xca/0x1a0 [ 1817.364308] ? asm_exc_page_fault+0x1e/0x30 [ 1817.364932] __sys_sendmmsg+0x195/0x470 [ 1817.365501] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1817.366106] ? lock_downgrade+0x6d0/0x6d0 [ 1817.366704] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1817.367380] ? wait_for_completion_io+0x270/0x270 [ 1817.368064] ? rcu_read_lock_any_held+0x75/0xa0 [ 1817.368716] ? vfs_write+0x354/0xa70 [ 1817.369259] ? fput_many+0x2f/0x1a0 [ 1817.369776] ? ksys_write+0x1a9/0x260 [ 1817.370312] ? __ia32_sys_read+0xb0/0xb0 [ 1817.370897] __x64_sys_sendmmsg+0x99/0x100 [ 1817.371490] do_syscall_64+0x33/0x40 [ 1817.372022] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1817.372747] RIP: 0033:0x7fd6f698fb19 [ 1817.373290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1817.375802] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1817.376833] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1817.377808] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1817.378770] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1817.379741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1817.380707] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:56:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:36 executing program 7: sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x134, 0x9, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xffffffffffffffc1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x101}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xea78}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xfffffffffffffffc}}, {0x14, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xd, 0x1a, '!,f}$.#}\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x134}, 0x1, 0x0, 0x0, 0x40005}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd6a}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@memory_localevents}]}) 21:56:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {0x0}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:51 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup2(0xffffffffffffffff, r3) write(r2, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) sendfile(r5, r6, &(0x7f0000000140)=0x240000000, 0x3) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000001740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001700)={&(0x7f00000004c0)={0x10d8, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x558, 0x8, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x45c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "402b5c26f0f393257e71fe5341f2319023259417750f631b6b0576a12eb72c7c"}, @WGPEER_A_ALLOWEDIPS={0x424, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5, 0x3, 0xf6}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf27d}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0xaec, 0x8, 0x0, 0x1, [{0x160, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5, 0x3, 0x1}}]}]}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x6, @mcast1}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x3d4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x358, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xfff, @mcast1, 0x101}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x8}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "247eb6cdda915659c7e1cd7d9c64e8cb3a284a156da0dea36cb9873bcc543d5f"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @empty, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010101}}]}, {0x174, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x144, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "28a85fe7d295f711ab817cce4c01c8cb6b35b13778b8ca07d7ef86d72c6a6f06"}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "40013fba307823972be1dc74cb11441cf064141070f4502214135e0d21516304"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e9a1abe518caebb020c3fb259dda190ff6434e7dd781752eb7092f9ae160c58f"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x2d8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2a8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x20}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x10d8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000005) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="0400000000000000010000000000000002000000000000000007000000000000ff03000000000000e9000000000000003f00000007000000020000000600000008000000000000000000000000000000090000000000000008000000000000004800000000000000000000000000000000000000000000000000000000000000000062ed3da8132c3acba519d244511900"/190]) sendfile(r0, r1, 0x0, 0x20d315) r7 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRES64=r1, @ANYRESDEC=r7], 0xfdef) getpgid(0x0) socket$packet(0x11, 0x3, 0x300) 21:56:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:51 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1", 0xf}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 12) 21:56:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1832.407212] FAULT_INJECTION: forcing a failure. [ 1832.407212] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.411761] CPU: 0 PID: 11597 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1832.413223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1832.414955] Call Trace: [ 1832.415509] dump_stack+0x107/0x167 [ 1832.416266] should_fail.cold+0x5/0xa [ 1832.417055] should_failslab+0x5/0x20 [ 1832.417870] __kmalloc_node_track_caller+0x74/0x3b0 [ 1832.418910] ? alloc_skb_with_frags+0x92/0x570 [ 1832.419871] __alloc_skb+0xb1/0x5b0 [ 1832.420641] alloc_skb_with_frags+0x92/0x570 [ 1832.421577] ? find_held_lock+0x2c/0x110 [ 1832.422429] sock_alloc_send_pskb+0x7af/0x930 [ 1832.423370] ? sk_alloc+0x350/0x350 [ 1832.424128] ? perf_trace_lock+0xac/0x490 [ 1832.424986] ? SOFTIRQ_verbose+0x10/0x10 [ 1832.425837] ? lock_chain_count+0x20/0x20 [ 1832.426707] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1832.427751] ? ip6_mtu+0x1bb/0x3d0 [ 1832.428483] ? lock_downgrade+0x6d0/0x6d0 [ 1832.429334] ? ip_frag_init+0x350/0x350 [ 1832.430182] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1832.431145] ? ip6_mtu+0x1e9/0x3d0 [ 1832.431878] ? ip6_setup_cork+0xfb7/0x1740 [ 1832.432757] ip6_make_skb+0x2de/0x4e0 [ 1832.433552] ? ip_frag_init+0x350/0x350 [ 1832.434373] ? ip_frag_init+0x350/0x350 [ 1832.435200] ? ip6_push_pending_frames+0xf0/0xf0 [ 1832.436185] ? ip6_dst_hoplimit+0x199/0x440 [ 1832.437071] ? lock_downgrade+0x6d0/0x6d0 [ 1832.437957] udpv6_sendmsg+0x20d0/0x2af0 [ 1832.438799] ? ip_frag_init+0x350/0x350 [ 1832.439627] ? udp_v6_push_pending_frames+0x360/0x360 [ 1832.440685] ? __lockdep_reset_lock+0x180/0x180 [ 1832.441670] ? __lockdep_reset_lock+0x180/0x180 [ 1832.442637] ? lock_acquire+0x197/0x470 [ 1832.443460] ? find_held_lock+0x2c/0x110 [ 1832.444318] ? sock_has_perm+0x1ea/0x280 [ 1832.445181] ? __import_iovec+0x458/0x590 [ 1832.446046] ? udp_v6_push_pending_frames+0x360/0x360 [ 1832.447114] inet6_sendmsg+0x105/0x140 [ 1832.447916] ? inet6_compat_ioctl+0x320/0x320 [ 1832.448838] __sock_sendmsg+0xf2/0x190 [ 1832.449650] ____sys_sendmsg+0x334/0x870 [ 1832.450493] ? sock_write_iter+0x3d0/0x3d0 [ 1832.451361] ? do_recvmmsg+0x6d0/0x6d0 [ 1832.452161] ? handle_mm_fault+0x9e9/0x3500 [ 1832.453050] ? __lock_acquire+0x1657/0x5b00 [ 1832.453959] ? find_held_lock+0x2c/0x110 [ 1832.454810] ___sys_sendmsg+0xf3/0x170 [ 1832.455625] ? sendmsg_copy_msghdr+0x160/0x160 [ 1832.456565] ? vmacache_find+0x55/0x2a0 [ 1832.457412] ? do_user_addr_fault+0x5b0/0xc60 [ 1832.458345] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1832.459426] ? exc_page_fault+0xca/0x1a0 [ 1832.460266] ? trace_hardirqs_on+0x5b/0x180 [ 1832.461154] ? exc_page_fault+0xca/0x1a0 [ 1832.462015] ? asm_exc_page_fault+0x1e/0x30 [ 1832.462934] __sys_sendmmsg+0x195/0x470 [ 1832.463767] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1832.464662] ? lock_downgrade+0x6d0/0x6d0 [ 1832.465557] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1832.466558] ? wait_for_completion_io+0x270/0x270 [ 1832.467583] ? rcu_read_lock_any_held+0x75/0xa0 [ 1832.468549] ? vfs_write+0x354/0xa70 [ 1832.469322] ? fput_many+0x2f/0x1a0 [ 1832.470098] ? ksys_write+0x1a9/0x260 [ 1832.470892] ? __ia32_sys_read+0xb0/0xb0 [ 1832.471738] __x64_sys_sendmmsg+0x99/0x100 [ 1832.472626] do_syscall_64+0x33/0x40 [ 1832.473413] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1832.474478] RIP: 0033:0x7fd6f698fb19 [ 1832.475249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1832.479044] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1832.480597] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1832.482042] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1832.483470] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1832.484894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1832.486329] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:56:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {0x0}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1832.553335] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 21:56:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:56:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 13) [ 1832.591714] FAULT_INJECTION: forcing a failure. [ 1832.591714] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.593059] CPU: 1 PID: 11617 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1832.593849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1832.594787] Call Trace: [ 1832.595093] dump_stack+0x107/0x167 [ 1832.595515] should_fail.cold+0x5/0xa [ 1832.595955] ? create_object.isra.0+0x3a/0xa20 [ 1832.596470] should_failslab+0x5/0x20 [ 1832.596910] kmem_cache_alloc+0x5b/0x310 [ 1832.597390] create_object.isra.0+0x3a/0xa20 [ 1832.597888] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1832.598466] kmem_cache_alloc_node+0x169/0x330 [ 1832.598981] __alloc_skb+0x6d/0x5b0 [ 1832.599399] alloc_skb_with_frags+0x92/0x570 [ 1832.599891] ? find_held_lock+0x2c/0x110 [ 1832.600359] sock_alloc_send_pskb+0x7af/0x930 [ 1832.600896] ? sk_alloc+0x350/0x350 [ 1832.601303] ? perf_trace_lock+0xac/0x490 [ 1832.601769] ? SOFTIRQ_verbose+0x10/0x10 [ 1832.602226] ? lock_chain_count+0x20/0x20 [ 1832.602705] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1832.603272] ? ip6_mtu+0x1bb/0x3d0 [ 1832.603676] ? lock_downgrade+0x6d0/0x6d0 [ 1832.604142] ? ip_frag_init+0x350/0x350 [ 1832.604599] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1832.605118] ? ip6_mtu+0x1e9/0x3d0 [ 1832.605532] ? ip6_setup_cork+0xfb7/0x1740 [ 1832.606014] ip6_make_skb+0x2de/0x4e0 [ 1832.606449] ? ip_frag_init+0x350/0x350 [ 1832.606907] ? ip_frag_init+0x350/0x350 [ 1832.607359] ? ip6_push_pending_frames+0xf0/0xf0 [ 1832.607899] ? ip6_dst_hoplimit+0x199/0x440 [ 1832.608396] ? lock_downgrade+0x6d0/0x6d0 [ 1832.608885] udpv6_sendmsg+0x20d0/0x2af0 [ 1832.609357] ? ip_frag_init+0x350/0x350 [ 1832.609818] ? udp_v6_push_pending_frames+0x360/0x360 [ 1832.610400] ? __lockdep_reset_lock+0x180/0x180 [ 1832.610920] ? __lockdep_reset_lock+0x180/0x180 [ 1832.611453] ? lock_acquire+0x197/0x470 [ 1832.611895] ? find_held_lock+0x2c/0x110 [ 1832.612379] ? sock_has_perm+0x1ea/0x280 [ 1832.612843] ? __import_iovec+0x458/0x590 [ 1832.613323] ? udp_v6_push_pending_frames+0x360/0x360 [ 1832.613915] inet6_sendmsg+0x105/0x140 [ 1832.614351] ? inet6_compat_ioctl+0x320/0x320 [ 1832.614865] __sock_sendmsg+0xf2/0x190 [ 1832.615316] ____sys_sendmsg+0x334/0x870 [ 1832.615796] ? sock_write_iter+0x3d0/0x3d0 [ 1832.616286] ? do_recvmmsg+0x6d0/0x6d0 [ 1832.616723] ? handle_mm_fault+0x9e9/0x3500 [ 1832.617230] ? __lock_acquire+0x1657/0x5b00 [ 1832.617737] ? find_held_lock+0x2c/0x110 [ 1832.618221] ___sys_sendmsg+0xf3/0x170 [ 1832.618681] ? sendmsg_copy_msghdr+0x160/0x160 [ 1832.619214] ? vmacache_find+0x55/0x2a0 [ 1832.619689] ? do_user_addr_fault+0x5b0/0xc60 [ 1832.620208] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1832.620820] ? exc_page_fault+0xca/0x1a0 [ 1832.621301] ? trace_hardirqs_on+0x5b/0x180 [ 1832.621809] ? exc_page_fault+0xca/0x1a0 [ 1832.622285] ? asm_exc_page_fault+0x1e/0x30 [ 1832.622805] __sys_sendmmsg+0x195/0x470 [ 1832.623284] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1832.623784] ? lock_downgrade+0x6d0/0x6d0 [ 1832.624290] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1832.624841] ? wait_for_completion_io+0x270/0x270 [ 1832.625403] ? rcu_read_lock_any_held+0x75/0xa0 [ 1832.625923] ? vfs_write+0x354/0xa70 [ 1832.626360] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1832.626953] ? ksys_write+0x1a9/0x260 [ 1832.627398] ? __ia32_sys_read+0xb0/0xb0 [ 1832.627850] __x64_sys_sendmmsg+0x99/0x100 [ 1832.628346] do_syscall_64+0x33/0x40 [ 1832.628770] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1832.629376] RIP: 0033:0x7fd6f698fb19 [ 1832.629800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1832.631928] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1832.632787] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1832.633631] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1832.634455] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1832.635262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1832.636090] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:56:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 14) [ 1832.724439] FAULT_INJECTION: forcing a failure. [ 1832.724439] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.725800] CPU: 1 PID: 11622 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1832.726552] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1832.727432] Call Trace: [ 1832.727726] dump_stack+0x107/0x167 [ 1832.728132] should_fail.cold+0x5/0xa [ 1832.728707] should_failslab+0x5/0x20 [ 1832.729130] __kmalloc_node_track_caller+0x74/0x3b0 [ 1832.729693] ? alloc_skb_with_frags+0x92/0x570 [ 1832.730195] __alloc_skb+0xb1/0x5b0 [ 1832.730598] alloc_skb_with_frags+0x92/0x570 [ 1832.731088] ? find_held_lock+0x2c/0x110 [ 1832.731541] sock_alloc_send_pskb+0x7af/0x930 [ 1832.732043] ? sk_alloc+0x350/0x350 [ 1832.732436] ? perf_trace_lock+0xac/0x490 [ 1832.732901] ? SOFTIRQ_verbose+0x10/0x10 [ 1832.733350] ? lock_chain_count+0x20/0x20 [ 1832.733817] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1832.734391] ? ip6_mtu+0x1bb/0x3d0 [ 1832.734787] ? lock_downgrade+0x6d0/0x6d0 [ 1832.735243] ? ip_frag_init+0x350/0x350 [ 1832.735702] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1832.736224] ? ip6_mtu+0x1e9/0x3d0 [ 1832.736622] ? ip6_setup_cork+0xfb7/0x1740 [ 1832.737099] ip6_make_skb+0x2de/0x4e0 [ 1832.737527] ? ip_frag_init+0x350/0x350 [ 1832.737965] ? ip_frag_init+0x350/0x350 [ 1832.738415] ? ip6_push_pending_frames+0xf0/0xf0 [ 1832.738941] ? ip6_dst_hoplimit+0x199/0x440 [ 1832.739433] ? lock_downgrade+0x6d0/0x6d0 [ 1832.739903] udpv6_sendmsg+0x20d0/0x2af0 [ 1832.740360] ? ip_frag_init+0x350/0x350 [ 1832.740811] ? udp_v6_push_pending_frames+0x360/0x360 [ 1832.741401] ? __lockdep_reset_lock+0x180/0x180 [ 1832.741930] ? __lockdep_reset_lock+0x180/0x180 [ 1832.742432] ? lock_acquire+0x197/0x470 [ 1832.742871] ? find_held_lock+0x2c/0x110 [ 1832.743330] ? sock_has_perm+0x1ea/0x280 [ 1832.743783] ? __import_iovec+0x458/0x590 [ 1832.744236] ? udp_v6_push_pending_frames+0x360/0x360 [ 1832.744786] inet6_sendmsg+0x105/0x140 [ 1832.745210] ? inet6_compat_ioctl+0x320/0x320 [ 1832.745688] __sock_sendmsg+0xf2/0x190 [ 1832.746111] ____sys_sendmsg+0x334/0x870 [ 1832.746555] ? sock_write_iter+0x3d0/0x3d0 [ 1832.747011] ? do_recvmmsg+0x6d0/0x6d0 [ 1832.747422] ? handle_mm_fault+0x9e9/0x3500 [ 1832.747889] ? __lock_acquire+0x1657/0x5b00 [ 1832.748351] ? find_held_lock+0x2c/0x110 [ 1832.748788] ___sys_sendmsg+0xf3/0x170 [ 1832.749210] ? sendmsg_copy_msghdr+0x160/0x160 [ 1832.749733] ? vmacache_find+0x55/0x2a0 [ 1832.750165] ? do_user_addr_fault+0x5b0/0xc60 [ 1832.750660] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1832.751225] ? exc_page_fault+0xca/0x1a0 [ 1832.751662] ? trace_hardirqs_on+0x5b/0x180 [ 1832.752140] ? exc_page_fault+0xca/0x1a0 [ 1832.752578] ? asm_exc_page_fault+0x1e/0x30 [ 1832.753070] __sys_sendmmsg+0x195/0x470 [ 1832.753513] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1832.754002] ? lock_downgrade+0x6d0/0x6d0 [ 1832.754456] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1832.755005] ? wait_for_completion_io+0x270/0x270 [ 1832.755524] ? rcu_read_lock_any_held+0x75/0xa0 [ 1832.756041] ? vfs_write+0x354/0xa70 [ 1832.756443] ? fput_many+0x2f/0x1a0 [ 1832.756849] ? ksys_write+0x1a9/0x260 [ 1832.757258] ? __ia32_sys_read+0xb0/0xb0 [ 1832.757737] __x64_sys_sendmmsg+0x99/0x100 [ 1832.758212] do_syscall_64+0x33/0x40 [ 1832.758642] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1832.759219] RIP: 0033:0x7fd6f698fb19 [ 1832.759623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1832.761670] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1832.762482] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1832.763251] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1832.764025] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1832.764803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1832.765571] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:57:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 15) 21:57:07 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r2, r0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) 21:57:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1847.530455] FAULT_INJECTION: forcing a failure. [ 1847.530455] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.532761] CPU: 0 PID: 11631 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1847.534221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1847.535892] Call Trace: [ 1847.536437] dump_stack+0x107/0x167 [ 1847.537190] should_fail.cold+0x5/0xa 21:57:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1847.537988] ? create_object.isra.0+0x3a/0xa20 [ 1847.539026] should_failslab+0x5/0x20 [ 1847.539788] kmem_cache_alloc+0x5b/0x310 [ 1847.540612] ? lock_acquire+0x197/0x470 [ 1847.541420] create_object.isra.0+0x3a/0xa20 [ 1847.542348] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1847.543382] kmem_cache_alloc+0x159/0x310 [ 1847.544234] skb_clone+0x14f/0x3d0 [ 1847.544952] dev_queue_xmit_nit+0x3a7/0xb00 [ 1847.545853] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1847.546803] dev_hard_start_xmit+0xab/0x6f0 [ 1847.547697] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1847.548789] __dev_queue_xmit+0x17ec/0x2710 [ 1847.549692] ? find_held_lock+0x2c/0x110 [ 1847.550529] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1847.551468] ? lock_downgrade+0x6d0/0x6d0 [ 1847.552309] ? lock_acquire+0x197/0x470 [ 1847.553112] ? ip6_finish_output2+0x203/0x1fe0 [ 1847.554074] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1847.555158] neigh_connected_output+0x382/0x4d0 [ 1847.556134] ip6_finish_output2+0xaaf/0x1fe0 [ 1847.557065] __ip6_finish_output.part.0+0x4f7/0xb50 [ 1847.558105] ip6_output+0x3aa/0x7e0 [ 1847.558872] ip6_local_out+0xb4/0x1a0 [ 1847.559700] ip6_send_skb+0xb7/0x350 [ 1847.560543] udp_v6_send_skb+0x7aa/0x15b0 [ 1847.561424] udpv6_sendmsg+0x2113/0x2af0 [ 1847.562299] ? ip_frag_init+0x350/0x350 [ 1847.563135] ? udp_v6_push_pending_frames+0x360/0x360 [ 1847.564202] ? __lockdep_reset_lock+0x180/0x180 [ 1847.565181] ? __lockdep_reset_lock+0x180/0x180 [ 1847.566137] ? lock_acquire+0x197/0x470 [ 1847.566948] ? find_held_lock+0x2c/0x110 [ 1847.567794] ? sock_has_perm+0x1ea/0x280 [ 1847.568674] ? __import_iovec+0x458/0x590 [ 1847.569553] ? udp_v6_push_pending_frames+0x360/0x360 [ 1847.570626] inet6_sendmsg+0x105/0x140 [ 1847.571411] ? inet6_compat_ioctl+0x320/0x320 [ 1847.572341] __sock_sendmsg+0xf2/0x190 [ 1847.573144] ____sys_sendmsg+0x334/0x870 [ 1847.574005] ? sock_write_iter+0x3d0/0x3d0 [ 1847.574878] ? do_recvmmsg+0x6d0/0x6d0 [ 1847.575678] ? handle_mm_fault+0x9e9/0x3500 [ 1847.576581] ? __lock_acquire+0x1657/0x5b00 [ 1847.577485] ? find_held_lock+0x2c/0x110 [ 1847.578355] ___sys_sendmsg+0xf3/0x170 [ 1847.579161] ? sendmsg_copy_msghdr+0x160/0x160 [ 1847.580113] ? vmacache_find+0x55/0x2a0 [ 1847.580956] ? do_user_addr_fault+0x5b0/0xc60 [ 1847.581909] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1847.583002] ? exc_page_fault+0xca/0x1a0 [ 1847.583834] ? trace_hardirqs_on+0x5b/0x180 [ 1847.584739] ? exc_page_fault+0xca/0x1a0 [ 1847.585590] ? asm_exc_page_fault+0x1e/0x30 [ 1847.586516] __sys_sendmmsg+0x195/0x470 [ 1847.587368] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1847.588262] ? lock_downgrade+0x6d0/0x6d0 [ 1847.589154] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1847.590172] ? wait_for_completion_io+0x270/0x270 [ 1847.591180] ? rcu_read_lock_any_held+0x75/0xa0 [ 1847.592139] ? vfs_write+0x354/0xa70 [ 1847.592920] ? fput_many+0x2f/0x1a0 [ 1847.593693] ? ksys_write+0x1a9/0x260 [ 1847.594490] ? __ia32_sys_read+0xb0/0xb0 [ 1847.595347] __x64_sys_sendmmsg+0x99/0x100 [ 1847.596226] do_syscall_64+0x33/0x40 [ 1847.597004] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1847.598069] RIP: 0033:0x7fd6f698fb19 [ 1847.598843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1847.602668] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1847.604248] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1847.605714] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1847.607178] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1847.608658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1847.610152] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:57:07 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1847.636706] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 21:57:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1847.747118] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 21:57:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:07 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 16) 21:57:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1847.858426] FAULT_INJECTION: forcing a failure. [ 1847.858426] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.859718] CPU: 1 PID: 11661 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1847.860483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1847.861372] Call Trace: [ 1847.861682] dump_stack+0x107/0x167 [ 1847.862084] should_fail.cold+0x5/0xa [ 1847.862500] ? lock_release+0x680/0x680 [ 1847.862930] ? skb_clone+0x14f/0x3d0 [ 1847.863347] should_failslab+0x5/0x20 [ 1847.863770] kmem_cache_alloc+0x5b/0x310 [ 1847.864218] skb_clone+0x14f/0x3d0 [ 1847.864618] dev_queue_xmit_nit+0x3a7/0xb00 [ 1847.865093] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1847.865607] dev_hard_start_xmit+0xab/0x6f0 [ 1847.866084] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1847.866655] __dev_queue_xmit+0x17ec/0x2710 [ 1847.867130] ? find_held_lock+0x2c/0x110 [ 1847.867584] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1847.868086] ? lock_downgrade+0x6d0/0x6d0 [ 1847.868538] ? lock_acquire+0x197/0x470 [ 1847.868976] ? ip6_finish_output2+0x203/0x1fe0 [ 1847.869469] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1847.870047] neigh_connected_output+0x382/0x4d0 [ 1847.870552] ip6_finish_output2+0xaaf/0x1fe0 [ 1847.871037] __ip6_finish_output.part.0+0x4f7/0xb50 [ 1847.871596] ip6_output+0x3aa/0x7e0 [ 1847.872001] ip6_local_out+0xb4/0x1a0 [ 1847.872413] ip6_send_skb+0xb7/0x350 [ 1847.872850] udp_v6_send_skb+0x7aa/0x15b0 [ 1847.873312] udpv6_sendmsg+0x2113/0x2af0 [ 1847.873780] ? ip_frag_init+0x350/0x350 [ 1847.874244] ? udp_v6_push_pending_frames+0x360/0x360 [ 1847.874819] ? __lockdep_reset_lock+0x180/0x180 [ 1847.875355] ? __lockdep_reset_lock+0x180/0x180 [ 1847.875875] ? lock_acquire+0x197/0x470 [ 1847.876307] ? find_held_lock+0x2c/0x110 [ 1847.876783] ? sock_has_perm+0x1ea/0x280 [ 1847.877250] ? __import_iovec+0x458/0x590 [ 1847.877721] ? udp_v6_push_pending_frames+0x360/0x360 [ 1847.878315] inet6_sendmsg+0x105/0x140 [ 1847.878751] ? inet6_compat_ioctl+0x320/0x320 [ 1847.879242] __sock_sendmsg+0xf2/0x190 [ 1847.879686] ____sys_sendmsg+0x334/0x870 [ 1847.880146] ? sock_write_iter+0x3d0/0x3d0 [ 1847.880605] ? do_recvmmsg+0x6d0/0x6d0 [ 1847.881048] ? handle_mm_fault+0x9e9/0x3500 [ 1847.881524] ? __lock_acquire+0x1657/0x5b00 [ 1847.882022] ? find_held_lock+0x2c/0x110 [ 1847.882479] ___sys_sendmsg+0xf3/0x170 [ 1847.882925] ? sendmsg_copy_msghdr+0x160/0x160 [ 1847.883436] ? vmacache_find+0x55/0x2a0 [ 1847.883879] ? do_user_addr_fault+0x5b0/0xc60 [ 1847.884379] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1847.884947] ? exc_page_fault+0xca/0x1a0 [ 1847.885382] ? trace_hardirqs_on+0x5b/0x180 [ 1847.885870] ? exc_page_fault+0xca/0x1a0 [ 1847.886318] ? asm_exc_page_fault+0x1e/0x30 [ 1847.886823] __sys_sendmmsg+0x195/0x470 [ 1847.887282] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1847.887774] ? lock_downgrade+0x6d0/0x6d0 [ 1847.888263] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1847.888815] ? wait_for_completion_io+0x270/0x270 [ 1847.889378] ? rcu_read_lock_any_held+0x75/0xa0 [ 1847.889913] ? vfs_write+0x354/0xa70 [ 1847.890322] ? fput_many+0x2f/0x1a0 [ 1847.890726] ? ksys_write+0x1a9/0x260 [ 1847.891135] ? __ia32_sys_read+0xb0/0xb0 [ 1847.891612] __x64_sys_sendmmsg+0x99/0x100 [ 1847.892098] do_syscall_64+0x33/0x40 [ 1847.892525] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1847.893087] RIP: 0033:0x7fd6f698fb19 [ 1847.893513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1847.895594] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1847.896466] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1847.897267] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1847.898085] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1847.898901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1847.899714] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:57:07 executing program 7: ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x8) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)="af", 0x1}], 0x1) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e26, @private=0xa0100fd}, 0x10) r2 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x1ec) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x10d140, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)="00003fda8a23ace5d73f517edb6f2263e250ad535d4f7f87e36256fe3a7a470585086623b6daba4235f78c1db805b239c75f69953d06e98b8f156c8268a1ce03060e184f84ce40ddd2896c11f150c85d43a83ab3f0ba27fe", 0x58}, {&(0x7f0000000340)="3b2d95bf6923932acddce28286696baef1139165b6c1327f20c35f7c45950add387521ca3081b09d6487d2a8f8fe88e43d9e1501e2f760b93b1beb982b16b1b9040891fdc8ff3d59f82aac76cc907ae31e72fed85468", 0x56}, {&(0x7f0000000500)="a9e139d3cb948f539bc7c9b6bc9e414a882e8ff9f2550d2d4cc1ca70d6f1851de97c9e52f2a7fbc2db07050b7a8c62242719180807a9b54e920a16bb7677d276327e10251d138ffb67639ff6768e4643f909b28faf072c43ddf7b6f3d1f4a438a407ab1e648de86d097476c4b6f02968ce007e32e8e2c2fc23df94ce6a1f628f477ea86ad53a9cc930f7da4cd8708a09aa535392128294c62bd973c0eaca400d0584c12cfe73075b185d1d868bb6c6d0ce839d94d4208b540fca25a25478b9dd6bf1ce159c5bb51a35733b84cb5c", 0xce}], 0x3, 0x0, 0x7fffffff) dup2(r3, r4) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) pwrite64(r5, &(0x7f0000000240)="6943e3f136eccd6dfc05a1ae806cc6b5866c224a109046b36ee91244839f3d20461f0fa22908f60100b13171d7b83f4f81291cb3758747880b6a9a114855ce1805a0992ec455258ce0ed591f2812c70497991361bd89c8f73a04728805f8e26292d182e195a281fa76916cbf301c16d5de2bf54a244b3468808ac3e21cea6e299864132d01a76e0c63e19319e34b1634eb8a1367cddf9a58999004accffdfad00272bb5e53bfc1463f246fb15556d146dad1f7176bb78e0f53b22c80d28eff4cf200009dd7a62407a0dcab606c31d2f9c40a437fc8b5700ab492c6c541", 0xdd, 0x7fffffff) fallocate(r2, 0x0, 0x0, 0x8000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 21:57:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1864.482647] FAULT_INJECTION: forcing a failure. [ 1864.482647] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.485567] CPU: 0 PID: 11679 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1864.487082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.488807] Call Trace: [ 1864.489365] dump_stack+0x107/0x167 [ 1864.490145] should_fail.cold+0x5/0xa [ 1864.490959] ? create_object.isra.0+0x3a/0xa20 [ 1864.491912] should_failslab+0x5/0x20 [ 1864.492698] kmem_cache_alloc+0x5b/0x310 [ 1864.493537] ? lock_acquire+0x197/0x470 [ 1864.494369] create_object.isra.0+0x3a/0xa20 [ 1864.495277] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1864.496320] kmem_cache_alloc+0x159/0x310 [ 1864.497179] skb_clone+0x14f/0x3d0 [ 1864.497946] dev_queue_xmit_nit+0x3a7/0xb00 [ 1864.498848] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1864.499813] dev_hard_start_xmit+0xab/0x6f0 [ 1864.500710] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1864.501829] __dev_queue_xmit+0x17ec/0x2710 [ 1864.502747] ? find_held_lock+0x2c/0x110 [ 1864.503596] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1864.504565] ? lock_downgrade+0x6d0/0x6d0 [ 1864.505436] ? lock_acquire+0x197/0x470 [ 1864.506262] ? ip6_finish_output2+0x203/0x1fe0 [ 1864.507244] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1864.508382] neigh_connected_output+0x382/0x4d0 [ 1864.509398] ip6_finish_output2+0xaaf/0x1fe0 [ 1864.510337] __ip6_finish_output.part.0+0x4f7/0xb50 [ 1864.511392] ip6_output+0x3aa/0x7e0 [ 1864.512161] ip6_local_out+0xb4/0x1a0 [ 1864.512975] ip6_send_skb+0xb7/0x350 [ 1864.513791] udp_v6_send_skb+0x7aa/0x15b0 [ 1864.514685] udpv6_sendmsg+0x2113/0x2af0 [ 1864.515537] ? ip_frag_init+0x350/0x350 [ 1864.516383] ? udp_v6_push_pending_frames+0x360/0x360 [ 1864.517470] ? __lockdep_reset_lock+0x180/0x180 [ 1864.518508] ? __lockdep_reset_lock+0x180/0x180 [ 1864.519491] ? lock_acquire+0x197/0x470 [ 1864.520305] ? find_held_lock+0x2c/0x110 [ 1864.521178] ? sock_has_perm+0x1ea/0x280 [ 1864.522082] ? __import_iovec+0x458/0x590 [ 1864.522955] ? udp_v6_push_pending_frames+0x360/0x360 [ 1864.524030] inet6_sendmsg+0x105/0x140 [ 1864.524846] ? inet6_compat_ioctl+0x320/0x320 [ 1864.525810] __sock_sendmsg+0xf2/0x190 [ 1864.526636] ____sys_sendmsg+0x334/0x870 [ 1864.527499] ? sock_write_iter+0x3d0/0x3d0 [ 1864.528385] ? do_recvmmsg+0x6d0/0x6d0 [ 1864.529193] ? handle_mm_fault+0x9e9/0x3500 [ 1864.530136] ? __lock_acquire+0x1657/0x5b00 [ 1864.531066] ? find_held_lock+0x2c/0x110 [ 1864.532086] ___sys_sendmsg+0xf3/0x170 [ 1864.532978] ? sendmsg_copy_msghdr+0x160/0x160 [ 1864.533945] ? vmacache_find+0x55/0x2a0 [ 1864.534799] ? do_user_addr_fault+0x5b0/0xc60 [ 1864.535756] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.536865] ? exc_page_fault+0xca/0x1a0 [ 1864.537725] ? trace_hardirqs_on+0x5b/0x180 [ 1864.538650] ? exc_page_fault+0xca/0x1a0 [ 1864.539527] ? asm_exc_page_fault+0x1e/0x30 [ 1864.540471] __sys_sendmmsg+0x195/0x470 [ 1864.541313] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1864.542256] ? lock_downgrade+0x6d0/0x6d0 [ 1864.543160] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1864.544187] ? wait_for_completion_io+0x270/0x270 [ 1864.545213] ? rcu_read_lock_any_held+0x75/0xa0 [ 1864.546226] ? vfs_write+0x354/0xa70 [ 1864.547028] ? fput_many+0x2f/0x1a0 [ 1864.547803] ? ksys_write+0x1a9/0x260 [ 1864.548608] ? __ia32_sys_read+0xb0/0xb0 [ 1864.549491] __x64_sys_sendmmsg+0x99/0x100 [ 1864.550415] do_syscall_64+0x33/0x40 [ 1864.551205] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1864.552287] RIP: 0033:0x7fd6f698fb19 [ 1864.553072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.556953] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1864.558588] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1864.560084] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1864.561568] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.563055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1864.564543] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:57:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 17) 21:57:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="93", 0x1}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:24 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004e8c0)={0x0, [], 0xd9, "90af9a99402657"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f000004f8c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="3f000000000000003f00000000000000050000000000000006000000000000000000000000000000ff07000000000000020000003f000000ff07000000000000"]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004af00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r0}], 0x0, "e6a2e51d013042"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/netlink\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x100000000}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000001940)=[{&(0x7f0000000240)}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f0000000600)=""/254, 0xfe}, {&(0x7f0000000700)=""/134, 0x86}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x7) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_io_uring_setup(0x7f02, &(0x7f0000000240)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)) r3 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d2, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000019c0)) 21:57:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:24 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 18) [ 1867.173313] FAULT_INJECTION: forcing a failure. [ 1867.173313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1867.175051] CPU: 0 PID: 11693 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1867.176044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1867.177205] Call Trace: [ 1867.177576] dump_stack+0x107/0x167 [ 1867.178086] should_fail.cold+0x5/0xa [ 1867.178612] _copy_from_user+0x2e/0x1b0 [ 1867.179160] __copy_msghdr_from_user+0x91/0x4b0 [ 1867.179796] ? __ia32_sys_shutdown+0x80/0x80 [ 1867.180401] ? udp_v6_push_pending_frames+0x360/0x360 [ 1867.181110] ? inet6_sendmsg+0xbd/0x140 [ 1867.181652] ? inet6_compat_ioctl+0x320/0x320 [ 1867.182280] ? __sock_sendmsg+0x55/0x190 [ 1867.182833] sendmsg_copy_msghdr+0xa1/0x160 [ 1867.183424] ? do_recvmmsg+0x6d0/0x6d0 [ 1867.183958] ? __lock_acquire+0x1657/0x5b00 [ 1867.184550] ___sys_sendmsg+0xc6/0x170 [ 1867.185080] ? sendmsg_copy_msghdr+0x160/0x160 [ 1867.185693] ? vmacache_find+0x55/0x2a0 [ 1867.186250] ? __lockdep_reset_lock+0x180/0x180 [ 1867.186885] ? lock_acquire+0x197/0x470 [ 1867.187423] ? find_held_lock+0x2c/0x110 [ 1867.187976] ? __might_fault+0xd3/0x180 [ 1867.188516] ? lock_downgrade+0x6d0/0x6d0 [ 1867.189076] ? asm_exc_page_fault+0x1e/0x30 [ 1867.189673] __sys_sendmmsg+0x195/0x470 [ 1867.190236] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1867.190818] ? lock_downgrade+0x6d0/0x6d0 [ 1867.191395] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1867.192053] ? wait_for_completion_io+0x270/0x270 [ 1867.192705] ? rcu_read_lock_any_held+0x75/0xa0 [ 1867.193336] ? vfs_write+0x354/0xa70 [ 1867.193860] ? fput_many+0x2f/0x1a0 [ 1867.194359] ? ksys_write+0x1a9/0x260 [ 1867.194885] ? __ia32_sys_read+0xb0/0xb0 [ 1867.195452] __x64_sys_sendmmsg+0x99/0x100 [ 1867.196037] do_syscall_64+0x33/0x40 [ 1867.196539] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1867.197230] RIP: 0033:0x7fd6f698fb19 [ 1867.197736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1867.200236] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1867.201281] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1867.202268] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1867.203224] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1867.204185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1867.205153] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:57:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 19) 21:57:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad", 0x12}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:26 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="93", 0x1}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1867.346206] FAULT_INJECTION: forcing a failure. [ 1867.346206] name failslab, interval 1, probability 0, space 0, times 0 [ 1867.348022] CPU: 1 PID: 11697 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1867.349080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1867.350384] Call Trace: [ 1867.350800] dump_stack+0x107/0x167 [ 1867.351360] should_fail.cold+0x5/0xa [ 1867.351952] should_failslab+0x5/0x20 [ 1867.352540] __kmalloc_node_track_caller+0x74/0x3b0 [ 1867.353303] ? alloc_skb_with_frags+0x92/0x570 [ 1867.354016] __alloc_skb+0xb1/0x5b0 [ 1867.354578] alloc_skb_with_frags+0x92/0x570 [ 1867.355250] ? find_held_lock+0x2c/0x110 [ 1867.355886] sock_alloc_send_pskb+0x7af/0x930 [ 1867.356591] ? sk_alloc+0x350/0x350 [ 1867.357161] ? perf_trace_lock+0xac/0x490 [ 1867.357817] ? SOFTIRQ_verbose+0x10/0x10 [ 1867.358451] ? lock_chain_count+0x20/0x20 [ 1867.359112] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1867.359905] ? ip6_mtu+0x1bb/0x3d0 [ 1867.360455] ? lock_downgrade+0x6d0/0x6d0 [ 1867.361096] ? ip_frag_init+0x350/0x350 [ 1867.361738] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1867.362463] ? ip6_mtu+0x1e9/0x3d0 [ 1867.363017] ? ip6_setup_cork+0xfb7/0x1740 [ 1867.363696] ip6_make_skb+0x2de/0x4e0 [ 1867.364300] ? ip_frag_init+0x350/0x350 [ 1867.364920] ? ip_frag_init+0x350/0x350 [ 1867.365558] ? ip6_push_pending_frames+0xf0/0xf0 [ 1867.366299] ? ip6_dst_hoplimit+0x199/0x440 [ 1867.366971] ? lock_downgrade+0x6d0/0x6d0 [ 1867.367628] udpv6_sendmsg+0x20d0/0x2af0 [ 1867.368267] ? ip_frag_init+0x350/0x350 [ 1867.368876] ? udp_v6_push_pending_frames+0x360/0x360 [ 1867.369669] ? __lockdep_reset_lock+0x180/0x180 [ 1867.370433] ? __lockdep_reset_lock+0x180/0x180 [ 1867.371176] ? lock_acquire+0x197/0x470 [ 1867.371809] ? find_held_lock+0x2c/0x110 [ 1867.372452] ? sock_has_perm+0x1ea/0x280 [ 1867.373123] ? __import_iovec+0x458/0x590 [ 1867.373828] ? udp_v6_push_pending_frames+0x360/0x360 [ 1867.374631] inet6_sendmsg+0x105/0x140 [ 1867.375222] ? inet6_compat_ioctl+0x320/0x320 [ 1867.375925] __sock_sendmsg+0xf2/0x190 [ 1867.376526] ____sys_sendmsg+0x334/0x870 [ 1867.377148] ? sock_write_iter+0x3d0/0x3d0 [ 1867.377814] ? do_recvmmsg+0x6d0/0x6d0 [ 1867.378409] ? __lock_acquire+0x1657/0x5b00 21:57:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1867.379086] ___sys_sendmsg+0xf3/0x170 [ 1867.379886] ? sendmsg_copy_msghdr+0x160/0x160 [ 1867.380604] ? vmacache_find+0x55/0x2a0 [ 1867.381239] ? __lockdep_reset_lock+0x180/0x180 [ 1867.381968] ? lock_acquire+0x197/0x470 [ 1867.382603] ? find_held_lock+0x2c/0x110 [ 1867.383221] ? __might_fault+0xd3/0x180 [ 1867.383832] ? lock_downgrade+0x6d0/0x6d0 [ 1867.384453] ? asm_exc_page_fault+0x1e/0x30 [ 1867.385121] __sys_sendmmsg+0x195/0x470 [ 1867.385737] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1867.386425] ? lock_downgrade+0x6d0/0x6d0 [ 1867.387091] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1867.387829] ? wait_for_completion_io+0x270/0x270 [ 1867.388586] ? rcu_read_lock_any_held+0x75/0xa0 [ 1867.389332] ? vfs_write+0x354/0xa70 [ 1867.389949] ? fput_many+0x2f/0x1a0 [ 1867.390515] ? ksys_write+0x1a9/0x260 [ 1867.391109] ? __ia32_sys_read+0xb0/0xb0 [ 1867.391745] __x64_sys_sendmmsg+0x99/0x100 [ 1867.392404] do_syscall_64+0x33/0x40 [ 1867.393036] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1867.393829] RIP: 0033:0x7fd6f698fb19 [ 1867.394392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1867.397345] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1867.398610] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1867.399774] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1867.400946] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1867.402104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1867.403186] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:57:27 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) stat(&(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x1, 0x3, &(0x7f0000000580)=[{&(0x7f0000000340)="805a68bdf0b5b2d151919875084b05d8316e1b922fd40fc34111f633c3daabd757372ca39b1e872a303779346cf8de0c13cc29088f2391ca292b88992cc5401206cbf2f2c049c1a2d1fb96741228ec03223f7379270541e30eb28f8b86d84104a40a55ac", 0x64, 0x2}, {&(0x7f00000003c0)="dd8d9163474b68538524a54bf94aef16c9757bc5a13e1c86e50f9a268962e0625bce30613096e03f44b57a962dd23d13ad97fe4988f9f219696b149822ec622dd9f0c955b9a7b991ce2f55753afc92f3e077bcafec114d08cc5a74035e6714927f3dc7886c78e485a5a2ab4863be80f7fd33ba2d634d3a4320dcebc414b274e82286325fae58221caea1971771c25076278230c75b", 0x95, 0x100000001}, {&(0x7f0000000480)="c30aa7bbd49fe3e6e9fb36c0f6c4cb21d55fd953dad572e922bee3f0727c4a7631cb1d32253fb59bb3ed773625563c22a7238d2bdd0fe847833f3163a781ae50b4e24e69fa48dea6dbec7d46cf14e74525744f527d1aba18bf9b28945c797c67d90f632663fb0eb3ece1208e7bc2beada4666f583fd7c9a86e043513eff67194822f506d7a8072b3dd7f73d804146dd85792e183ccd1230b281215ad81458c7bfbd6ae4689761913002dfcb65c92b7b1e259c3edc863e5bd1be9a5d89d87e4f688fef3fde854b792b49a7401c541f966e31e12a032bc14", 0xd7, 0x1f}], 0x104844e, &(0x7f00000006c0)={[{'/dev/rtc0\x00'}, {'filter\x00'}], [{@hash}, {@fowner_eq={'fowner', 0x3d, r1}}, {@measure}, {@subj_role={'subj_role', 0x3d, '-0\\)}%&-/\xe3#,['}}, {@euid_eq={'euid', 0x3d, r2}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, '}+}*.'}}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0xff, 0x9, 0x6, 0x0, 0x0, 0x10020, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x71}, 0x0, 0x8000, 0x3, 0x1, 0x0, 0x0, 0x2, 0x0, 0xa2b80000, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r0, 0x9) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r3) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x75) lseek(r3, 0x800, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x0, [0x53, 0x10, 0x80000001]}, &(0x7f00000000c0)=0x44) readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f00000012c0)=""/239, 0xef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) 21:57:27 executing program 7: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x2010, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x2007, @fd_index=0x2, 0xff, 0xdf, 0x401, 0x2}, 0x200) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4}, 0x101) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}}, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:57:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 20) [ 1868.018355] FAULT_INJECTION: forcing a failure. [ 1868.018355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1868.020843] CPU: 0 PID: 11719 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1868.022267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1868.023992] Call Trace: [ 1868.024547] dump_stack+0x107/0x167 [ 1868.025318] should_fail.cold+0x5/0xa [ 1868.026142] _copy_from_user+0x2e/0x1b0 [ 1868.026988] __copy_msghdr_from_user+0x91/0x4b0 [ 1868.027955] ? __ia32_sys_shutdown+0x80/0x80 [ 1868.028868] ? udp_v6_push_pending_frames+0x360/0x360 [ 1868.029946] ? inet6_sendmsg+0xbd/0x140 [ 1868.030766] ? inet6_compat_ioctl+0x320/0x320 [ 1868.031688] ? __sock_sendmsg+0x55/0x190 [ 1868.032538] sendmsg_copy_msghdr+0xa1/0x160 [ 1868.033427] ? do_recvmmsg+0x6d0/0x6d0 [ 1868.034245] ? __lock_acquire+0x1657/0x5b00 [ 1868.035148] ___sys_sendmsg+0xc6/0x170 [ 1868.035952] ? sendmsg_copy_msghdr+0x160/0x160 [ 1868.036890] ? vmacache_find+0x55/0x2a0 [ 1868.037711] ? __lockdep_reset_lock+0x180/0x180 [ 1868.038692] ? lock_acquire+0x197/0x470 [ 1868.039510] ? find_held_lock+0x2c/0x110 [ 1868.040354] ? __might_fault+0xd3/0x180 [ 1868.041173] ? lock_downgrade+0x6d0/0x6d0 [ 1868.042033] ? asm_exc_page_fault+0x1e/0x30 [ 1868.042942] __sys_sendmmsg+0x195/0x470 [ 1868.043768] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1868.044657] ? lock_downgrade+0x6d0/0x6d0 [ 1868.045534] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1868.046550] ? wait_for_completion_io+0x270/0x270 [ 1868.047547] ? rcu_read_lock_any_held+0x75/0xa0 [ 1868.048504] ? vfs_write+0x354/0xa70 [ 1868.049276] ? fput_many+0x2f/0x1a0 [ 1868.050034] ? ksys_write+0x1a9/0x260 [ 1868.050817] ? __ia32_sys_read+0xb0/0xb0 [ 1868.051664] __x64_sys_sendmmsg+0x99/0x100 [ 1868.052540] do_syscall_64+0x33/0x40 [ 1868.053309] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1868.054371] RIP: 0033:0x7fd6f698fb19 [ 1868.055138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1868.058922] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1868.060485] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 21:57:27 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000380)={0x1f, 0x1, 0x2}, 0x6) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000480)="af", 0x1, 0x1000000) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0x78) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, 0x3f7, 0x800, 0x70bd25, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040060}, 0x4000020) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_bp={&(0x7f0000000340), 0x4}, 0x0, 0x0, 0x0, 0x1, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 1868.061955] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1868.063550] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1868.064990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1868.066454] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:57:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:57:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad", 0x12}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:27 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 21) 21:57:27 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="93", 0x1}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:27 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1868.530397] FAULT_INJECTION: forcing a failure. [ 1868.530397] name failslab, interval 1, probability 0, space 0, times 0 [ 1868.532199] CPU: 1 PID: 11735 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1868.533284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1868.534585] Call Trace: [ 1868.535006] dump_stack+0x107/0x167 [ 1868.535575] should_fail.cold+0x5/0xa [ 1868.536182] ? __alloc_skb+0x6d/0x5b0 [ 1868.536778] should_failslab+0x5/0x20 [ 1868.537373] kmem_cache_alloc_node+0x55/0x330 [ 1868.538081] __alloc_skb+0x6d/0x5b0 [ 1868.538640] alloc_skb_with_frags+0x92/0x570 [ 1868.539321] ? find_held_lock+0x2c/0x110 [ 1868.539957] sock_alloc_send_pskb+0x7af/0x930 [ 1868.540652] ? sk_alloc+0x350/0x350 [ 1868.541214] ? perf_trace_lock+0xac/0x490 [ 1868.541843] ? SOFTIRQ_verbose+0x10/0x10 [ 1868.542463] ? lock_chain_count+0x20/0x20 [ 1868.543097] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1868.543869] ? ip6_mtu+0x1bb/0x3d0 [ 1868.544407] ? lock_downgrade+0x6d0/0x6d0 [ 1868.545038] ? ip_frag_init+0x350/0x350 [ 1868.545661] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1868.546382] ? ip6_mtu+0x1e9/0x3d0 [ 1868.546933] ? ip6_setup_cork+0xfb7/0x1740 [ 1868.547590] ip6_make_skb+0x2de/0x4e0 [ 1868.548166] ? ip_frag_init+0x350/0x350 [ 1868.548775] ? ip_frag_init+0x350/0x350 [ 1868.549383] ? ip6_push_pending_frames+0xf0/0xf0 [ 1868.550123] ? ip6_dst_hoplimit+0x199/0x440 [ 1868.550779] ? lock_downgrade+0x6d0/0x6d0 [ 1868.551426] udpv6_sendmsg+0x20d0/0x2af0 [ 1868.552058] ? ip_frag_init+0x350/0x350 [ 1868.552683] ? udp_v6_push_pending_frames+0x360/0x360 [ 1868.553474] ? __lockdep_reset_lock+0x180/0x180 [ 1868.554209] ? __lockdep_reset_lock+0x180/0x180 [ 1868.554930] ? lock_acquire+0x197/0x470 [ 1868.555541] ? find_held_lock+0x2c/0x110 [ 1868.556190] ? sock_has_perm+0x1ea/0x280 [ 1868.556829] ? __import_iovec+0x458/0x590 [ 1868.557463] ? udp_v6_push_pending_frames+0x360/0x360 [ 1868.558251] inet6_sendmsg+0x105/0x140 [ 1868.558847] ? inet6_compat_ioctl+0x320/0x320 [ 1868.559521] __sock_sendmsg+0xf2/0x190 [ 1868.560106] ____sys_sendmsg+0x334/0x870 [ 1868.560715] ? sock_write_iter+0x3d0/0x3d0 [ 1868.561349] ? do_recvmmsg+0x6d0/0x6d0 [ 1868.561959] ? __lock_acquire+0x1657/0x5b00 [ 1868.562621] ___sys_sendmsg+0xf3/0x170 [ 1868.563213] ? sendmsg_copy_msghdr+0x160/0x160 [ 1868.563903] ? vmacache_find+0x55/0x2a0 [ 1868.564523] ? __lockdep_reset_lock+0x180/0x180 [ 1868.565234] ? lock_acquire+0x197/0x470 [ 1868.565846] ? find_held_lock+0x2c/0x110 [ 1868.566480] ? __might_fault+0xd3/0x180 [ 1868.567086] ? lock_downgrade+0x6d0/0x6d0 [ 1868.567715] ? asm_exc_page_fault+0x1e/0x30 [ 1868.568382] __sys_sendmmsg+0x195/0x470 [ 1868.568988] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1868.569657] ? lock_downgrade+0x6d0/0x6d0 [ 1868.570312] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1868.571046] ? wait_for_completion_io+0x270/0x270 [ 1868.571787] ? rcu_read_lock_any_held+0x75/0xa0 [ 1868.572503] ? vfs_write+0x354/0xa70 [ 1868.573080] ? fput_many+0x2f/0x1a0 [ 1868.573640] ? ksys_write+0x1a9/0x260 [ 1868.574230] ? __ia32_sys_read+0xb0/0xb0 [ 1868.574860] __x64_sys_sendmmsg+0x99/0x100 [ 1868.575510] do_syscall_64+0x33/0x40 [ 1868.576079] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1868.576850] RIP: 0033:0x7fd6f698fb19 [ 1868.577416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1868.580210] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1868.581377] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1868.582478] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1868.583568] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1868.584648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1868.585727] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:57:42 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:42 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/65, 0x41) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x30}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x26}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000004) timer_gettime(0x0, &(0x7f0000000080)) r1 = fcntl$dupfd(r0, 0x0, r0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80), 0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) getgroups(0x5, &(0x7f0000000040)=[0x0, 0x0, 0xee00, 0x0, 0x0]) setgid(0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000003940)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f00000039c0)=0x80) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0xaaa) timer_gettime(0x0, &(0x7f0000000380)) sendmsg$netlink(r1, &(0x7f0000003a80)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003900)=[{&(0x7f00000004c0)={0x11c4, 0x2b, 0x4, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x8, 0x6e, 0x0, 0x0, @pid}, @nested={0x1104, 0x4d, 0x0, 0x1, [@typed={0x1004, 0x6f, 0x0, 0x0, @binary="b51ba0132a5dff3336809a5d7f8f2f55ae1de45c357921432fa80a8fb0dd0aaf11cf8245d44191f514fed3a3ba2cea8f66e368f412ea35e628b8c39ca414504408bc405e289218de0a825717dba991daef666ada9974afd3fb53f904cf71d1f8093f1e75950532d7becca00b816f52dddc332f09718f3cd4666579b57ff0d436694c5dfd05b8e881642f8b08f17a94d0bef7b59e0dd445ba756b39a7c45f09f4402b7ce402125f3158995dc9be4d158e864b805fd78def0b9749dba2095f400d44cafbd97831877b85bc88e3995aec2b4be4be701e82f1f457dfb81db2b64abaee4dd77ad4f897044793c6502fc34b52042e709a09cb03938395510d1276b88947f65a01214542132cc6fd2cbdc7618b9f2f3668e483a645c69254ecd27106762126fda3b4ee4eca42df6a1b62b114c492011185c8c8a4c02808fa7a477d1f462d023fa957e4dc8a2c5b0eccc99be3a2723f40648aa12d814c5a953d43cf82ed1192dcce5a4b6912e02f49284a849bb6263a310e31d66bf972a2a4e3fe2eca7e28c2a195a5418af72488f08094e7dffb37e61afb55416028c82569b89df08ac5465d03670b4f7d91fa54b71f40a6ca58c44a736e47af070ffea6fd08785286a444a8c7bd463542b568e557b51cd71062a1d0d6f998e39f423e96fb52797ff9c51029b73fad38dcc828176829b05d3c19146c804d61b0f633748233089713900be2e0b8b11a93bdd1255bf40c3dbad840673f24f1ada181cf3b92688ac00802d7ce7cd76b9dd31d6f869d5d93b241d4efe59acae381d65d02322b4c9e7c9cc05b91542708b51a1abf08688fb8aa8ccad8b92114d7f954c5822bdca9a2b2067898bd12526ac28ad56301e7b715cd7324300af6ee12487c8e98baeabef9055533ad85a980064fc3cc7ff846465e10e9bd316190b7b480da28b2b0e7249595e42ce7b77845438e6e1f6baa1f3c44622eca792cb1379ddcba2279e5f4598691119fd498e2c009737a87c5dc9eb27f77ca3062d774b2394c8209a91be29ad7a5f10d79afffcedcb180650372c99eedcc0e50b7bcc5c8c413f3f2513461be2c89ba517d449150835fc1e24eccd14cf155ada11756633f8f3e0a9f541a01fdfe6c7ec81c0b62189c22351d078cc47601e5ac334ebb8cecf5ee8ec7754f3fbb1049fdfcc23dbd149fdc18daa496f97b7c61c7efc48901ee30d4b9ad9d555a76a22e621611cf1323351c3b68f2482808666a149217c8f47b37ed68cf9bf656d38a86d4e94657089aa2019746d177240520ab1a19c6af972e48cff383f588f2c18ddc2f2feb34a13a0e995d65540ebfb4ee3078879e27f8dcd0e4bbf06bc53f5d8014e41bdc0b098092e845cc02a82e1da30b2cc7c50ec9f1f2dfde73fa688082b1ad42485925780a577ad67a2e310b632ebf85ec455fcafa231d12a82d28db823bdd57d49715bf2dd3139185eda5ec81ffd3531316c7b8ff983367d0e0f5cadac444dc51e5bf1d2085c581bf083972b619d57ce069ede25cb080c1775b9d8816f081de71437872cc9a2eca57f08cb7696b6d8616102ebd0a754fd24c4f27c901138ff2d3d1a441b308c3918ad3f84967b35d06a37d50f305d1d79e0ba485b1b3c96f6ceb60939f60180a0bd8563953e986cb5bc3cfe021eb1b785e9979fcc4c382bd6b75ab1ad6a0e462e9b38c5d18ab6b1aa608e80d487833635fe09030b76267f5a81144b17a639e5aba1ef1537c542af3391525d2fa1bc90e77dd87ec662823f83fda4d6f8ecf40b5ab5e6b40afdf939a6a74aae9dc2d8b31a2892b1656a0f813eb6da4bda50d89923c7d534c6420e469a8d100484d5c098e360a6be2ff7312107228abf888c17212ba2dad7fa749528f743e295a71576d08ce2bdbead34a5c0be3f58f69bbbe0d31e6c5e9243b75e3ffd1962e094136e08e201b8c514be4f225be035aa17f416a363220182173bb57c130092935e4d1f11263e6a5d4f647d3312623aee069902806f4a59768fcb29876a2baa6ed80944ea7d2802895f4643383c71d008cf4c1c8345303307278402549ac2fffac0806759e108608e6d3bad9ce31b8d8fc307d956fcc5128b9391ecc7b87c0d9392cb15107295615482707dbfedd7f6c2d6c9d1c60554854acf286d33e120589e49ed79e3439a0e65e023dbcc2ca56a84c24eac6e997f697eaca44d1719a8a949c9a75f24482a84393a9e534c98484dc09c9df454f5a38b399ffa27e3fd8383674e97aa15186b4962e0159f694d8cd64a265c8d14483fd5ce74d0209e1f728555964dfdc20da13edc5a776533ad368abed37154a71130ec178d34ab84638d4cb13a11874d1071216e3fc38ff341316c847556a9673d26b1f188b101d50129010913c1910ea7d4f42207eed3477e7e63318b91ac319fec20de0fe60d1b999d84cbe966a119a80a32af9748ccf171d7ed4405f10ca0629e47f514e8718df72ae08cb010154337a70d6d96c028d3866e853789945bb5ce0808f6932add236c2ac5f8e1988167bfacf45186f74443fb4bd1f5f85823a88e7c5feff096d5762cbb263f0c5584e25c927274f4c31397a83df3b0e0038cfac6374fbbfe7d4d86ddeaa57d72593edbd2ce12519c2239bbd1925a7c5442a2f4daff2f4450d94f3610883b740cff0fa73cdae13b2874616f54e9be6fa67ed71199e2d6052e58be0fc0bd4b1f84a41a3807c7ef0c0ebe65b2b6ee3cd53d4132a2efeb491bd2c4ec774723c70399ec272659ead55f362e71b0045a2f9cb504a4bf6af67747d9561ec050d16f0744f99a8e3358a1458c5f1868fbdf479cc0000a143bb99c59eb4cc4dff2146b3b91251232dedceb8769922b83e02218f725b290749d912d8d38c057830f30dd5d30de8ec8ddd081584cd65319954c339544fe2bd697e2a42be5994bef06fb36a2766fa204a0fefacd2b9e23c881ba4af936e5ac71a76f2e1616e18adc13a5c1968bf5140f90278bc23c6c3d2b5ed4bd8c37442f44305818d18a09561aec2a20a459ce35e68ed9650f782ca57beb7b1cfdc2b95d9916a6598def759b7b180e33880705931f3c2e1c10a371a546480e8de7bd89090fdb92f18ef636a253364a558b7cd7665b1e294e3931623e2a041d6dfd5027006f562fb94a2f66cc913299bfc5dab2c6b250a9c2c1bf4e99cbf6eb90427899a0bbcf1f603e8a37d37bf6489071be574d2a955d17cc1d7b3006115e98e0823a8c5f5990de64486b772cbce13b2cc8b6c1385981b3257c0c07c601726258feed001eb50eae814e49e1fcb71a182cfbf607c3d0da924b74a28acdb6e43f4ca3830014a2f8e41fa59d2c2ae37246fb095c38e418a4dcb4d63fb5113a98ed5b3ad7bad207a92e1eed099f995624cd9f24c8abeee124b9afd8de4d4156ce2028fc8d76b462eec955a65da2d23701ba2943479bba3b992b5e50f31d33b91bcf138b940069467bea1a8de1088330fd8bf030ec54dbcdfdf49da13ff273e590c6a9de2fdc315a3d7d9f0280a85eb23f917afc6fce4d4a475ad1ce80d6218af0f96634a1c4609536bef12a7d4e6a8941fb24e682c1b873ae2b7efcefea9a5a332dcdc2e10a2d05ee78fa90f9f28739e86232dcb960d63a3ee01492ba2b7b76dc7df0216d763c2ed0c99c8b9acc68a77079b752997b436766542ad066b2dddc0eb6e82d060a338d7d348d8839827cd2221fc061b5b5eee18e705db1c1210c5d0c696cbda9d0c675363215853dc2c45217f62e29b9a098b298f16ae5302334e589ba128d409f43c195409f3914cd443c8d609688ae9227b35dabf4f3da16348c71fae10effb9432959af323febdf20e97aa24b089f93a090c24e1686cb1c5757ee89b34460209523e6df8e96f74aeeae1635207814166b1abf4ce5cba7fc83d9df2d54245a08d4f3a3d53a575a0bee2fbe78f06bd7b1008ea1475272dfb396690729a8adef82ad4b752d21b59f3320d4bfbe9aa5294c18465417ba6ccf23f6a4a7d5c269dd28c705e3791f7b6f5b5e05369248a2f81fc6d5f1a288eb1566c34447b2f240f3553a62d794de62b3d2a9266c70653f6a209f90954941f8c84f93db7b02a20aee051f7fcff2b8c928edddfd982932237ed22a58285bbe119d03d436b470f50b39d85597511a4fb4c73cda5efda6b6189514602e63d0b531c3e284387bda042988b33510a76d5192100509a6c37d043d47d3d1e8061e7571f50d09c9c6c5dd22c371ab49bed12b101664628c257dae7be04f11b9ed96a85ce448a1acde3f31adeed87949d414e3336e7a339583f870abc004346e1ef2263d649dc4f9eec204847c30f78c68cbd5437b52f493f5075a8502bb50ab4002de51b81328b1ab599cca815a9645c3f31a3b152de6263612c222281a730e50c547a04180d65f0e9cd6fa7758b50d84f2dcf6297fe0053f6c997512bbd8d88e5681be4d4e3cdc442a43563987368e199fda4beb4f897c3dbdef6b6bc44f4e6fd49572e4a464ba6b884a9f99ab010b21c4d758edf5bb44b07bc39e768d3fbbeb8bfaa667a508d905d5d3bc12c891ed52e168feb440b4a6584c3bc9df67a4c390f51f12b32c520610202aae0e1e49082a1b93a334b95f11cfe4ff96c35c34344b19b66b334b49fc36480aff0b3410b70a7ccfcd2a38853f0d64b7d040168bc6f5d908cd599306b59064f76065032d9e0d4132120c95773fac39daa4281cd1c9ca7f42905fd2bad31da84bcab597ef477acea9c5ac96c13ee6cbd1a0d0ec654592a9bec23798f7b5539a471c2b0d0e16d39b1ca1bc3fb094d7ff08beab77d76644e765acb9cfe8f72ee81a8907bff74e05a00c20e17e22ec9aeedf7c9241dd9a95c3fca96fd1e421520017bc8422ca22c77f5ff4ce42b9ab5cb42b32bf507102adaaaffcbfa139f2f7a2bcc6e3a0e01750b9eeae8900cb65597b053decb2693726a4da214e581c3fb90a4729cefee764b649be48009119ea3f4243998038667163e82d30b718f01392b4e0397f28f3855e9ade8da81daa37a2ec5090037b527497cfae83afae60f109119e408375272334476b28c26339ca2294a24f3436fb23ac82b3271f165f3e05896cae25c356809af59f68f4c25ed050bc243c19c751ccde232b8e1e4e339f7e1879c0794a36496a85ed2d4c6b3e7badc43607206f6b2d1909d8813f7129af66dc8374ffa2f440221a2ae0ffae53de0e897d1d44685b4740d3f1c4440a2fce4627a950d73897919dbfff01c755f81a4424224fd707312af80f2fa175a4a1b83823aea29b745e05f57aa0d97cafb6795f9127cf72bc896e6de2783bfcc5ed1f9facd14ec5233072c700e0b560d7d459ed9865b2ee1e4d47494bcca2ec755b757289e1dd34813398464b310b26626db08f564366b6bed4ef1149313622a0e6b01d76a87368a568b555f0ce62c46454c94d44db6db83838b818536a2e45247959fa4d42b05d8d4f153f4035f7e06e381f2305103ffa59f7a1aa5160d2a43ebe95185bbb3f702a8e5c49ade045c6937d410425f8b9d6f5112c12634346b04310cee0a5249b0a4dfd786e4b2bd516b6b0d5d93180ab91c16ccebf64ba7ab3ba8161865a5422a533afd615faa9ae5b0549169a27c87a4d4c8e2a4b5c8236aacf0b5bb49b405d4ce52e14b614b0dbd1263979a740d25a1a62daa2ed6b176aa96596e5516a1a3f8f7a0a9f1e7a0359aa2fb2780e7f19738092cdc636c3aa509755092659f554f9d5a84104b699409af59610a839adcca13db593e132e637f0bc605555633c2d371796c635990ff7ca46fe16402b22a49525c1dc9f5a30220ccae0940dc3846"}, @generic="1d6ab6abf5f1ea8ac3dd6c2f8c3feb30d6c70ed10e071cad4033e8f58edef463c78ef08e04e76517178ebbebac2af162bf8319ff43794865292767c2efe1855637d9c15a9fa1d436392e468d1f571a9fb21623afb75f4b65f45dfb66ee84207b44eddbf3d128ad22dba866dfa07008df94188c7ec8ea4b72f03e841c47385e8b02879cea1d93ab91ffa9260cca802371e8e95f05d0ac590562ab5c1fd1eb30ccd085c1718fd33957ede876e97dac15b63103e4763d9fdf8afb7dfe0ac28346b8635d571a69f6f4d5a8c352bf106c33913e63ab63f974e58dbe84058159bcb996be3cfb49072d9b4f68b0bafe39105341", @typed={0xc, 0x22, 0x0, 0x0, @u64=0xfff}]}, @generic="1a629375cb8a9d6e64ace8987e01ad481228e1b1b543c5c34fe3e77a74f7e9101212779e53e3ddd009f7dbf01b9d6fe83c829ec545423780516ea5b05f448f0d1cb3e002eb467b630b8cd9bd13a13440780a65341e6111ab0ea312952a9239517bb6f75da106689ec69252171edfba7a32de8fa069878534a2be9974f5b69dfa8ed27bdcf36d59fa85bf36f2a11c2a82b5e3495acbeba2060824a63bca70dd0aed1e6d6478359d"]}, 0x11c4}, {&(0x7f0000000280)={0x14, 0x40, 0x300, 0x70bd25, 0x25dfdbff, "", [@nested={0x4, 0x8f}]}, 0x14}, {&(0x7f00000016c0)={0x408, 0x1d, 0x20, 0x70bd28, 0x25dfdbfd, "", [@generic="9ee2013ae1b6af62442ac2c24f67fe20c963c8b774a9b8cd7edc594770b131d04f9be9d7f8b697f1df0b31e2eef2f48d0e81d9f2b362f2407a4d3f44d4e5e817c046376009737f60fc01729b67cbf122630b2d23538f715e69856b46629d86cbe5156b80754385b3048bbf04567694c05d4c4182d6b1e3a332afe692ae9fedec7ffacc655482e01c0644d292c1997b4c9479e7f325d798b76efe0224b5393eccd5f2b0325e80919243f060bbe429d67923", @nested={0x123, 0x58, 0x0, 0x1, [@generic="4b19d353fd56191b14f26c0126c6c9c847630fb3392d5aa18ced49b17f1741f8c08a9f680b30302a831d71e597b6afb1e7afb963a13463a17e3c50f16b21967104f702f797decfbc1509a57665dccc719a66f5255db499333ec62dec0124b4bd3f4e72c1a30f1b2b14ccc321c472b1020bc371423d832d273ba4199166c499ef66f4734e49c717972faeacfa6e159ca7f48fe421281388b874c8bd82a1d86043617e687786ae4530d3abbcbb5310a0ced9d8691169537a18680dc187614d9ee7e5072cd885219c25695026db8c42c1f9094df3d1c94f04c341459e7e8cef81543087dfbd8414ca5699d637dc477c1ab504b825844738fe3d0c1c9432c683", @generic="1848388bce14e5cbb472e82b7a37f9f6a9bad9bc9b1cac6d2c114bbba0f9a757e8"]}, @typed={0xaa, 0x84, 0x0, 0x0, @binary="13749d7e0dc205b5ef6076be8d0f196c93fa417ba505a83c8747b906c1cf750eb4de697038956e05e6344507bf1d517bc9a1ad301aa06b28fafe275bf8ba0aa6bb4061204566ca0a9cb2dcd0cf4077b03ab0a3e48234f5180a735c62e122751d33d28ca0225134585fcc163f4e6ff2c88cb39d4083042a4d696e232a01ad639aafaa5f9e31db4e65bad98b793a97ad5810800ba8b9ad522b72ce00ffa09392308ddada953a5a"}, @generic="a128cb8696def165b31800b00d37c0a59b7fff8ae82021a943c8b1381de50b34a062b3c27d538b830a9ab3b9738091cf99be8688bee2b5d9a685cd51ea97af57a497120ce699e4953ad48801702e4e49178f8d32bb41d23561102062f5f0d3b851fe519d5b4db269530073371470f108027d70d550bdd1bb9eab47615bcf9dac307d11745acdb2bc6d8eaf8919d9a147", @generic="19c32db1616a47fa0cb5e748d9da10fc036746e0c92c7696f48db923c16786ef2898ea6a0686b798969646c44dcd02b8e7222bd483380121f06d69728da42b3c6362f3a9c29e379d5d8b309c102c266121dafe1d204140f77a79869dad3ead48af63d3f14de53cda7a6616e89165652c8296814e28de0272f743fe3456ffb6c4737b25c3138dc6a0b925d6f4434673e042eb6688992ff10ee20bc9a2c687b102819c55bc9ced5e14cb2281411931e65d6d6dc60e8e5fc721f2ba3abe8ae3e7590c16338cb55f8ad94b42b5cdccd50710e26342218fb976db76fbcb28b000ce1807a1147237b18c"]}, 0x408}, {&(0x7f00000032c0)={0x630, 0x22, 0x200, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x313, 0x1, 0x0, 0x1, [@generic="7f8f70abfa489ad8161247b6ca482853b6107704c4ed8c312c86550478b0d181f28323d9650f0b2ef41fde504d851c43116cc68b9c0d19a6060825b27131aaf6a706041024c3630960985cb28b95cb36cc1c623b1f62860c4b932d55576dedb55e825f07b87482da54e5edc279c9b4db8260542322707a135ad2c35a3d83c6f17e512718664618b7140a274901f6f0aa0d8fed4b04ba747e56c8bc9743dd5d340a1202a7fd75493f89869a2280e2acc416ea48485b49e8bedc717b16cb5fb2af6ef0ea079840cd603be682035a68", @generic="f90284eb64586baff85c0600c812b390955a2d977dd164457131d5009de3550ea4bdac42ab8f14beaac4dd67e61debb79ba44f99c260010a1b89458e027c91013ad143e05c59bb3b0c031a6f1c4679f1125d2a6e18ed006940f6470c7a2e41564340f59504bb539050ef7bfc7d032eb86b3a7848099bc82f20e1c6fa9eb792106a33b5728e0a5e161580a48b65a5c7393463", @generic="d81d01d94c5117bef3dddef66dc90e3e2b1a71eb2cb21047cc6cc2a48b29a75a719b04c83c35e7e2ae0254e145d0db057eb515a03ac4592d1c52cbe88e0b6c46fb6cf8d04f5a45818aa5e4", @generic="f5e3b224baef9d83b4e647d846ad6c96713a4c5ab5206faf6ccb167723ea16ae1b26066e1960bd7747a1db2c187d5f8b1e1b56664ebbc2fecd887a14352ceb17c984dce53068f272ee318440c37c6bcc3aa173b00679e583674bce77f7cecf3005f94d394d4dd15712640a8c73647cf2d29ad2353236d72bca6feb5e819326d0611fa5ecb0ad70fb6cdb00131d4dac46ffdc727b80be603100d428b839236fc204c21345232766ccb3fd6c362181162efe0c6720715ecb4aecb3b95cd7b1392730927d04a356ddc401e840e66102d0d3d91a6c20394f3b79382d8addd989302736c00078a32a7aad6692d9560959f269933f0e", @generic="52c5592464e96e2d23ad6df35246002626a6c83337e92843759e6877bd0709a8b1164d69c2ca389bd18e06eb4ea62c787aad3233bc95c84a027cf433de1b7841a9be6d374ce9bc06c963469399ad2f0b5205db2abd842737d4e98d13c4656ccb8a73559af69b2b0bc4c715225f4f21818f"]}, @nested={0x4, 0x61}, @nested={0x174, 0x29, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @u32}, @generic="e18371994f300fb8dbfaeef18ef03125459bc7181ebfe054de73098565c31e61ad6cf5cf2f8f6d70f2c4f78b58c7a22d74783a67322daa6e35dca7401e92e7449a9ee93f302a9729a2f866d7946dfd7029ca38f73b5c424914017931d188", @generic="f1754b1e24e9c13d0f64f89d9d25f3ce15de2bffec9e1dd27029f9451053204c773d65bb1116e0950d83dc94912ff2365ac25d19d5846fc4c478e97887536f68ae628fe13511760e1bde8173e8f3bbb20503ec898918d14a1135aa41ff927d7f65978765d0a1f20d2bc9cc3f377e540a4e3f5a9d733c4897a13601617d14709131fc7bf892", @generic="8ff08f774173e8dd4798ce9a8a531ae5020783ae92543df08c0b606ef158a8e0f38a422a19b453505472a31d8ff38b23a7348f653ff7aa0ac80312e795b6ae240f7902d39e116b32047e59d9bb03d1ece596915d8df9d9059f43a95291af3e94063ec7e50a4294b5950ac53f4347e4d5e8f7424a10eebbd15acb0c20f3", @typed={0x8, 0x88, 0x0, 0x0, @uid}]}, @generic="1d905137650e775f275073f846f5f87e28fc88ffb8a3262dcbbf4ff9e568ac93408a46412706209ba81c68abd71926a8215008a98deb3e6330388d5b692afa84236d93b9b4929cb5d01a834759e348489a1d5bc2608ff667351df318907cc9819d078f867fdec4aa0d99b8bbff50eabd57eeb561793abbaa1e0d24fc98848d804c5c5cbfe1bd5ec3dd94764179ba543dc298dfbb8717dd9320cdce858bfe5254714bd0682417272e59f54ffb22dec3", @nested={0x84, 0x0, 0x0, 0x1, [@typed={0x7d, 0x0, 0x0, 0x0, @binary="59c4f321d30224c5392ecef6663802ec82fcf98034c08fcafa2cfe3abe4d5d8f4e48e750a94f3ccb141117407c0b4625f44966a7cd4b2b41c30f191dcdc21b89b06f5f60331952f87c7ace704cbab644057beda25f14ef90cab61ef1c43850a84c30e18ce9dcd5308ef3ec8827d2b9397781c97eb57ea1d76f"}]}, @generic="4dce456549046985097bf70c614e6bba95883e593254916a18f38999afd941c5277dcd06bfe626bb4695c1d586e490cd1e1e4780d60153a086ec1f", @generic="f2aa3737a3b02c4c7a28751cf78ed0449d29552c5d68e790267cc1d8eb54ec1dac13223e02"]}, 0x630}], 0x4, &(0x7f0000003a00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r2}}}, @rights={{0x18, 0x1, 0x1, [r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}], 0x78, 0x20000004}, 0x4) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 21:57:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:57:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 22) 21:57:42 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:42 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad", 0x12}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1883.235784] FAULT_INJECTION: forcing a failure. [ 1883.235784] name failslab, interval 1, probability 0, space 0, times 0 [ 1883.238250] CPU: 0 PID: 11745 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1883.239669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1883.241374] Call Trace: [ 1883.241931] dump_stack+0x107/0x167 [ 1883.242694] should_fail.cold+0x5/0xa [ 1883.243482] ? create_object.isra.0+0x3a/0xa20 [ 1883.244424] should_failslab+0x5/0x20 [ 1883.245205] kmem_cache_alloc+0x5b/0x310 [ 1883.246085] create_object.isra.0+0x3a/0xa20 [ 1883.247015] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1883.248075] kmem_cache_alloc_node+0x169/0x330 [ 1883.249023] __alloc_skb+0x6d/0x5b0 [ 1883.249777] alloc_skb_with_frags+0x92/0x570 [ 1883.250708] ? find_held_lock+0x2c/0x110 [ 1883.251555] sock_alloc_send_pskb+0x7af/0x930 [ 1883.252489] ? sk_alloc+0x350/0x350 [ 1883.253241] ? perf_trace_lock+0xac/0x490 [ 1883.254100] ? SOFTIRQ_verbose+0x10/0x10 [ 1883.254937] ? lock_chain_count+0x20/0x20 [ 1883.255811] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1883.256851] ? ip6_mtu+0x1bb/0x3d0 [ 1883.257590] ? lock_downgrade+0x6d0/0x6d0 [ 1883.258450] ? ip_frag_init+0x350/0x350 [ 1883.259294] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1883.260255] ? ip6_mtu+0x1e9/0x3d0 [ 1883.260998] ? ip6_setup_cork+0xfb7/0x1740 [ 1883.261877] ip6_make_skb+0x2de/0x4e0 [ 1883.262673] ? ip_frag_init+0x350/0x350 [ 1883.263498] ? ip_frag_init+0x350/0x350 [ 1883.264320] ? ip6_push_pending_frames+0xf0/0xf0 [ 1883.265299] ? ip6_dst_hoplimit+0x199/0x440 [ 1883.266195] ? lock_downgrade+0x6d0/0x6d0 [ 1883.267068] udpv6_sendmsg+0x20d0/0x2af0 [ 1883.267906] ? ip_frag_init+0x350/0x350 [ 1883.268738] ? udp_v6_push_pending_frames+0x360/0x360 [ 1883.269796] ? __lockdep_reset_lock+0x180/0x180 [ 1883.270771] ? __lockdep_reset_lock+0x180/0x180 [ 1883.271737] ? lock_acquire+0x197/0x470 [ 1883.272552] ? find_held_lock+0x2c/0x110 [ 1883.273408] ? sock_has_perm+0x1ea/0x280 [ 1883.274290] ? __import_iovec+0x458/0x590 [ 1883.275143] ? udp_v6_push_pending_frames+0x360/0x360 [ 1883.276205] inet6_sendmsg+0x105/0x140 [ 1883.277006] ? inet6_compat_ioctl+0x320/0x320 [ 1883.277926] __sock_sendmsg+0xf2/0x190 [ 1883.278734] ____sys_sendmsg+0x334/0x870 [ 1883.279575] ? sock_write_iter+0x3d0/0x3d0 [ 1883.280442] ? do_recvmmsg+0x6d0/0x6d0 [ 1883.281248] ? __lock_acquire+0x1657/0x5b00 [ 1883.282169] ___sys_sendmsg+0xf3/0x170 [ 1883.282973] ? sendmsg_copy_msghdr+0x160/0x160 [ 1883.283906] ? vmacache_find+0x55/0x2a0 [ 1883.284730] ? __lockdep_reset_lock+0x180/0x180 [ 1883.285693] ? lock_acquire+0x197/0x470 [ 1883.286515] ? find_held_lock+0x2c/0x110 [ 1883.287356] ? __might_fault+0xd3/0x180 [ 1883.288172] ? lock_downgrade+0x6d0/0x6d0 [ 1883.289023] ? asm_exc_page_fault+0x1e/0x30 [ 1883.289928] __sys_sendmmsg+0x195/0x470 [ 1883.290772] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1883.291654] ? lock_downgrade+0x6d0/0x6d0 [ 1883.292530] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1883.293521] ? wait_for_completion_io+0x270/0x270 [ 1883.294525] ? rcu_read_lock_any_held+0x75/0xa0 [ 1883.295474] ? vfs_write+0x354/0xa70 [ 1883.296245] ? fput_many+0x2f/0x1a0 [ 1883.296992] ? ksys_write+0x1a9/0x260 [ 1883.297775] ? __ia32_sys_read+0xb0/0xb0 [ 1883.298636] __x64_sys_sendmmsg+0x99/0x100 [ 1883.299509] do_syscall_64+0x33/0x40 [ 1883.300272] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1883.301321] RIP: 0033:0x7fd6f698fb19 [ 1883.302092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1883.305849] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1883.307422] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1883.308881] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1883.310356] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1883.311815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1883.313276] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:57:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:57:42 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 21:57:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8", 0x1b}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 21:57:43 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 21:57:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 23) 21:57:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:59 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES64, @ANYRES64=r1]) r2 = signalfd4(r0, &(0x7f0000000080)={[0x46ff]}, 0x8, 0x80000) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e22, @remote}, 'vxcan1\x00'}) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) fcntl$notify(r0, 0x402, 0x80000045) shutdown(r1, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000003c0)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0x0, 0x8000, 0x0, 0xfffffffb}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x509940, 0x11) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000200)=0x4, &(0x7f0000000380)=0x1) setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e24, @rand_addr=0x74010102}, 0x10) openat(r2, &(0x7f0000000280)='./file0/file0\x00', 0x8200, 0x1) unshare(0x48020200) 21:57:59 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8", 0x1b}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 1) [ 1899.761341] FAULT_INJECTION: forcing a failure. [ 1899.761341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1899.763735] CPU: 0 PID: 11778 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1899.765153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1899.766836] Call Trace: [ 1899.767384] dump_stack+0x107/0x167 [ 1899.768128] should_fail.cold+0x5/0xa [ 1899.768904] _copy_from_user+0x2e/0x1b0 [ 1899.769711] __copy_msghdr_from_user+0x91/0x4b0 [ 1899.770661] ? __ia32_sys_shutdown+0x80/0x80 [ 1899.771570] ? perf_trace_lock+0xac/0x490 [ 1899.772432] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1899.773510] sendmsg_copy_msghdr+0xa1/0x160 [ 1899.774385] ? do_recvmmsg+0x6d0/0x6d0 [ 1899.775176] ? find_held_lock+0x2c/0x110 [ 1899.776004] ___sys_sendmsg+0xc6/0x170 [ 1899.776791] ? sendmsg_copy_msghdr+0x160/0x160 [ 1899.777719] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1899.778813] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1899.779738] ? trace_hardirqs_on+0x5b/0x180 [ 1899.780638] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1899.781563] ? finish_task_switch+0x126/0x5d0 [ 1899.782472] ? finish_task_switch+0xef/0x5d0 [ 1899.783382] ? __switch_to+0x572/0xf70 [ 1899.784174] ? __switch_to_asm+0x3a/0x60 [ 1899.784979] ? __switch_to_asm+0x34/0x60 [ 1899.785819] ? __schedule+0x82c/0x1ea0 [ 1899.786642] ? io_schedule_timeout+0x140/0x140 [ 1899.787587] __sys_sendmmsg+0x195/0x470 [ 1899.788411] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1899.789300] ? lock_downgrade+0x6d0/0x6d0 [ 1899.790170] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1899.791147] ? wait_for_completion_io+0x270/0x270 [ 1899.792136] ? rcu_read_lock_any_held+0x75/0xa0 [ 1899.793095] ? vfs_write+0x354/0xa70 [ 1899.793877] ? fput_many+0x2f/0x1a0 [ 1899.794641] ? ksys_write+0x1a9/0x260 [ 1899.795432] ? __ia32_sys_read+0xb0/0xb0 [ 1899.796279] __x64_sys_sendmmsg+0x99/0x100 [ 1899.797147] do_syscall_64+0x33/0x40 [ 1899.797928] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1899.798992] RIP: 0033:0x7fd6f698fb19 [ 1899.799761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1899.803544] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1899.805095] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1899.806567] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1899.808033] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1899.809481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1899.810934] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:57:59 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:59 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:57:59 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1900.417057] FAULT_INJECTION: forcing a failure. [ 1900.417057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1900.421188] CPU: 0 PID: 11788 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 1900.422245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1900.423513] Call Trace: [ 1900.423922] dump_stack+0x107/0x167 [ 1900.424483] should_fail.cold+0x5/0xa [ 1900.425066] _copy_from_user+0x2e/0x1b0 [ 1900.425672] __copy_msghdr_from_user+0x91/0x4b0 [ 1900.426393] ? __ia32_sys_shutdown+0x80/0x80 [ 1900.427058] ? mark_lock+0xf5/0x2df0 [ 1900.427649] ? __lock_acquire+0xbb1/0x5b00 [ 1900.428299] sendmsg_copy_msghdr+0xa1/0x160 [ 1900.428943] ? do_recvmmsg+0x6d0/0x6d0 [ 1900.429548] ? perf_trace_lock+0xac/0x490 [ 1900.430172] ? SOFTIRQ_verbose+0x10/0x10 [ 1900.430794] ? __lockdep_reset_lock+0x180/0x180 [ 1900.431514] ? perf_trace_lock+0xac/0x490 [ 1900.432157] ___sys_sendmsg+0xc6/0x170 [ 1900.432763] ? sendmsg_copy_msghdr+0x160/0x160 [ 1900.433455] ? __fget_files+0x26d/0x4c0 [ 1900.434077] ? lock_downgrade+0x6d0/0x6d0 [ 1900.434734] ? lock_downgrade+0x6d0/0x6d0 [ 1900.435371] ? __fget_files+0x296/0x4c0 [ 1900.435992] ? __fget_light+0xea/0x290 [ 1900.436593] __sys_sendmmsg+0x195/0x470 [ 1900.437206] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1900.437841] ? lock_downgrade+0x6d0/0x6d0 [ 1900.438486] ? ksys_write+0x12d/0x260 [ 1900.439078] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1900.439801] ? wait_for_completion_io+0x270/0x270 [ 1900.440541] ? rcu_read_lock_any_held+0x75/0xa0 [ 1900.441254] ? vfs_write+0x354/0xa70 [ 1900.441840] ? fput_many+0x2f/0x1a0 [ 1900.442399] ? ksys_write+0x1a9/0x260 [ 1900.442971] ? __ia32_sys_read+0xb0/0xb0 [ 1900.443604] __x64_sys_sendmmsg+0x99/0x100 [ 1900.444259] do_syscall_64+0x33/0x40 [ 1900.444830] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1900.445600] RIP: 0033:0x7f5519312b19 [ 1900.446149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1900.448874] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1900.450000] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 1900.451064] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1900.452125] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1900.453180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1900.454312] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 21:58:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 2) 21:58:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8", 0x1b}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:15 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 24) 21:58:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:15 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0xa0000, 0x0) 21:58:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1915.555980] FAULT_INJECTION: forcing a failure. [ 1915.555980] name failslab, interval 1, probability 0, space 0, times 0 [ 1915.560168] CPU: 1 PID: 11814 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1915.561860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1915.563887] Call Trace: [ 1915.564535] dump_stack+0x107/0x167 [ 1915.565425] should_fail.cold+0x5/0xa [ 1915.566372] ? create_object.isra.0+0x3a/0xa20 [ 1915.567444] should_failslab+0x5/0x20 [ 1915.568226] kmem_cache_alloc+0x5b/0x310 [ 1915.569072] create_object.isra.0+0x3a/0xa20 [ 1915.569972] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1915.571047] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1915.572101] ? alloc_skb_with_frags+0x92/0x570 [ 1915.573052] __alloc_skb+0xb1/0x5b0 [ 1915.573827] alloc_skb_with_frags+0x92/0x570 [ 1915.574745] ? find_held_lock+0x2c/0x110 [ 1915.575596] sock_alloc_send_pskb+0x7af/0x930 [ 1915.576536] ? sk_alloc+0x350/0x350 [ 1915.577291] ? perf_trace_lock+0xac/0x490 [ 1915.578145] ? SOFTIRQ_verbose+0x10/0x10 [ 1915.579007] ? lock_chain_count+0x20/0x20 [ 1915.579867] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1915.580903] ? ip6_mtu+0x1bb/0x3d0 [ 1915.581630] ? lock_downgrade+0x6d0/0x6d0 [ 1915.582486] ? ip_frag_init+0x350/0x350 [ 1915.583311] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1915.584268] ? ip6_mtu+0x1e9/0x3d0 [ 1915.585005] ? ip6_setup_cork+0xfb7/0x1740 [ 1915.585880] ip6_make_skb+0x2de/0x4e0 [ 1915.586669] ? ip_frag_init+0x350/0x350 [ 1915.587491] ? ip_frag_init+0x350/0x350 [ 1915.588314] ? ip6_push_pending_frames+0xf0/0xf0 [ 1915.589296] ? ip6_dst_hoplimit+0x199/0x440 [ 1915.590177] ? lock_downgrade+0x6d0/0x6d0 [ 1915.591065] udpv6_sendmsg+0x20d0/0x2af0 [ 1915.591904] ? ip_frag_init+0x350/0x350 [ 1915.592734] ? udp_v6_push_pending_frames+0x360/0x360 [ 1915.593793] ? __lockdep_reset_lock+0x180/0x180 [ 1915.594770] ? __lockdep_reset_lock+0x180/0x180 [ 1915.595735] ? lock_acquire+0x197/0x470 [ 1915.596551] ? find_held_lock+0x2c/0x110 [ 1915.597404] ? sock_has_perm+0x1ea/0x280 [ 1915.598268] ? __import_iovec+0x458/0x590 [ 1915.599138] ? udp_v6_push_pending_frames+0x360/0x360 [ 1915.600201] inet6_sendmsg+0x105/0x140 [ 1915.601003] ? inet6_compat_ioctl+0x320/0x320 [ 1915.601921] __sock_sendmsg+0xf2/0x190 [ 1915.602731] ____sys_sendmsg+0x334/0x870 [ 1915.603566] ? sock_write_iter+0x3d0/0x3d0 [ 1915.604429] ? do_recvmmsg+0x6d0/0x6d0 [ 1915.605232] ? __lock_acquire+0x1657/0x5b00 [ 1915.606132] ___sys_sendmsg+0xf3/0x170 [ 1915.606943] ? sendmsg_copy_msghdr+0x160/0x160 [ 1915.607891] ? vmacache_find+0x55/0x2a0 [ 1915.608713] ? __lockdep_reset_lock+0x180/0x180 [ 1915.609675] ? lock_acquire+0x197/0x470 [ 1915.610522] ? find_held_lock+0x2c/0x110 [ 1915.611366] ? __might_fault+0xd3/0x180 [ 1915.612191] ? lock_downgrade+0x6d0/0x6d0 [ 1915.613048] ? asm_exc_page_fault+0x1e/0x30 [ 1915.613978] __sys_sendmmsg+0x195/0x470 [ 1915.614819] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1915.615712] ? lock_downgrade+0x6d0/0x6d0 [ 1915.616588] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1915.617588] ? wait_for_completion_io+0x270/0x270 [ 1915.618591] ? rcu_read_lock_any_held+0x75/0xa0 [ 1915.619537] ? vfs_write+0x354/0xa70 [ 1915.620308] ? fput_many+0x2f/0x1a0 [ 1915.621053] ? ksys_write+0x1a9/0x260 [ 1915.621829] ? __ia32_sys_read+0xb0/0xb0 [ 1915.622688] __x64_sys_sendmmsg+0x99/0x100 [ 1915.623559] do_syscall_64+0x33/0x40 [ 1915.624331] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1915.625379] RIP: 0033:0x7fd6f698fb19 [ 1915.626137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1915.629893] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1915.631450] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1915.632906] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1915.634361] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1915.635827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1915.637280] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:58:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:15 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1915.862611] FAULT_INJECTION: forcing a failure. [ 1915.862611] name failslab, interval 1, probability 0, space 0, times 0 [ 1915.921080] perf: interrupt took too long (2546 > 2500), lowering kernel.perf_event_max_sample_rate to 78000 [ 1915.921470] CPU: 0 PID: 11811 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 1915.924675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1915.926503] Call Trace: [ 1915.927095] dump_stack+0x107/0x167 [ 1915.927905] should_fail.cold+0x5/0xa [ 1915.928738] ? __alloc_skb+0x6d/0x5b0 [ 1915.929571] ? __alloc_skb+0x6d/0x5b0 21:58:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) chdir(&(0x7f0000000280)='./file1\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) futimesat(r1, &(0x7f0000000000)='./mnt\x00', 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x5b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000800)=ANY=[@ANYBLOB="010000000100000018000000a5b4a299584a5d55724e27689881f04a5452ff4da0e2158e1f2395fb2006846d14d273773e116e25a92efd4a851e33583f2877662f66330e66eaf7c7f9d4bac345e748f64ec507ee", @ANYBLOB="c3dd7db662a7414d3e82cb4d0d4a554f4d85fdb39eee75d38db83c6a9842c5d84aa64cef818c44905428be156834747ccb32ef923f4b8807be461b8d3e79a6c19d2558bca5ad3359e8b42d47477bfedb2a83c90c71"]) sendfile(r0, r2, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x9d96}}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000400)={0x0, 0x1}) [ 1915.930430] should_failslab+0x5/0x20 [ 1915.931407] kmem_cache_alloc_node+0x55/0x330 [ 1915.932392] __alloc_skb+0x6d/0x5b0 [ 1915.933197] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1915.934428] alloc_skb_with_frags+0x92/0x570 [ 1915.935439] sock_alloc_send_pskb+0x7af/0x930 [ 1915.936467] ? sk_alloc+0x350/0x350 [ 1915.937275] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1915.938518] ? __ip6_append_data.isra.0+0x5a7/0x3a70 [ 1915.939653] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1915.940778] ? ip6_mtu+0x1bb/0x3d0 [ 1915.941559] ? lock_downgrade+0x6d0/0x6d0 [ 1915.942487] ? ip_frag_init+0x350/0x350 [ 1915.943398] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1915.944428] ? ip6_mtu+0x1e9/0x3d0 [ 1915.945237] ? ip6_setup_cork+0xfb7/0x1740 [ 1915.946209] ip6_make_skb+0x2de/0x4e0 [ 1915.947094] ? ip_frag_init+0x350/0x350 [ 1915.948012] ? ip_frag_init+0x350/0x350 [ 1915.948928] ? ip6_push_pending_frames+0xf0/0xf0 [ 1915.949995] ? ip6_dst_hoplimit+0x199/0x440 [ 1915.951011] ? lock_downgrade+0x6d0/0x6d0 [ 1915.951988] udpv6_sendmsg+0x20d0/0x2af0 [ 1915.952946] ? ip_frag_init+0x350/0x350 [ 1915.953854] ? udp_v6_push_pending_frames+0x360/0x360 [ 1915.955061] ? _down_write_nest_lock+0x160/0x160 [ 1915.956134] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 1915.957188] ? vmacache_update+0xce/0x140 [ 1915.958171] ? do_user_addr_fault+0x5b0/0xc60 [ 1915.959188] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1915.960409] ? asm_exc_page_fault+0x1e/0x30 [ 1915.961397] ? sock_has_perm+0x1ea/0x280 [ 1915.962404] ? __import_iovec+0x458/0x590 [ 1915.963358] ? udp_v6_push_pending_frames+0x360/0x360 [ 1915.964563] inet6_sendmsg+0x105/0x140 [ 1915.965439] ? inet6_compat_ioctl+0x320/0x320 [ 1915.966457] __sock_sendmsg+0xf2/0x190 [ 1915.967358] ____sys_sendmsg+0x334/0x870 [ 1915.968280] ? sock_write_iter+0x3d0/0x3d0 [ 1915.969255] ? do_recvmmsg+0x6d0/0x6d0 [ 1915.970149] ? perf_trace_lock+0xac/0x490 [ 1915.971125] ? __lockdep_reset_lock+0x180/0x180 [ 1915.972212] ? perf_trace_lock+0xac/0x490 [ 1915.973195] ___sys_sendmsg+0xf3/0x170 [ 1915.974095] ? sendmsg_copy_msghdr+0x160/0x160 [ 1915.975165] ? __fget_files+0x26d/0x4c0 [ 1915.976084] ? lock_downgrade+0x6d0/0x6d0 [ 1915.977031] ? lock_downgrade+0x6d0/0x6d0 [ 1915.977999] ? __fget_files+0x296/0x4c0 [ 1915.978934] ? __fget_light+0xea/0x290 [ 1915.979846] __sys_sendmmsg+0x195/0x470 [ 1915.980763] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1915.981764] ? lock_downgrade+0x6d0/0x6d0 [ 1915.982743] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1915.983858] ? wait_for_completion_io+0x270/0x270 [ 1915.984949] ? rcu_read_lock_any_held+0x75/0xa0 [ 1915.986013] ? vfs_write+0x354/0xa70 [ 1915.986888] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1915.988140] ? ksys_write+0x1a9/0x260 [ 1915.989006] ? __ia32_sys_read+0xb0/0xb0 [ 1915.989930] __x64_sys_sendmmsg+0x99/0x100 [ 1915.990906] do_syscall_64+0x33/0x40 [ 1915.991777] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1915.992943] RIP: 0033:0x7f5519312b19 [ 1915.993807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1915.998040] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1915.999813] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 1916.001445] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1916.003099] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1916.004746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1916.006418] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 21:58:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1916.072272] perf: interrupt took too long (3236 > 3182), lowering kernel.perf_event_max_sample_rate to 61000 21:58:15 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 25) 21:58:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 3) [ 1916.167379] FAULT_INJECTION: forcing a failure. [ 1916.167379] name failslab, interval 1, probability 0, space 0, times 0 [ 1916.169707] CPU: 1 PID: 11836 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1916.171134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1916.172801] Call Trace: [ 1916.173340] dump_stack+0x107/0x167 [ 1916.174089] should_fail.cold+0x5/0xa [ 1916.174877] ? lock_release+0x680/0x680 [ 1916.175685] ? skb_clone+0x14f/0x3d0 [ 1916.176444] should_failslab+0x5/0x20 [ 1916.177220] kmem_cache_alloc+0x5b/0x310 [ 1916.178057] skb_clone+0x14f/0x3d0 [ 1916.178797] dev_queue_xmit_nit+0x3a7/0xb00 [ 1916.179676] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1916.180619] dev_hard_start_xmit+0xab/0x6f0 [ 1916.181496] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1916.182577] __dev_queue_xmit+0x17ec/0x2710 [ 1916.183458] ? find_held_lock+0x2c/0x110 [ 1916.184280] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1916.185203] ? lock_downgrade+0x6d0/0x6d0 [ 1916.186037] ? lock_acquire+0x197/0x470 [ 1916.186845] ? ip6_finish_output2+0x203/0x1fe0 [ 1916.187777] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1916.188854] neigh_connected_output+0x382/0x4d0 [ 1916.189831] ip6_finish_output2+0xaaf/0x1fe0 [ 1916.190764] __ip6_finish_output.part.0+0x4f7/0xb50 [ 1916.191784] ip6_output+0x3aa/0x7e0 [ 1916.192529] ip6_local_out+0xb4/0x1a0 [ 1916.193307] ip6_send_skb+0xb7/0x350 [ 1916.194073] udp_v6_send_skb+0x7aa/0x15b0 [ 1916.194943] udpv6_sendmsg+0x2113/0x2af0 [ 1916.195768] ? ip_frag_init+0x350/0x350 [ 1916.196591] ? udp_v6_push_pending_frames+0x360/0x360 [ 1916.197629] ? __lockdep_reset_lock+0x180/0x180 [ 1916.198613] ? __lockdep_reset_lock+0x180/0x180 [ 1916.199564] ? lock_acquire+0x197/0x470 [ 1916.200364] ? find_held_lock+0x2c/0x110 [ 1916.201209] ? sock_has_perm+0x1ea/0x280 [ 1916.202057] ? __import_iovec+0x458/0x590 [ 1916.202902] ? udp_v6_push_pending_frames+0x360/0x360 [ 1916.203947] inet6_sendmsg+0x105/0x140 [ 1916.204734] ? inet6_compat_ioctl+0x320/0x320 [ 1916.205640] __sock_sendmsg+0xf2/0x190 [ 1916.206448] ____sys_sendmsg+0x334/0x870 [ 1916.207278] ? sock_write_iter+0x3d0/0x3d0 [ 1916.208154] ? do_recvmmsg+0x6d0/0x6d0 [ 1916.208942] ? __lock_acquire+0x1657/0x5b00 [ 1916.209826] ___sys_sendmsg+0xf3/0x170 [ 1916.210618] ? sendmsg_copy_msghdr+0x160/0x160 [ 1916.211541] ? vmacache_find+0x55/0x2a0 [ 1916.212350] ? __lockdep_reset_lock+0x180/0x180 [ 1916.213299] ? lock_acquire+0x197/0x470 [ 1916.214096] ? find_held_lock+0x2c/0x110 [ 1916.214938] ? __might_fault+0xd3/0x180 [ 1916.215744] ? lock_downgrade+0x6d0/0x6d0 [ 1916.216589] ? asm_exc_page_fault+0x1e/0x30 [ 1916.217507] __sys_sendmmsg+0x195/0x470 [ 1916.218322] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1916.219199] ? lock_downgrade+0x6d0/0x6d0 [ 1916.220064] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1916.221043] ? wait_for_completion_io+0x270/0x270 [ 1916.222014] ? rcu_read_lock_any_held+0x75/0xa0 [ 1916.222955] ? vfs_write+0x354/0xa70 [ 1916.223715] ? fput_many+0x2f/0x1a0 [ 1916.224456] ? ksys_write+0x1a9/0x260 [ 1916.225226] ? __ia32_sys_read+0xb0/0xb0 [ 1916.226050] __x64_sys_sendmmsg+0x99/0x100 [ 1916.226921] do_syscall_64+0x33/0x40 [ 1916.227684] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1916.228720] RIP: 0033:0x7fd6f698fb19 [ 1916.229477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1916.233210] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1916.234774] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1916.236203] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1916.237629] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1916.239080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1916.240519] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 [ 1916.336788] FAULT_INJECTION: forcing a failure. [ 1916.336788] name failslab, interval 1, probability 0, space 0, times 0 [ 1916.339444] CPU: 0 PID: 11840 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 1916.341036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1916.342910] Call Trace: [ 1916.343521] dump_stack+0x107/0x167 [ 1916.344358] should_fail.cold+0x5/0xa [ 1916.345234] ? create_object.isra.0+0x3a/0xa20 [ 1916.346256] ? create_object.isra.0+0x3a/0xa20 [ 1916.347330] should_failslab+0x5/0x20 [ 1916.348217] kmem_cache_alloc+0x5b/0x310 [ 1916.349144] create_object.isra.0+0x3a/0xa20 [ 1916.350142] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1916.351298] kmem_cache_alloc_node+0x169/0x330 [ 1916.352368] __alloc_skb+0x6d/0x5b0 [ 1916.353197] alloc_skb_with_frags+0x92/0x570 [ 1916.354218] ? mark_lock+0xf5/0x2df0 [ 1916.355087] ? lock_acquire+0x197/0x470 [ 1916.356013] sock_alloc_send_pskb+0x7af/0x930 [ 1916.357062] ? sk_alloc+0x350/0x350 [ 1916.357908] ? perf_trace_lock+0xac/0x490 [ 1916.358867] ? SOFTIRQ_verbose+0x10/0x10 [ 1916.359816] ? lock_chain_count+0x20/0x20 [ 1916.360777] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1916.361920] ? ip6_mtu+0x1bb/0x3d0 [ 1916.362731] ? lock_downgrade+0x6d0/0x6d0 [ 1916.363668] ? ip_frag_init+0x350/0x350 [ 1916.364610] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1916.365667] ? ip6_mtu+0x1e9/0x3d0 [ 1916.366495] ? ip6_setup_cork+0xfb7/0x1740 [ 1916.367453] ip6_make_skb+0x2de/0x4e0 [ 1916.368326] ? ip_frag_init+0x350/0x350 [ 1916.369221] ? ip_frag_init+0x350/0x350 [ 1916.370154] ? ip6_push_pending_frames+0xf0/0xf0 [ 1916.371253] ? ip6_dst_hoplimit+0x199/0x440 [ 1916.372231] ? lock_downgrade+0x6d0/0x6d0 [ 1916.373213] udpv6_sendmsg+0x20d0/0x2af0 [ 1916.374122] ? ip_frag_init+0x350/0x350 [ 1916.375081] ? udp_v6_push_pending_frames+0x360/0x360 [ 1916.376248] ? _down_write_nest_lock+0x160/0x160 [ 1916.377352] ? vmacache_update+0xce/0x140 [ 1916.378318] ? do_user_addr_fault+0x5b0/0xc60 [ 1916.379354] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1916.380571] ? asm_exc_page_fault+0x1e/0x30 [ 1916.381563] ? sock_has_perm+0x1ea/0x280 [ 1916.382533] ? __import_iovec+0x458/0x590 [ 1916.383502] ? udp_v6_push_pending_frames+0x360/0x360 [ 1916.384683] inet6_sendmsg+0x105/0x140 [ 1916.385575] ? inet6_compat_ioctl+0x320/0x320 [ 1916.386600] __sock_sendmsg+0xf2/0x190 [ 1916.387501] ____sys_sendmsg+0x334/0x870 [ 1916.388438] ? sock_write_iter+0x3d0/0x3d0 [ 1916.389405] ? do_recvmmsg+0x6d0/0x6d0 [ 1916.390277] ? perf_trace_lock+0xac/0x490 [ 1916.391268] ? __lockdep_reset_lock+0x180/0x180 [ 1916.392328] ? perf_trace_lock+0xac/0x490 [ 1916.393294] ___sys_sendmsg+0xf3/0x170 [ 1916.394179] ? sendmsg_copy_msghdr+0x160/0x160 [ 1916.395235] ? __fget_files+0x26d/0x4c0 [ 1916.396159] ? lock_downgrade+0x6d0/0x6d0 [ 1916.397113] ? lock_downgrade+0x6d0/0x6d0 [ 1916.398076] ? __fget_files+0x296/0x4c0 [ 1916.398992] ? __fget_light+0xea/0x290 [ 1916.399912] __sys_sendmmsg+0x195/0x470 [ 1916.400814] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1916.401815] ? lock_downgrade+0x6d0/0x6d0 [ 1916.402804] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1916.403908] ? wait_for_completion_io+0x270/0x270 [ 1916.405021] ? rcu_read_lock_any_held+0x75/0xa0 [ 1916.406085] ? vfs_write+0x354/0xa70 [ 1916.406959] ? fput_many+0x2f/0x1a0 [ 1916.407778] ? ksys_write+0x1a9/0x260 [ 1916.408655] ? __ia32_sys_read+0xb0/0xb0 [ 1916.409580] __x64_sys_sendmmsg+0x99/0x100 [ 1916.410573] do_syscall_64+0x33/0x40 [ 1916.411414] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1916.412586] RIP: 0033:0x7f5519312b19 [ 1916.413432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1916.417522] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1916.419289] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 1916.420879] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1916.422498] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1916.424145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1916.425738] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 21:58:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:30 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7, 0x2, &(0x7f0000000140)=[{&(0x7f0000000100)="c4f428823b3b59063311e042ed04f10b3d57a975a112a47966f8", 0x1a, 0x6}, {&(0x7f0000000440)="33227d337aa4f3d0a1c20942699df76ce3c72f0f0c427ddc15e4205a0b83b1f1e6a8d71f3cc45b2575c78a9db13ff54259ac776f4ef830f00abdb7658a7668d926cad974b7121dfb04fb86206c8ea27b8b14f3fc3fc27446d7c6b13a18185c7bb72b03b62e3b4b70c0c75141225d134ea79eed2faed51d49525a11fa4dc5cf7bfe591ea3eb8e8980fee7ed461502a5fd7f93803e1ce3eb9e9dc224da6dd26321a893d7b8cadc05688bb84585006dd6a631bf2438d4bb967116844bfc1fda1d6c7f437bf75a81a1bbcbe74542e791d9f39ef558d32844513577bad35d7dc081a2dade9fc7c8da4b12ed2e414035bfc4eac6d704aaa9316e7e1ccbd9be85d5546b5c97a605e6c680dd0b8194417bc2addef1b4df001533b8cdd125edc8a628e75f0b2a7a1bfa09bf8eee08cda3a2f2ce3b3010ac74ac5ccbd46757875b35fe5f7f0df354c4b611b85bd5a67b9ab0f331a81a0c990eafd2fa1c2d1e21641348b7f267c2d2b9a3d2c71b2ecbc82ca00a767c4b353dd9a654b3933ad0ac377e2a4258f339031d525e5149dc059adcf361a6e5203d9c255fea3cdf5a97a03c66b4b006b5e40be116f205ec7b5e193f994b4805d3ba56b436813eada9d8f7c8514d7b21fb8185fc827a0785f2a3c9dc51479933d4b3b7f8c28d7134fa17704c002dad6731179c1a714e9d0edb24ed2d4532eec8e955dd7af24ca357837a7f8a356d07b6f65569564a12a471d59a3926448288f359d16b33bd2230181f516f37531b6823288bd845814071fda059bff9258f2e65812434b809acbe1d2cb361a387bdb6c364b34ce7cdb290ddb5a9448c4d403cb629839466683077b051ead349d5d3ff64ca984014b3a2a29cde36618a020ab49ab996d1dffc20aedcff4f25d4af51fc5d242355799e0179285bc56d5e77736d9c046aa95116824f5b06936a25525b3bcdaff9b154387ce641dae0b80ccb092f3b1ba8e14aa38a38ddb22c993158f5c60030d77084f081f1ff74fa1a1926649c23c0e8b134d2a0c45ae0049d16a121c3978df357a2864c0e6f1be85e864fa62a2dfab156b8fe5ced3ad1ffff5affa954965bc10ea756f8b52e0fc90080f80c1339761b8e3d11e084bbf62097590161ef0837d4c8c6b45eddfb00649456c92c0e0619815e0189d275e8b773b63cb9a632084421ebfd9254bfab4c6df497634ba77c9a685df5193c31ada88e68ca61a2ab984ecf887a2ce90d8332e62b4f0c83b1f019a99955486b6f73c1cbff07b3e96abfc434b2cbe8bcaf9ce5cdf3c8c77e8d2c6dd19701d66ad6e17fe220a35cd6f27b8f592f5f62cedd2502812e1b18830456da4908602633981360fc45cb5482fb96feee62841c6aa667a87b583a3cce7112356db116d8a4152ccf2132984469bc8f5dc306039323e9a15f7ae091784806e3d52919b68dc32c6807bc25c43affade01206936caa03496899ea3f98a548ae2851b275442995a55f06069251ce742d0ebafb1811b81966775fbffce8a19a95c3bbeecc8b542592d81270b194847793401eb69ccf5026e1500da4a0fc6fa86f1c5e219bde4a35ac4325ccf829046a029ed203bfa708bead0647e2b5ac4cea95056aba02469c5d012cd5a11e7e6a74a6da7cf2ef1a96b96910cd81c52497e24fece3f9ecbb78a6d9db5047717b857d41f1dfbab965b466478b8ac46e6ee3998d1bff23bf988fda7f2e0fd6cb04ee18e8ceee1b5ebc03c9cf774ac18747d6091db52dcfcd5fa5cb47a6b7ce50088c382c96358ae74f1852cc70f13c7fa90bb205c1fa06141c85e27ff035ca9f32edb416b6dd867e523374040649bfc8f0cd693bc889f35137f6e3e0fc94331b978d6c49dfffc13666c61a951a5a2120b8b56a97edf76b30ebb17c73477bfcd69e09653222b7129153d76295aec171f7003bafa58ef2746e9a2c3d60b2500cffa0a6c43fcbdd6cc9f2d6ff63bc0c264cf13618a378b96040d0888c79a427de3cb60d3bf2cdd93280b7a57a58029169f8e7aa797bbf5cdaf378ed0ca2208484be7fcbc9eb940dcff67f103751254944ded4c72dfadb5a3dafd2a1e513f01af28ed0108f31dceb889dec819c5db1143a25d787a00901788870a728733d914349c93b3141c9e1e9df9bb51b54682c73ab9617861a659a67cd8cbdbaee344c5312e0dc80fe2e941a296577eb6207827263e5b8b6f10bf000e6e7a486cc8764038e8b1d73c90039b6eb776ea29d4b8977ec6d5766ff7f7f4db1d80f0adb46643c8cb9652172faf5b0fe6ec30e9b1dd2c25b8e4fe61049074cd1c91f1703cb9d6ae6353100e88fb79486e1199d75a6fa9d8fa4a5e954ec907d53b1f2887c5e6ac39f771a6663265e74d271f8eaef03d86424c7de51a2ffaebba6bdd4dd38536b7343fe7d5f3eba9975f8aa449fcf5dafc525812d273ae649b5a9ae40b4bc7a77f2426ee23fc9cbccdf1ae4b7914fec5bd2d09fdbbba6959b96edcf3a4983c9335332b8904c2e7b85f367a2076091840a13096e601d812daddbd69a135bf530b873e4261c95c80b455420324124017abf11c280c4750e192eb7dac2f5526a9117583d68d4d09ebffa0b5fa2eb6d5644d1268bd66226907e2d08834b1d39e9430357c8f4fa909295b40a3401f162d74c38a1bc36c5182733f4fbc51bf3a68e8b529c628e7b04fcc6268eca23fc931b0a145d33d7039a3cb018aae5bdd8fd7e713b2db82632113234eb52b4b9770d1d97b88be4572d85fe511ec9a5bd22755d367ed53ac2d04384c5b6c04dfa953773e614dc6a43392c05ccad0ee492d682ff81adbbc5c527f26706c4b67f9b853f1879879d3e33a4fae342842c1fea6c430bf314390f86ac16ad736ece17a574b5a2855b9c4c1a6309c7edd760e7e0901303b2088ed188392a08153a7cd155ab4bad1b79fc52b9ed498fa4668203f3d42737f295b1a0939153a7ea04b654c64392b01ca6517d15f075daa038827c06ca5faae8871befc707a4ef72680da4396771a216b6aeeee07b14f52cfd8196f2bbdf9623a04a8198b7c347bb4e1e613d0656ae10feb6821a456d0fedc70d766ea9c81b800ea3e9504acc9a756704225460754907e9289b108c3290b1819d2bc3c4535481d345454a79a07ff3021c3768cbbe9230f9da648aa9e18c8c1188896c1198031150fb129b4421bbbc6133effe304c28fa1e3c606aaf7cdef78317677124019e823d26155999082141b7579e18d55c47e3573801edd84f155b2f158cec83ac090df89e9ac97aa1c46163cf0a2b7f5f70b2772d10feb0741052cbe32b110a67c6250dbb6b34f9b7145b838166bb84231492c565507b4e37e84381f2858f0fc75ce36fd9090d611ef05f94a02583675ce4b5fb908950e489d19c4d3fa8b8945ca15a8a9bd50a7544203b811db4d816bc5a553563cb450ec5dd757328e0569071e7c5683b1f57ebe42c09f826b062dc000deca799794c77da4bc87eea503f8e4ab84d5eb21d95a11fc745bcb69e1c269b9f8c238f7b0a63a0d473eec8372b0e5a4ae5cd5b69df8ea5a7b31bdbab86ff2da3176e84d2153680d2d46747f1c7fcaebe6327d762927ce2b0ca4937d1df7f4198560e217e43de9859400b5c14c18d3292c5b992fad1315c14cc1c7c102123f6931eea62e2d4f57f6e71704862e0ae7fe11d6d3df337f0177ad5094a7fb05122e14ec24bef0f2fdcf99988a36cd3ff8f1728ccd4ecfd92fcab57119898fa44b14cb780bcf46d17280bc7bf7b80b5976a0eec44cc19c37aed9e0b191e95530342771b57dc55c25304e887bd851088ff4eaeef07d5f65c99b5b0e22bc8ee24e9408e8e16e6500fccc584658b752c7bc287e89407976081f0674cb3d52223b7b130616efb4d9298a9964cc4c652a859fcbcbf40d7a42833cdaa5b229150063e81bd6b489c4f75ae4c9e936ec0924a554f1baeb1bb58d41ce2d1f639d9899b513c46b5a78cc2e8efc50d93316774fb9532d3c36c9b536bf7e35d8b5c5d42c5df7f20638ba01d1da4b3bde92555a5e821ba2707e419fdfe26f6b13ccfa45f47922dd6790059cda7a2b3cf0efeec71bca3b1efa51e74d8a58817511eb1f026bc412f46736f60cdc2c44da858da6d9e841ba64dbf45551b856e0edb896f97caa70015071c851a54cbca378b4069ee44309fbbca6784d6c2114e7968606c08244095ab13e173545850449482f831d5b157feeb4524fd6720f4b22dbd251905b1f994d7a63de32591e7450ac1039af37ddab813528beb0ad05708dcc9d1cde27b2abf155612f4a3a2ea36f8ab1fcf4b72a796b06982d383bba7619279a78b9571f527555c07554b34a54cf72d9a742429c9299bf5931459a957890e8c5250e705912130d260e7fc175dcf98b8d07a24956ed43ac90630e609fdac4a5a710401002ce84f5d3e7668eb1235a7c986a31796274340eb3aa1d8bc60248464995835bd503be54a46b33ff21c83217192290d04e84974c20c2d025b9ff321617474567dbfa812396baaa837ef7aee7d4df9b7faaa557ff7258ac30d8cbce1b2604ab46ef582c29c182ad0c5d2412a7302e90f74f74025c33bad484056e2413fda0ac96dab9cb037fca5b95b8d0cda3984e594866790fee59381af3f546133a9cd1db888d0defa8b6ee2c85f93ab0dc5508f52f3032a0dc44619ca99ff83eca98d4b973a9690d73ef799bad4ca732717df3301c1ecb7af3ef10fecabb695b344e16f9747e07a59fc638e61ec4201205a5119a2905e8ddef012378b254a2b79f4da62ca2bd3ef91a512a27f5cb74a4addc932974c567b03fd0ffacf3c08f5079d025f2db2e76489f592c664c0ab2531189601cd3153830fa9b7e106abea00e0acceef6cd2e4686ad74eac4b1fff52b10a87c91a3f9f7acf191d85a7a65ee62c2a4df259fe8cd82cf9f77e586ab03f8bf0b04dbb7011a77167ba8c02754eea934825f20fcbb5278698329c7b0a05a38b991947a84e8952e9707c52c03fc99ce864a81caf3c867c971b6badd57a098ced7313bc62e9278ba8621044a5daad0d146e3158b39388ae3dee389b721bde9305e4da62fcee3881d5fc3c5ebaaf86f8304d30e5e4fa55c35dec2116a1d3f1c157b7ded4ed7200f4cde4e86d5fb8f51ecaf2273494cd4f74e4f0e4b5da765b43d698c326d471c183591479955d26be49c4f1695fa38c73acd70b535a2e7488ff23a1122688f6dc83591c09ec70bb4ab9b284687e065e5284556f90b3f9647a82b8b126f384daa61e31700735b548cb4aad220f88ca4628efd80e908571badc06afb2cd64888142cdc3679acf3bb98e35a42548e60b0cacf7f1b71afa7f1ff96f5b257233f7f81529e992c534f81afe2604ff0e70c568f69b8c551a258aafb9b819355e60175a910673bda52ebb6237ea3e4ebec72a576be928c18ce10a771bd781165741ccaad4ad72799c81dbc8fe1fd2e0efa4d0a88ae9b8d2a1f5ba47bb6131b532c46b4b8a54a8f06dd156f535246a25d4975dbd51fb803bc7b0ccf36403e41b817a2797f75c392a0aaf4fd9f948ec63e35a606a0199c150ad346a289ae560a3256a208f4322eac81b4006e5093b430410aa6e69713680bdab6bd9b2bd6a14049d0b0e65ec317467a71cd9438ff4769314f01e58ca38c4431287916d9315277754a6d421c22cede8085fc279b0e3a3b112fa166fe6cbc3552efe90e6dfc04e3a2616175e8fbba0a99921a66a1fda1c2914de05db607f00373f1054f86daf308bc928b065e2c6b5a9dac2cbe995e6e26627b85fa332beff6b3bfe996ba1c2dbef9b79383cfedd51e24d8f575861ae20a608660d", 0x1000, 0x7fff}], 0x108000, &(0x7f0000000200)={[{@huge_within_size}, {@mpol={'mpol', 0x3d, {'prefer', '=relative', @void}}}, {@nr_inodes={'nr_inodes', 0x3d, [0x36, 0x38, 0x37]}}], [{@fowner_gt={'fowner>', 0xee01}}, {@fsname}, {@pcr={'pcr', 0x3d, 0x6}}]}) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c02, 0xffffffffffffffff) chdir(&(0x7f0000000040)='./file0\x00') 21:58:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 4) 21:58:30 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342", 0x20}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 26) 21:58:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1931.327720] FAULT_INJECTION: forcing a failure. [ 1931.327720] name failslab, interval 1, probability 0, space 0, times 0 [ 1931.330627] CPU: 1 PID: 11849 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 1931.331714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1931.333011] Call Trace: [ 1931.333426] dump_stack+0x107/0x167 [ 1931.333998] should_fail.cold+0x5/0xa [ 1931.334634] should_failslab+0x5/0x20 [ 1931.335142] __kmalloc_node_track_caller+0x74/0x3b0 [ 1931.335682] ? alloc_skb_with_frags+0x92/0x570 [ 1931.336179] __alloc_skb+0xb1/0x5b0 [ 1931.336567] alloc_skb_with_frags+0x92/0x570 [ 1931.337060] sock_alloc_send_pskb+0x7af/0x930 [ 1931.337565] ? sk_alloc+0x350/0x350 [ 1931.337968] ? perf_trace_lock+0xac/0x490 [ 1931.338425] ? SOFTIRQ_verbose+0x10/0x10 [ 1931.338887] ? lock_chain_count+0x20/0x20 [ 1931.339355] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1931.339917] ? ip6_mtu+0x1bb/0x3d0 [ 1931.340313] ? lock_downgrade+0x6d0/0x6d0 [ 1931.340767] ? ip_frag_init+0x350/0x350 [ 1931.341215] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1931.341727] ? ip6_mtu+0x1e9/0x3d0 [ 1931.342122] ? ip6_setup_cork+0xfb7/0x1740 [ 1931.342613] ip6_make_skb+0x2de/0x4e0 [ 1931.343037] ? ip_frag_init+0x350/0x350 [ 1931.343476] ? ip_frag_init+0x350/0x350 [ 1931.343919] ? ip6_push_pending_frames+0xf0/0xf0 [ 1931.344451] ? ip6_dst_hoplimit+0x199/0x440 [ 1931.344933] ? lock_downgrade+0x6d0/0x6d0 [ 1931.345407] udpv6_sendmsg+0x20d0/0x2af0 [ 1931.345860] ? ip_frag_init+0x350/0x350 [ 1931.346309] ? udp_v6_push_pending_frames+0x360/0x360 [ 1931.346898] ? _down_write_nest_lock+0x160/0x160 [ 1931.347429] ? vmacache_update+0xce/0x140 [ 1931.347892] ? do_user_addr_fault+0x5b0/0xc60 [ 1931.348389] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1931.348972] ? asm_exc_page_fault+0x1e/0x30 [ 1931.349447] ? sock_has_perm+0x1ea/0x280 [ 1931.349915] ? __import_iovec+0x458/0x590 [ 1931.350373] ? udp_v6_push_pending_frames+0x360/0x360 [ 1931.350956] inet6_sendmsg+0x105/0x140 [ 1931.351387] ? inet6_compat_ioctl+0x320/0x320 [ 1931.351878] __sock_sendmsg+0xf2/0x190 [ 1931.352316] ____sys_sendmsg+0x334/0x870 [ 1931.352767] ? sock_write_iter+0x3d0/0x3d0 [ 1931.353233] ? do_recvmmsg+0x6d0/0x6d0 [ 1931.353661] ? perf_trace_lock+0xac/0x490 [ 1931.354121] ? __lockdep_reset_lock+0x180/0x180 [ 1931.354640] ? perf_trace_lock+0xac/0x490 [ 1931.355098] ___sys_sendmsg+0xf3/0x170 [ 1931.355532] ? sendmsg_copy_msghdr+0x160/0x160 [ 1931.356042] ? __fget_files+0x26d/0x4c0 [ 1931.356478] ? lock_downgrade+0x6d0/0x6d0 [ 1931.356937] ? lock_downgrade+0x6d0/0x6d0 [ 1931.357396] ? __fget_files+0x296/0x4c0 [ 1931.357843] ? __fget_light+0xea/0x290 [ 1931.358276] __sys_sendmmsg+0x195/0x470 [ 1931.358728] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1931.359201] ? lock_downgrade+0x6d0/0x6d0 [ 1931.359674] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1931.360205] ? wait_for_completion_io+0x270/0x270 [ 1931.360737] ? rcu_read_lock_any_held+0x75/0xa0 [ 1931.361248] ? vfs_write+0x354/0xa70 [ 1931.361669] ? fput_many+0x2f/0x1a0 [ 1931.362071] ? ksys_write+0x1a9/0x260 [ 1931.362495] ? __ia32_sys_read+0xb0/0xb0 [ 1931.362958] __x64_sys_sendmmsg+0x99/0x100 [ 1931.363428] do_syscall_64+0x33/0x40 [ 1931.363844] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1931.364411] RIP: 0033:0x7f5519312b19 [ 1931.364812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1931.366842] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1931.367679] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 1931.368463] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1931.369243] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1931.370035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1931.370829] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 [ 1931.378737] FAULT_INJECTION: forcing a failure. [ 1931.378737] name failslab, interval 1, probability 0, space 0, times 0 [ 1931.380660] CPU: 0 PID: 11863 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1931.381818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1931.383212] Call Trace: [ 1931.383646] dump_stack+0x107/0x167 [ 1931.384257] should_fail.cold+0x5/0xa [ 1931.384901] ? create_object.isra.0+0x3a/0xa20 [ 1931.385673] should_failslab+0x5/0x20 [ 1931.386328] kmem_cache_alloc+0x5b/0x310 [ 1931.387004] ? lock_acquire+0x197/0x470 [ 1931.387655] create_object.isra.0+0x3a/0xa20 [ 1931.388390] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1931.389253] kmem_cache_alloc+0x159/0x310 [ 1931.389953] skb_clone+0x14f/0x3d0 [ 1931.390545] dev_queue_xmit_nit+0x3a7/0xb00 [ 1931.391306] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1931.392064] dev_hard_start_xmit+0xab/0x6f0 [ 1931.392790] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1931.393657] __dev_queue_xmit+0x17ec/0x2710 [ 1931.394367] ? find_held_lock+0x2c/0x110 [ 1931.395045] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1931.395796] ? lock_downgrade+0x6d0/0x6d0 [ 1931.396473] ? lock_acquire+0x197/0x470 [ 1931.397132] ? ip6_finish_output2+0x203/0x1fe0 [ 1931.397926] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1931.398843] neigh_connected_output+0x382/0x4d0 [ 1931.399665] ip6_finish_output2+0xaaf/0x1fe0 [ 1931.400439] __ip6_finish_output.part.0+0x4f7/0xb50 [ 1931.401303] ip6_output+0x3aa/0x7e0 [ 1931.401914] ip6_local_out+0xb4/0x1a0 [ 1931.402557] ip6_send_skb+0xb7/0x350 [ 1931.403194] udp_v6_send_skb+0x7aa/0x15b0 [ 1931.403915] udpv6_sendmsg+0x2113/0x2af0 [ 1931.404627] ? ip_frag_init+0x350/0x350 [ 1931.405318] ? udp_v6_push_pending_frames+0x360/0x360 [ 1931.406198] ? __lockdep_reset_lock+0x180/0x180 [ 1931.407023] ? __lockdep_reset_lock+0x180/0x180 [ 1931.407828] ? lock_acquire+0x197/0x470 [ 1931.408506] ? find_held_lock+0x2c/0x110 [ 1931.409223] ? sock_has_perm+0x1ea/0x280 [ 1931.409942] ? __import_iovec+0x458/0x590 [ 1931.410671] ? udp_v6_push_pending_frames+0x360/0x360 [ 1931.411557] inet6_sendmsg+0x105/0x140 [ 1931.412223] ? inet6_compat_ioctl+0x320/0x320 [ 1931.412986] __sock_sendmsg+0xf2/0x190 [ 1931.413665] ____sys_sendmsg+0x334/0x870 [ 1931.414372] ? sock_write_iter+0x3d0/0x3d0 [ 1931.415455] ? do_recvmmsg+0x6d0/0x6d0 [ 1931.416404] ? __lock_acquire+0x1657/0x5b00 [ 1931.417450] ___sys_sendmsg+0xf3/0x170 [ 1931.418380] ? sendmsg_copy_msghdr+0x160/0x160 [ 1931.419496] ? vmacache_find+0x55/0x2a0 [ 1931.420448] ? __lockdep_reset_lock+0x180/0x180 [ 1931.421590] ? lock_acquire+0x197/0x470 [ 1931.422543] ? find_held_lock+0x2c/0x110 [ 1931.423527] ? __might_fault+0xd3/0x180 [ 1931.424482] ? lock_downgrade+0x6d0/0x6d0 [ 1931.425470] ? asm_exc_page_fault+0x1e/0x30 [ 1931.426523] __sys_sendmmsg+0x195/0x470 [ 1931.427491] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1931.428523] ? lock_downgrade+0x6d0/0x6d0 [ 1931.429545] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1931.430724] ? wait_for_completion_io+0x270/0x270 [ 1931.431727] ? rcu_read_lock_any_held+0x75/0xa0 [ 1931.432653] ? vfs_write+0x354/0xa70 [ 1931.433402] ? fput_many+0x2f/0x1a0 [ 1931.434131] ? ksys_write+0x1a9/0x260 [ 1931.434898] ? __ia32_sys_read+0xb0/0xb0 [ 1931.435734] __x64_sys_sendmmsg+0x99/0x100 [ 1931.436586] do_syscall_64+0x33/0x40 [ 1931.437337] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1931.438379] RIP: 0033:0x7fd6f698fb19 [ 1931.439157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1931.442919] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1931.444462] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1931.445905] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1931.447369] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1931.448817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1931.450264] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:58:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:31 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 27) 21:58:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 5) 21:58:31 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x0, 0x0, 0x0, 0xa6219d3}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000180)=0xfffffffffffffff9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x1}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="110000000000000029a065d1e2000084798dccf273890000000000000000001800000000000000290000003600"/64], 0x30}}], 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000500)=ANY=[@ANYBLOB="01005181c50100008a199cd79b19884e06f9badbc433f3057985fe899257e6eb27ea12fd3bf4dac12ebc1e613c80b5ff213740eb7adb50be0f983a9261356f1bb3419d8bf3335f777976ac53c75aabe33cc9e4761fba398a5ea614181bbe2e42bd82409bd2aba1ede5ca8295de9db67b70b2f6601be99c90ba8ec50b2a1c81cbc6b6db48141cc5a88f2cf99e2e2725045e03846bf9000000000c42330cd127bfa98d245b405d1530f3cd2b5c3e7aa55d9c259614c0847bcd1203b5", @ANYRES32=r2, @ANYBLOB="ffffffff00000000192f66696c653000"]) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0xff58, &(0x7f0000000200)={&(0x7f0000001280)=@newspdinfo={0x2c, 0x24, 0x400, 0x70bd2b, 0x25dfdbfe, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x80}}]}, 0x2c}}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@local, r4}, 0x14) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r5, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000000280)=ANY=[], 0x38}}], 0x1, 0x0) [ 1931.601983] FAULT_INJECTION: forcing a failure. [ 1931.601983] name failslab, interval 1, probability 0, space 0, times 0 [ 1931.603242] CPU: 1 PID: 11876 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1931.603991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1931.604900] Call Trace: [ 1931.605201] dump_stack+0x107/0x167 [ 1931.605602] should_fail.cold+0x5/0xa [ 1931.606034] ? create_object.isra.0+0x3a/0xa20 [ 1931.606551] should_failslab+0x5/0x20 [ 1931.606987] kmem_cache_alloc+0x5b/0x310 [ 1931.607434] ? lock_acquire+0x197/0x470 [ 1931.607881] create_object.isra.0+0x3a/0xa20 [ 1931.608368] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1931.608917] kmem_cache_alloc+0x159/0x310 [ 1931.609375] skb_clone+0x14f/0x3d0 [ 1931.609772] dev_queue_xmit_nit+0x3a7/0xb00 [ 1931.610253] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1931.610772] dev_hard_start_xmit+0xab/0x6f0 [ 1931.611240] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1931.611819] __dev_queue_xmit+0x17ec/0x2710 [ 1931.612300] ? find_held_lock+0x2c/0x110 [ 1931.612751] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1931.613266] ? lock_downgrade+0x6d0/0x6d0 [ 1931.613738] ? lock_acquire+0x197/0x470 [ 1931.614188] ? ip6_finish_output2+0x203/0x1fe0 [ 1931.614735] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1931.615330] neigh_connected_output+0x382/0x4d0 [ 1931.615857] ip6_finish_output2+0xaaf/0x1fe0 [ 1931.616362] __ip6_finish_output.part.0+0x4f7/0xb50 [ 1931.616915] ip6_output+0x3aa/0x7e0 [ 1931.617324] ip6_local_out+0xb4/0x1a0 [ 1931.617761] ip6_send_skb+0xb7/0x350 [ 1931.618183] udp_v6_send_skb+0x7aa/0x15b0 [ 1931.618668] udpv6_sendmsg+0x2113/0x2af0 [ 1931.619124] ? ip_frag_init+0x350/0x350 [ 1931.619586] ? udp_v6_push_pending_frames+0x360/0x360 [ 1931.620153] ? __lockdep_reset_lock+0x180/0x180 [ 1931.620675] ? __lockdep_reset_lock+0x180/0x180 [ 1931.621201] ? lock_acquire+0x197/0x470 [ 1931.621651] ? find_held_lock+0x2c/0x110 [ 1931.622118] ? sock_has_perm+0x1ea/0x280 [ 1931.622619] ? __import_iovec+0x458/0x590 [ 1931.623098] ? udp_v6_push_pending_frames+0x360/0x360 [ 1931.623690] inet6_sendmsg+0x105/0x140 [ 1931.624124] ? inet6_compat_ioctl+0x320/0x320 [ 1931.624616] __sock_sendmsg+0xf2/0x190 [ 1931.625051] ____sys_sendmsg+0x334/0x870 [ 1931.625498] ? sock_write_iter+0x3d0/0x3d0 [ 1931.625964] ? do_recvmmsg+0x6d0/0x6d0 [ 1931.626396] ? __lock_acquire+0x1657/0x5b00 [ 1931.626890] ___sys_sendmsg+0xf3/0x170 [ 1931.627323] ? sendmsg_copy_msghdr+0x160/0x160 [ 1931.627829] ? vmacache_find+0x55/0x2a0 [ 1931.628271] ? __lockdep_reset_lock+0x180/0x180 [ 1931.628782] ? lock_acquire+0x197/0x470 [ 1931.629233] ? find_held_lock+0x2c/0x110 [ 1931.629700] ? __might_fault+0xd3/0x180 [ 1931.630148] ? lock_downgrade+0x6d0/0x6d0 [ 1931.630628] ? asm_exc_page_fault+0x1e/0x30 [ 1931.631131] __sys_sendmmsg+0x195/0x470 [ 1931.631586] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1931.632082] ? lock_downgrade+0x6d0/0x6d0 [ 1931.632569] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1931.633112] ? wait_for_completion_io+0x270/0x270 [ 1931.633651] ? rcu_read_lock_any_held+0x75/0xa0 [ 1931.634154] ? vfs_write+0x354/0xa70 [ 1931.634569] ? fput_many+0x2f/0x1a0 [ 1931.634982] ? ksys_write+0x1a9/0x260 [ 1931.635407] ? __ia32_sys_read+0xb0/0xb0 [ 1931.635869] __x64_sys_sendmmsg+0x99/0x100 [ 1931.636360] do_syscall_64+0x33/0x40 [ 1931.636777] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1931.637363] RIP: 0033:0x7fd6f698fb19 [ 1931.637775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1931.639813] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1931.640657] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1931.641461] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1931.642269] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1931.643106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1931.643924] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 [ 1931.648008] perf: interrupt took too long (4057 > 4045), lowering kernel.perf_event_max_sample_rate to 49000 [ 1931.687699] FAULT_INJECTION: forcing a failure. [ 1931.687699] name failslab, interval 1, probability 0, space 0, times 0 [ 1931.690457] CPU: 0 PID: 11880 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 1931.691870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1931.693559] Call Trace: [ 1931.694100] dump_stack+0x107/0x167 [ 1931.694872] should_fail.cold+0x5/0xa [ 1931.695656] ? create_object.isra.0+0x3a/0xa20 [ 1931.696585] should_failslab+0x5/0x20 [ 1931.697362] kmem_cache_alloc+0x5b/0x310 [ 1931.698196] create_object.isra.0+0x3a/0xa20 [ 1931.699091] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1931.700126] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1931.701150] ? alloc_skb_with_frags+0x92/0x570 [ 1931.702078] __alloc_skb+0xb1/0x5b0 [ 1931.702848] alloc_skb_with_frags+0x92/0x570 [ 1931.703757] sock_alloc_send_pskb+0x7af/0x930 [ 1931.704676] ? sk_alloc+0x350/0x350 [ 1931.705420] ? perf_trace_lock+0xac/0x490 [ 1931.706260] ? SOFTIRQ_verbose+0x10/0x10 [ 1931.707109] ? lock_chain_count+0x20/0x20 [ 1931.707966] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1931.708993] ? ip6_mtu+0x1bb/0x3d0 [ 1931.709719] ? lock_downgrade+0x6d0/0x6d0 [ 1931.710560] ? ip_frag_init+0x350/0x350 [ 1931.711395] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1931.712340] ? ip6_mtu+0x1e9/0x3d0 [ 1931.713073] ? ip6_setup_cork+0xfb7/0x1740 [ 1931.713928] ip6_make_skb+0x2de/0x4e0 [ 1931.714706] ? ip_frag_init+0x350/0x350 [ 1931.715509] ? ip_frag_init+0x350/0x350 [ 1931.716310] ? ip6_push_pending_frames+0xf0/0xf0 [ 1931.717267] ? ip6_dst_hoplimit+0x199/0x440 [ 1931.718157] ? lock_downgrade+0x6d0/0x6d0 [ 1931.719019] udpv6_sendmsg+0x20d0/0x2af0 [ 1931.719834] ? ip_frag_init+0x350/0x350 [ 1931.720640] ? udp_v6_push_pending_frames+0x360/0x360 [ 1931.721675] ? _down_write_nest_lock+0x160/0x160 [ 1931.722652] ? vmacache_update+0xce/0x140 [ 1931.723498] ? do_user_addr_fault+0x5b0/0xc60 [ 1931.724410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1931.725476] ? asm_exc_page_fault+0x1e/0x30 [ 1931.726351] ? sock_has_perm+0x1ea/0x280 [ 1931.727204] ? __import_iovec+0x458/0x590 [ 1931.728041] ? udp_v6_push_pending_frames+0x360/0x360 [ 1931.729075] inet6_sendmsg+0x105/0x140 [ 1931.729862] ? inet6_compat_ioctl+0x320/0x320 [ 1931.730767] __sock_sendmsg+0xf2/0x190 [ 1931.731560] ____sys_sendmsg+0x334/0x870 [ 1931.732372] ? sock_write_iter+0x3d0/0x3d0 [ 1931.733212] ? do_recvmmsg+0x6d0/0x6d0 [ 1931.733988] ? perf_trace_lock+0xac/0x490 [ 1931.734843] ? __lockdep_reset_lock+0x180/0x180 [ 1931.735767] ? perf_trace_lock+0xac/0x490 [ 1931.736601] ___sys_sendmsg+0xf3/0x170 [ 1931.737382] ? sendmsg_copy_msghdr+0x160/0x160 [ 1931.738298] ? __fget_files+0x26d/0x4c0 [ 1931.739108] ? lock_downgrade+0x6d0/0x6d0 [ 1931.739956] ? lock_downgrade+0x6d0/0x6d0 [ 1931.740800] ? __fget_files+0x296/0x4c0 [ 1931.741624] ? __fget_light+0xea/0x290 [ 1931.742420] __sys_sendmmsg+0x195/0x470 [ 1931.743229] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1931.744105] ? lock_downgrade+0x6d0/0x6d0 [ 1931.744957] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1931.745932] ? wait_for_completion_io+0x270/0x270 [ 1931.746942] ? rcu_read_lock_any_held+0x75/0xa0 [ 1931.747889] ? vfs_write+0x354/0xa70 [ 1931.748651] ? fput_many+0x2f/0x1a0 [ 1931.749392] ? ksys_write+0x1a9/0x260 [ 1931.750166] ? __ia32_sys_read+0xb0/0xb0 [ 1931.751001] __x64_sys_sendmmsg+0x99/0x100 [ 1931.751870] do_syscall_64+0x33/0x40 [ 1931.752627] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1931.753667] RIP: 0033:0x7f5519312b19 [ 1931.754425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1931.758178] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1931.759741] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 1931.761189] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1931.762641] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1931.764093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1931.765542] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 21:58:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:31 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1951.327910] udc-core: couldn't find an available UDC or it's busy [ 1951.329292] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 21:58:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 28) 21:58:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:50 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 6) 21:58:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:50 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x7a, 0x8}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0) r1 = dup2(r0, r0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x8, 0x0, 0x8000) openat(r2, &(0x7f0000000040)='./file0\x00', 0x135440, 0x41) [ 1951.343912] FAULT_INJECTION: forcing a failure. ioctl$HIDIOCINITREPORT(r1, 0x4004550e, 0x20000000) 21:58:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342", 0x20}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1951.343912] name failslab, interval 1, probability 0, space 0, times 0 [ 1951.346362] CPU: 0 PID: 11902 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1951.347811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1951.349516] Call Trace: [ 1951.350064] dump_stack+0x107/0x167 [ 1951.350847] should_fail.cold+0x5/0xa [ 1951.351642] ? create_object.isra.0+0x3a/0xa20 [ 1951.352575] should_failslab+0x5/0x20 [ 1951.353351] kmem_cache_alloc+0x5b/0x310 [ 1951.354211] create_object.isra.0+0x3a/0xa20 [ 1951.355125] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1951.356175] kmem_cache_alloc+0x159/0x310 [ 1951.357041] skb_clone+0x14f/0x3d0 [ 1951.357784] packet_rcv+0x558/0x1410 [ 1951.358573] packet_rcv_fanout+0x278/0x9d0 [ 1951.359459] ? packet_getname_spkt+0x300/0x300 [ 1951.360402] dev_queue_xmit_nit+0x38b/0xb00 [ 1951.361304] dev_hard_start_xmit+0xab/0x6f0 [ 1951.362194] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1951.363287] __dev_queue_xmit+0x17ec/0x2710 [ 1951.364176] ? find_held_lock+0x2c/0x110 [ 1951.365011] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1951.365953] ? lock_downgrade+0x6d0/0x6d0 [ 1951.366805] ? lock_acquire+0x197/0x470 [ 1951.367633] ? ip6_finish_output2+0x203/0x1fe0 [ 1951.368581] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1951.369661] neigh_connected_output+0x382/0x4d0 [ 1951.370639] ip6_finish_output2+0xaaf/0x1fe0 [ 1951.371573] __ip6_finish_output.part.0+0x4f7/0xb50 [ 1951.372597] ip6_output+0x3aa/0x7e0 [ 1951.373362] ip6_local_out+0xb4/0x1a0 [ 1951.374157] ip6_send_skb+0xb7/0x350 [ 1951.374949] udp_v6_send_skb+0x7aa/0x15b0 [ 1951.375824] udpv6_sendmsg+0x2113/0x2af0 [ 1951.376667] ? ip_frag_init+0x350/0x350 [ 1951.377507] ? udp_v6_push_pending_frames+0x360/0x360 [ 1951.378571] ? __lockdep_reset_lock+0x180/0x180 [ 1951.379543] ? __lockdep_reset_lock+0x180/0x180 [ 1951.380496] ? lock_acquire+0x197/0x470 [ 1951.381304] ? find_held_lock+0x2c/0x110 [ 1951.382150] ? sock_has_perm+0x1ea/0x280 [ 1951.383015] ? __import_iovec+0x458/0x590 [ 1951.383856] ? udp_v6_push_pending_frames+0x360/0x360 [ 1951.384905] inet6_sendmsg+0x105/0x140 [ 1951.385697] ? inet6_compat_ioctl+0x320/0x320 [ 1951.386603] __sock_sendmsg+0xf2/0x190 [ 1951.387410] ____sys_sendmsg+0x334/0x870 [ 1951.388240] ? sock_write_iter+0x3d0/0x3d0 [ 1951.389101] ? do_recvmmsg+0x6d0/0x6d0 [ 1951.389904] ? __lock_acquire+0x1657/0x5b00 [ 1951.390809] ___sys_sendmsg+0xf3/0x170 [ 1951.391622] ? sendmsg_copy_msghdr+0x160/0x160 [ 1951.392563] ? vmacache_find+0x55/0x2a0 [ 1951.393392] ? __lockdep_reset_lock+0x180/0x180 [ 1951.394353] ? lock_acquire+0x197/0x470 [ 1951.395175] ? find_held_lock+0x2c/0x110 [ 1951.396004] ? __might_fault+0xd3/0x180 [ 1951.396809] ? lock_downgrade+0x6d0/0x6d0 [ 1951.397645] ? asm_exc_page_fault+0x1e/0x30 [ 1951.398547] __sys_sendmmsg+0x195/0x470 [ 1951.399378] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1951.400254] ? lock_downgrade+0x6d0/0x6d0 [ 1951.401116] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1951.402104] ? wait_for_completion_io+0x270/0x270 [ 1951.403098] ? rcu_read_lock_any_held+0x75/0xa0 [ 1951.404036] ? vfs_write+0x354/0xa70 [ 1951.404794] ? fput_many+0x2f/0x1a0 [ 1951.405544] ? ksys_write+0x1a9/0x260 [ 1951.406325] ? __ia32_sys_read+0xb0/0xb0 [ 1951.407179] __x64_sys_sendmmsg+0x99/0x100 [ 1951.408053] do_syscall_64+0x33/0x40 [ 1951.408812] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1951.409861] RIP: 0033:0x7fd6f698fb19 [ 1951.410623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.414356] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1951.415900] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1951.417339] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1951.418782] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1951.420244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1951.421687] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:58:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1951.451930] FAULT_INJECTION: forcing a failure. [ 1951.451930] name failslab, interval 1, probability 0, space 0, times 0 [ 1951.453337] CPU: 1 PID: 11907 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 1951.454227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1951.455321] Call Trace: [ 1951.455659] dump_stack+0x107/0x167 [ 1951.456133] should_fail.cold+0x5/0xa [ 1951.456628] ? lock_release+0x680/0x680 [ 1951.457152] ? skb_clone+0x14f/0x3d0 [ 1951.457647] should_failslab+0x5/0x20 [ 1951.458135] kmem_cache_alloc+0x5b/0x310 [ 1951.458672] skb_clone+0x14f/0x3d0 [ 1951.459149] dev_queue_xmit_nit+0x3a7/0xb00 [ 1951.459704] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1951.460300] dev_hard_start_xmit+0xab/0x6f0 [ 1951.460858] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1951.461555] __dev_queue_xmit+0x17ec/0x2710 [ 1951.462119] ? find_held_lock+0x2c/0x110 [ 1951.462648] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1951.463267] ? lock_downgrade+0x6d0/0x6d0 [ 1951.463804] ? lock_acquire+0x197/0x470 [ 1951.464314] ? ip6_finish_output2+0x203/0x1fe0 [ 1951.464904] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1951.465587] neigh_connected_output+0x382/0x4d0 [ 1951.466200] ip6_finish_output2+0xaaf/0x1fe0 [ 1951.466783] __ip6_finish_output.part.0+0x4f7/0xb50 [ 1951.467433] ip6_output+0x3aa/0x7e0 [ 1951.467916] ip6_local_out+0xb4/0x1a0 [ 1951.468412] ip6_send_skb+0xb7/0x350 [ 1951.468893] udp_v6_send_skb+0x7aa/0x15b0 [ 1951.469348] udpv6_sendmsg+0x2113/0x2af0 [ 1951.469868] ? ip_frag_init+0x350/0x350 [ 1951.470394] ? udp_v6_push_pending_frames+0x360/0x360 [ 1951.471080] ? _down_write_nest_lock+0x160/0x160 [ 1951.471701] ? vmacache_update+0xce/0x140 [ 1951.472253] ? do_user_addr_fault+0x5b0/0xc60 [ 1951.472847] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1951.473531] ? asm_exc_page_fault+0x1e/0x30 [ 1951.474093] ? sock_has_perm+0x1ea/0x280 [ 1951.474633] ? __import_iovec+0x458/0x590 [ 1951.475173] ? udp_v6_push_pending_frames+0x360/0x360 [ 1951.475837] inet6_sendmsg+0x105/0x140 [ 1951.476346] ? inet6_compat_ioctl+0x320/0x320 [ 1951.476925] __sock_sendmsg+0xf2/0x190 [ 1951.477424] ____sys_sendmsg+0x334/0x870 [ 1951.477952] ? sock_write_iter+0x3d0/0x3d0 [ 1951.478505] ? do_recvmmsg+0x6d0/0x6d0 [ 1951.478935] ? perf_trace_lock+0xac/0x490 [ 1951.479474] ? __lockdep_reset_lock+0x180/0x180 [ 1951.480084] ? perf_trace_lock+0xac/0x490 [ 1951.480622] ___sys_sendmsg+0xf3/0x170 [ 1951.481115] ? sendmsg_copy_msghdr+0x160/0x160 [ 1951.481708] ? __fget_files+0x26d/0x4c0 [ 1951.482223] ? lock_downgrade+0x6d0/0x6d0 [ 1951.482758] ? lock_downgrade+0x6d0/0x6d0 [ 1951.483288] ? __fget_files+0x296/0x4c0 [ 1951.483812] ? __fget_light+0xea/0x290 [ 1951.484320] __sys_sendmmsg+0x195/0x470 [ 1951.484840] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1951.485390] ? lock_downgrade+0x6d0/0x6d0 [ 1951.485929] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1951.486551] ? wait_for_completion_io+0x270/0x270 [ 1951.487181] ? rcu_read_lock_any_held+0x75/0xa0 [ 1951.487784] ? vfs_write+0x354/0xa70 [ 1951.488264] ? fput_many+0x2f/0x1a0 [ 1951.488735] ? ksys_write+0x1a9/0x260 [ 1951.489212] ? __ia32_sys_read+0xb0/0xb0 [ 1951.489747] __x64_sys_sendmmsg+0x99/0x100 [ 1951.490291] do_syscall_64+0x33/0x40 [ 1951.490769] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1951.491427] RIP: 0033:0x7f5519312b19 [ 1951.491832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.494185] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1951.495178] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 1951.495933] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1951.496851] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1951.497768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1951.498700] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 21:58:51 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 29) 21:58:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:51 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:58:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1951.636236] FAULT_INJECTION: forcing a failure. [ 1951.636236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1951.637572] CPU: 1 PID: 11919 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1951.638325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1951.639187] Call Trace: [ 1951.639487] dump_stack+0x107/0x167 [ 1951.639889] should_fail.cold+0x5/0xa [ 1951.640317] _copy_from_user+0x2e/0x1b0 [ 1951.640753] __copy_msghdr_from_user+0x91/0x4b0 [ 1951.641260] ? __ia32_sys_shutdown+0x80/0x80 [ 1951.641749] ? perf_trace_lock+0xac/0x490 [ 1951.642198] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1951.642769] sendmsg_copy_msghdr+0xa1/0x160 [ 1951.643211] ? do_recvmmsg+0x6d0/0x6d0 [ 1951.643630] ? find_held_lock+0x2c/0x110 [ 1951.644070] ___sys_sendmsg+0xc6/0x170 [ 1951.644483] ? sendmsg_copy_msghdr+0x160/0x160 [ 1951.644974] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1951.645545] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1951.646031] ? trace_hardirqs_on+0x5b/0x180 [ 1951.646527] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1951.647081] ? finish_task_switch+0x126/0x5d0 [ 1951.647598] ? finish_task_switch+0xef/0x5d0 [ 1951.648089] ? __switch_to+0x572/0xf70 [ 1951.648525] ? __switch_to_asm+0x3a/0x60 [ 1951.648936] ? __switch_to_asm+0x34/0x60 [ 1951.649400] ? __schedule+0x82c/0x1ea0 [ 1951.649840] ? io_schedule_timeout+0x140/0x140 [ 1951.650378] __sys_sendmmsg+0x195/0x470 [ 1951.650823] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1951.651336] ? lock_downgrade+0x6d0/0x6d0 [ 1951.651819] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1951.652361] ? wait_for_completion_io+0x270/0x270 [ 1951.652893] ? rcu_read_lock_any_held+0x75/0xa0 [ 1951.653410] ? vfs_write+0x354/0xa70 [ 1951.653824] ? fput_many+0x2f/0x1a0 [ 1951.654229] ? ksys_write+0x1a9/0x260 [ 1951.654650] ? __ia32_sys_read+0xb0/0xb0 [ 1951.655128] __x64_sys_sendmmsg+0x99/0x100 [ 1951.655626] do_syscall_64+0x33/0x40 [ 1951.656049] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1951.656651] RIP: 0033:0x7fd6f698fb19 [ 1951.657029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.659089] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1951.659954] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1951.660668] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1951.661471] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1951.662183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1951.662993] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:58:51 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:58:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342", 0x20}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:58:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 7) 21:58:51 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) [ 1951.864670] FAULT_INJECTION: forcing a failure. [ 1951.864670] name failslab, interval 1, probability 0, space 0, times 0 [ 1951.866030] CPU: 1 PID: 11936 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 1951.866773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1951.867686] Call Trace: [ 1951.867992] dump_stack+0x107/0x167 [ 1951.868407] should_fail.cold+0x5/0xa [ 1951.868827] ? create_object.isra.0+0x3a/0xa20 [ 1951.869324] should_failslab+0x5/0x20 [ 1951.869753] kmem_cache_alloc+0x5b/0x310 [ 1951.870198] ? lock_acquire+0x197/0x470 [ 1951.870640] create_object.isra.0+0x3a/0xa20 [ 1951.871147] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1951.871724] kmem_cache_alloc+0x159/0x310 [ 1951.872200] skb_clone+0x14f/0x3d0 [ 1951.872612] dev_queue_xmit_nit+0x3a7/0xb00 [ 1951.873084] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1951.873606] dev_hard_start_xmit+0xab/0x6f0 [ 1951.874079] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1951.874677] __dev_queue_xmit+0x17ec/0x2710 [ 1951.875193] ? find_held_lock+0x2c/0x110 [ 1951.875663] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1951.876178] ? lock_downgrade+0x6d0/0x6d0 [ 1951.876634] ? lock_acquire+0x197/0x470 [ 1951.877088] ? ip6_finish_output2+0x203/0x1fe0 [ 1951.877603] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1951.878207] neigh_connected_output+0x382/0x4d0 [ 1951.878739] ip6_finish_output2+0xaaf/0x1fe0 [ 1951.879253] __ip6_finish_output.part.0+0x4f7/0xb50 [ 1951.879815] ip6_output+0x3aa/0x7e0 [ 1951.880227] ip6_local_out+0xb4/0x1a0 [ 1951.880664] ip6_send_skb+0xb7/0x350 [ 1951.881100] udp_v6_send_skb+0x7aa/0x15b0 [ 1951.881588] udpv6_sendmsg+0x2113/0x2af0 [ 1951.882033] ? ip_frag_init+0x350/0x350 [ 1951.882491] ? udp_v6_push_pending_frames+0x360/0x360 [ 1951.883062] ? _down_write_nest_lock+0x160/0x160 [ 1951.883594] ? vmacache_update+0xce/0x140 [ 1951.884072] ? do_user_addr_fault+0x5b0/0xc60 [ 1951.884598] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1951.885195] ? asm_exc_page_fault+0x1e/0x30 [ 1951.885684] ? sock_has_perm+0x1ea/0x280 [ 1951.886165] ? __import_iovec+0x458/0x590 [ 1951.886627] ? udp_v6_push_pending_frames+0x360/0x360 [ 1951.887210] inet6_sendmsg+0x105/0x140 [ 1951.887642] ? inet6_compat_ioctl+0x320/0x320 [ 1951.888146] __sock_sendmsg+0xf2/0x190 [ 1951.888582] ____sys_sendmsg+0x334/0x870 [ 1951.889054] ? sock_write_iter+0x3d0/0x3d0 [ 1951.889533] ? do_recvmmsg+0x6d0/0x6d0 [ 1951.889975] ? perf_trace_lock+0xac/0x490 [ 1951.890437] ? __lockdep_reset_lock+0x180/0x180 [ 1951.890964] ? perf_trace_lock+0xac/0x490 [ 1951.891423] ___sys_sendmsg+0xf3/0x170 [ 1951.891870] ? sendmsg_copy_msghdr+0x160/0x160 [ 1951.892384] ? __fget_files+0x26d/0x4c0 [ 1951.892826] ? lock_downgrade+0x6d0/0x6d0 [ 1951.893301] ? lock_downgrade+0x6d0/0x6d0 [ 1951.893783] ? __fget_files+0x296/0x4c0 [ 1951.894247] ? __fget_light+0xea/0x290 [ 1951.894700] __sys_sendmmsg+0x195/0x470 [ 1951.895158] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1951.895638] ? lock_downgrade+0x6d0/0x6d0 [ 1951.896118] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1951.896667] ? wait_for_completion_io+0x270/0x270 [ 1951.897213] ? rcu_read_lock_any_held+0x75/0xa0 [ 1951.897742] ? vfs_write+0x354/0xa70 [ 1951.898159] ? fput_many+0x2f/0x1a0 [ 1951.898573] ? ksys_write+0x1a9/0x260 [ 1951.899019] ? __ia32_sys_read+0xb0/0xb0 [ 1951.899480] __x64_sys_sendmmsg+0x99/0x100 [ 1951.899968] do_syscall_64+0x33/0x40 [ 1951.900382] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1951.900961] RIP: 0033:0x7f5519312b19 [ 1951.901394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.903445] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1951.904286] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 1951.905095] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1951.905866] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1951.906661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1951.907448] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 21:59:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 8) 21:59:08 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') chmod(&(0x7f0000000140)='./file0\x00', 0x80) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="0567dc0100ff00003c00f177000000000000000000005aed97e1000000000000"]) setresuid(0xffffffffffffffff, r1, 0x0) r2 = fork() tkill(r2, 0x2e) tkill(r2, 0x14) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x1, 0x80, 0xb0, 0x80, 0x0, 0x3f, 0x0, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x9}, 0x400, 0x7, 0x7f, 0x4, 0x23, 0x5, 0xe513, 0x0, 0x8b5, 0x0, 0x1}, r2, 0xf, 0xffffffffffffffff, 0x9) wait4(r2, 0x0, 0x2, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000480)="af", 0x1, 0x1000000) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0x78) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x7f, 0x3, 0x0, 0x400000000000003, 0x10004, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x7f, 0x364a}, 0x900, 0x3, 0xbd4c, 0x0, 0x7ff, 0xffff, 0x6, 0x0, 0x7fff, 0x0, 0x4}, r2, 0x5, r3, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@remote, 0x7}) 21:59:08 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 21:59:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:59:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c", 0x22}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:59:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 30) 21:59:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1969.069046] FAULT_INJECTION: forcing a failure. [ 1969.069046] name failslab, interval 1, probability 0, space 0, times 0 [ 1969.071411] CPU: 0 PID: 11946 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1969.072838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1969.074553] Call Trace: [ 1969.075107] dump_stack+0x107/0x167 [ 1969.075867] should_fail.cold+0x5/0xa [ 1969.076649] ? __alloc_skb+0x6d/0x5b0 [ 1969.077438] should_failslab+0x5/0x20 [ 1969.078226] kmem_cache_alloc_node+0x55/0x330 21:59:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1969.079187] __alloc_skb+0x6d/0x5b0 [ 1969.080018] alloc_skb_with_frags+0x92/0x570 [ 1969.080950] ? find_held_lock+0x2c/0x110 [ 1969.081826] sock_alloc_send_pskb+0x7af/0x930 [ 1969.082793] ? sk_alloc+0x350/0x350 [ 1969.083584] ? perf_trace_lock+0xac/0x490 [ 1969.084461] ? SOFTIRQ_verbose+0x10/0x10 [ 1969.085317] ? lock_chain_count+0x20/0x20 [ 1969.086197] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1969.087269] ? ip6_mtu+0x1bb/0x3d0 [ 1969.088014] ? lock_downgrade+0x6d0/0x6d0 [ 1969.088887] ? ip_frag_init+0x350/0x350 [ 1969.089747] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1969.090722] ? ip6_mtu+0x1e9/0x3d0 [ 1969.091486] ? ip6_setup_cork+0xfb7/0x1740 [ 1969.092379] ip6_make_skb+0x2de/0x4e0 [ 1969.093171] ? ip_frag_init+0x350/0x350 [ 1969.094021] ? ip_frag_init+0x350/0x350 [ 1969.094869] ? ip6_push_pending_frames+0xf0/0xf0 [ 1969.095875] ? ip6_dst_hoplimit+0x199/0x440 [ 1969.096767] ? lock_downgrade+0x6d0/0x6d0 [ 1969.097634] udpv6_sendmsg+0x20d0/0x2af0 [ 1969.098476] ? ip_frag_init+0x350/0x350 [ 1969.099320] ? udp_v6_push_pending_frames+0x360/0x360 [ 1969.100373] ? __lockdep_reset_lock+0x180/0x180 [ 1969.101349] ? __lockdep_reset_lock+0x180/0x180 [ 1969.102321] ? lock_acquire+0x197/0x470 [ 1969.103151] ? find_held_lock+0x2c/0x110 [ 1969.104018] ? sock_has_perm+0x1ea/0x280 [ 1969.104884] ? __import_iovec+0x458/0x590 [ 1969.105743] ? udp_v6_push_pending_frames+0x360/0x360 [ 1969.106806] inet6_sendmsg+0x105/0x140 [ 1969.107613] ? inet6_compat_ioctl+0x320/0x320 [ 1969.108542] __sock_sendmsg+0xf2/0x190 [ 1969.109341] ____sys_sendmsg+0x334/0x870 [ 1969.110184] ? sock_write_iter+0x3d0/0x3d0 [ 1969.111075] ? do_recvmmsg+0x6d0/0x6d0 [ 1969.111891] ? __lock_acquire+0x1657/0x5b00 [ 1969.112789] ___sys_sendmsg+0xf3/0x170 [ 1969.113615] ? sendmsg_copy_msghdr+0x160/0x160 [ 1969.114549] ? vmacache_find+0x55/0x2a0 [ 1969.115397] ? __lockdep_reset_lock+0x180/0x180 [ 1969.116385] ? lock_acquire+0x197/0x470 [ 1969.117195] ? find_held_lock+0x2c/0x110 [ 1969.118051] ? __might_fault+0xd3/0x180 [ 1969.118862] ? lock_downgrade+0x6d0/0x6d0 [ 1969.119731] ? asm_exc_page_fault+0x1e/0x30 [ 1969.120664] __sys_sendmmsg+0x195/0x470 [ 1969.121509] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1969.122410] ? lock_downgrade+0x6d0/0x6d0 [ 1969.123325] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1969.124344] ? wait_for_completion_io+0x270/0x270 [ 1969.125366] ? rcu_read_lock_any_held+0x75/0xa0 [ 1969.126341] ? vfs_write+0x354/0xa70 [ 1969.127132] ? fput_many+0x2f/0x1a0 [ 1969.127893] ? ksys_write+0x1a9/0x260 [ 1969.128690] ? __ia32_sys_read+0xb0/0xb0 [ 1969.129531] __x64_sys_sendmmsg+0x99/0x100 [ 1969.130430] do_syscall_64+0x33/0x40 [ 1969.131219] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1969.131659] FAULT_INJECTION: forcing a failure. [ 1969.131659] name failslab, interval 1, probability 0, space 0, times 0 [ 1969.132278] RIP: 0033:0x7fd6f698fb19 [ 1969.132298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1969.132315] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1969.139903] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1969.141384] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1969.142856] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1969.144347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1969.145827] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 [ 1969.147359] CPU: 1 PID: 11952 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 1969.148282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1969.149369] Call Trace: [ 1969.149748] dump_stack+0x107/0x167 [ 1969.150222] should_fail.cold+0x5/0xa [ 1969.150718] ? create_object.isra.0+0x3a/0xa20 [ 1969.151319] should_failslab+0x5/0x20 [ 1969.151799] kmem_cache_alloc+0x5b/0x310 [ 1969.152318] ? lock_acquire+0x197/0x470 [ 1969.152816] create_object.isra.0+0x3a/0xa20 [ 1969.153368] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1969.154008] kmem_cache_alloc+0x159/0x310 [ 1969.154535] skb_clone+0x14f/0x3d0 [ 1969.154983] dev_queue_xmit_nit+0x3a7/0xb00 [ 1969.155536] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1969.156126] dev_hard_start_xmit+0xab/0x6f0 [ 1969.156699] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1969.157407] __dev_queue_xmit+0x17ec/0x2710 [ 1969.157973] ? find_held_lock+0x2c/0x110 [ 1969.158501] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1969.159110] ? lock_downgrade+0x6d0/0x6d0 [ 1969.159658] ? lock_acquire+0x197/0x470 [ 1969.160177] ? ip6_finish_output2+0x203/0x1fe0 [ 1969.160774] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1969.161471] neigh_connected_output+0x382/0x4d0 [ 1969.162084] ip6_finish_output2+0xaaf/0x1fe0 [ 1969.162662] __ip6_finish_output.part.0+0x4f7/0xb50 [ 1969.163337] ip6_output+0x3aa/0x7e0 [ 1969.163818] ip6_local_out+0xb4/0x1a0 [ 1969.164321] ip6_send_skb+0xb7/0x350 [ 1969.164819] udp_v6_send_skb+0x7aa/0x15b0 [ 1969.165378] udpv6_sendmsg+0x2113/0x2af0 [ 1969.165919] ? ip_frag_init+0x350/0x350 [ 1969.166445] ? udp_v6_push_pending_frames+0x360/0x360 [ 1969.167135] ? _down_write_nest_lock+0x160/0x160 [ 1969.167771] ? vmacache_update+0xce/0x140 [ 1969.168316] ? do_user_addr_fault+0x5b0/0xc60 [ 1969.168918] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1969.169603] ? asm_exc_page_fault+0x1e/0x30 [ 1969.170180] ? sock_has_perm+0x1ea/0x280 [ 1969.170730] ? __import_iovec+0x458/0x590 [ 1969.171284] ? udp_v6_push_pending_frames+0x360/0x360 [ 1969.171953] inet6_sendmsg+0x105/0x140 [ 1969.172463] ? inet6_compat_ioctl+0x320/0x320 [ 1969.173054] __sock_sendmsg+0xf2/0x190 [ 1969.173559] ____sys_sendmsg+0x334/0x870 [ 1969.174092] ? sock_write_iter+0x3d0/0x3d0 [ 1969.174641] ? do_recvmmsg+0x6d0/0x6d0 [ 1969.175157] ? perf_trace_lock+0xac/0x490 [ 1969.175713] ? __lockdep_reset_lock+0x180/0x180 [ 1969.176313] ? perf_trace_lock+0xac/0x490 [ 1969.176862] ___sys_sendmsg+0xf3/0x170 [ 1969.177378] ? sendmsg_copy_msghdr+0x160/0x160 [ 1969.177972] ? __fget_files+0x26d/0x4c0 [ 1969.178493] ? lock_downgrade+0x6d0/0x6d0 [ 1969.179033] ? lock_downgrade+0x6d0/0x6d0 [ 1969.179590] ? __fget_files+0x296/0x4c0 [ 1969.180112] ? __fget_light+0xea/0x290 [ 1969.180622] __sys_sendmmsg+0x195/0x470 [ 1969.181146] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1969.181696] ? lock_downgrade+0x6d0/0x6d0 [ 1969.182256] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1969.182884] ? wait_for_completion_io+0x270/0x270 [ 1969.183518] ? rcu_read_lock_any_held+0x75/0xa0 [ 1969.184117] ? vfs_write+0x354/0xa70 [ 1969.184616] ? fput_many+0x2f/0x1a0 [ 1969.185090] ? ksys_write+0x1a9/0x260 [ 1969.185595] ? __ia32_sys_read+0xb0/0xb0 [ 1969.186137] __x64_sys_sendmmsg+0x99/0x100 [ 1969.186697] do_syscall_64+0x33/0x40 [ 1969.187198] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1969.187868] RIP: 0033:0x7f5519312b19 [ 1969.188354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1969.190731] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1969.191722] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 1969.192646] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1969.193543] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1969.194480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1969.195396] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 21:59:08 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 21:59:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:59:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:59:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c", 0x22}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:59:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 31) 21:59:24 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') chmod(&(0x7f0000000140)='./file0\x00', 0x80) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="0567dc0100ff00003c00f177000000000000000000005aed97e1000000000000"]) setresuid(0xffffffffffffffff, r1, 0x0) r2 = fork() tkill(r2, 0x2e) tkill(r2, 0x14) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x1, 0x80, 0xb0, 0x80, 0x0, 0x3f, 0x0, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x9}, 0x400, 0x7, 0x7f, 0x4, 0x23, 0x5, 0xe513, 0x0, 0x8b5, 0x0, 0x1}, r2, 0xf, 0xffffffffffffffff, 0x9) wait4(r2, 0x0, 0x2, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000480)="af", 0x1, 0x1000000) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0x78) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x7f, 0x3, 0x0, 0x400000000000003, 0x10004, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x7f, 0x364a}, 0x900, 0x3, 0xbd4c, 0x0, 0x7ff, 0xffff, 0x6, 0x0, 0x7fff, 0x0, 0x4}, r2, 0x5, r3, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@remote, 0x7}) 21:59:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 9) 21:59:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c", 0x22}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:59:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1984.595628] FAULT_INJECTION: forcing a failure. [ 1984.595628] name failslab, interval 1, probability 0, space 0, times 0 [ 1984.597103] CPU: 0 PID: 11980 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1984.597921] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1984.598903] Call Trace: [ 1984.599218] dump_stack+0x107/0x167 [ 1984.599671] should_fail.cold+0x5/0xa [ 1984.600119] ? create_object.isra.0+0x3a/0xa20 [ 1984.600668] should_failslab+0x5/0x20 [ 1984.601112] kmem_cache_alloc+0x5b/0x310 [ 1984.601592] create_object.isra.0+0x3a/0xa20 [ 1984.602089] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1984.602680] kmem_cache_alloc_node+0x169/0x330 [ 1984.603210] __alloc_skb+0x6d/0x5b0 [ 1984.603639] alloc_skb_with_frags+0x92/0x570 [ 1984.604142] ? find_held_lock+0x2c/0x110 [ 1984.604613] sock_alloc_send_pskb+0x7af/0x930 [ 1984.605146] ? sk_alloc+0x350/0x350 [ 1984.605606] ? perf_trace_lock+0xac/0x490 [ 1984.606124] ? SOFTIRQ_verbose+0x10/0x10 [ 1984.606633] ? lock_chain_count+0x20/0x20 [ 1984.607176] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1984.607816] ? ip6_mtu+0x1bb/0x3d0 [ 1984.607948] FAULT_INJECTION: forcing a failure. [ 1984.607948] name failslab, interval 1, probability 0, space 0, times 0 [ 1984.608247] ? lock_downgrade+0x6d0/0x6d0 [ 1984.608256] ? ip_frag_init+0x350/0x350 [ 1984.608276] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1984.608287] ? ip6_mtu+0x1e9/0x3d0 [ 1984.608299] ? ip6_setup_cork+0xfb7/0x1740 [ 1984.608313] ip6_make_skb+0x2de/0x4e0 [ 1984.608322] ? ip_frag_init+0x350/0x350 [ 1984.608335] ? ip_frag_init+0x350/0x350 [ 1984.608349] ? ip6_push_pending_frames+0xf0/0xf0 [ 1984.608371] ? ip6_dst_hoplimit+0x199/0x440 [ 1984.615510] ? lock_downgrade+0x6d0/0x6d0 [ 1984.616034] udpv6_sendmsg+0x20d0/0x2af0 [ 1984.616552] ? ip_frag_init+0x350/0x350 [ 1984.617034] ? udp_v6_push_pending_frames+0x360/0x360 [ 1984.617678] ? __lockdep_reset_lock+0x180/0x180 [ 1984.618268] ? __lockdep_reset_lock+0x180/0x180 [ 1984.618844] ? lock_acquire+0x197/0x470 [ 1984.619359] ? find_held_lock+0x2c/0x110 [ 1984.619866] ? sock_has_perm+0x1ea/0x280 [ 1984.620379] ? __import_iovec+0x458/0x590 [ 1984.620891] ? udp_v6_push_pending_frames+0x360/0x360 [ 1984.621529] inet6_sendmsg+0x105/0x140 [ 1984.622001] ? inet6_compat_ioctl+0x320/0x320 [ 1984.622548] __sock_sendmsg+0xf2/0x190 [ 1984.623016] ____sys_sendmsg+0x334/0x870 [ 1984.623528] ? sock_write_iter+0x3d0/0x3d0 [ 1984.624050] ? do_recvmmsg+0x6d0/0x6d0 [ 1984.624537] ? __lock_acquire+0x1657/0x5b00 [ 1984.625067] ___sys_sendmsg+0xf3/0x170 [ 1984.625546] ? sendmsg_copy_msghdr+0x160/0x160 [ 1984.626099] ? vmacache_find+0x55/0x2a0 [ 1984.626600] ? __lockdep_reset_lock+0x180/0x180 [ 1984.627183] ? lock_acquire+0x197/0x470 [ 1984.627688] ? find_held_lock+0x2c/0x110 [ 1984.628185] ? __might_fault+0xd3/0x180 [ 1984.628688] ? lock_downgrade+0x6d0/0x6d0 [ 1984.629190] ? asm_exc_page_fault+0x1e/0x30 [ 1984.629745] __sys_sendmmsg+0x195/0x470 [ 1984.630240] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1984.630779] ? lock_downgrade+0x6d0/0x6d0 [ 1984.631288] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1984.631880] ? wait_for_completion_io+0x270/0x270 [ 1984.632450] ? rcu_read_lock_any_held+0x75/0xa0 [ 1984.633011] ? vfs_write+0x354/0xa70 [ 1984.633467] ? fput_many+0x2f/0x1a0 [ 1984.633916] ? ksys_write+0x1a9/0x260 [ 1984.634382] ? __ia32_sys_read+0xb0/0xb0 [ 1984.634879] __x64_sys_sendmmsg+0x99/0x100 [ 1984.635410] do_syscall_64+0x33/0x40 [ 1984.635868] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1984.636499] RIP: 0033:0x7fd6f698fb19 [ 1984.636946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1984.639184] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1984.640122] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1984.640988] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1984.641851] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1984.642681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1984.643554] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 [ 1984.644510] CPU: 1 PID: 11977 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 1984.645902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1984.647582] Call Trace: [ 1984.648116] dump_stack+0x107/0x167 [ 1984.648855] should_fail.cold+0x5/0xa [ 1984.649622] ? create_object.isra.0+0x3a/0xa20 [ 1984.650537] should_failslab+0x5/0x20 [ 1984.651307] kmem_cache_alloc+0x5b/0x310 [ 1984.652126] create_object.isra.0+0x3a/0xa20 21:59:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:59:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:59:24 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 1984.653006] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1984.654150] kmem_cache_alloc+0x159/0x310 [ 1984.655027] skb_clone+0x14f/0x3d0 [ 1984.655787] packet_rcv+0x558/0x1410 [ 1984.656561] packet_rcv_fanout+0x278/0x9d0 [ 1984.657434] ? packet_getname_spkt+0x300/0x300 [ 1984.658369] dev_queue_xmit_nit+0x38b/0xb00 [ 1984.659264] dev_hard_start_xmit+0xab/0x6f0 [ 1984.660182] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1984.661260] __dev_queue_xmit+0x17ec/0x2710 [ 1984.662151] ? find_held_lock+0x2c/0x110 [ 1984.662984] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1984.663936] ? lock_downgrade+0x6d0/0x6d0 [ 1984.664773] ? lock_acquire+0x197/0x470 [ 1984.665575] ? ip6_finish_output2+0x203/0x1fe0 [ 1984.666513] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1984.667585] neigh_connected_output+0x382/0x4d0 [ 1984.668551] ip6_finish_output2+0xaaf/0x1fe0 [ 1984.669461] __ip6_finish_output.part.0+0x4f7/0xb50 [ 1984.670474] ip6_output+0x3aa/0x7e0 [ 1984.671218] ip6_local_out+0xb4/0x1a0 [ 1984.671993] ip6_send_skb+0xb7/0x350 [ 1984.672756] udp_v6_send_skb+0x7aa/0x15b0 [ 1984.673600] udpv6_sendmsg+0x2113/0x2af0 [ 1984.674417] ? ip_frag_init+0x350/0x350 [ 1984.675258] ? udp_v6_push_pending_frames+0x360/0x360 [ 1984.676293] ? _down_write_nest_lock+0x160/0x160 [ 1984.677259] ? vmacache_update+0xce/0x140 [ 1984.678098] ? do_user_addr_fault+0x5b0/0xc60 [ 1984.679018] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1984.680093] ? asm_exc_page_fault+0x1e/0x30 [ 1984.680981] ? sock_has_perm+0x1ea/0x280 [ 1984.681830] ? __import_iovec+0x458/0x590 [ 1984.682665] ? udp_v6_push_pending_frames+0x360/0x360 [ 1984.683738] inet6_sendmsg+0x105/0x140 [ 1984.684523] ? inet6_compat_ioctl+0x320/0x320 [ 1984.685445] __sock_sendmsg+0xf2/0x190 [ 1984.686227] ____sys_sendmsg+0x334/0x870 [ 1984.687054] ? sock_write_iter+0x3d0/0x3d0 [ 1984.687921] ? do_recvmmsg+0x6d0/0x6d0 [ 1984.688704] ? perf_trace_lock+0xac/0x490 [ 1984.689549] ? __lockdep_reset_lock+0x180/0x180 [ 1984.690481] ? perf_trace_lock+0xac/0x490 [ 1984.691324] ___sys_sendmsg+0xf3/0x170 [ 1984.692106] ? sendmsg_copy_msghdr+0x160/0x160 [ 1984.693022] ? __fget_files+0x26d/0x4c0 [ 1984.693814] ? lock_downgrade+0x6d0/0x6d0 [ 1984.694652] ? lock_downgrade+0x6d0/0x6d0 [ 1984.695503] ? __fget_files+0x296/0x4c0 [ 1984.696314] ? __fget_light+0xea/0x290 [ 1984.697101] __sys_sendmmsg+0x195/0x470 [ 1984.697902] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1984.698767] ? lock_downgrade+0x6d0/0x6d0 [ 1984.699665] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1984.700632] ? wait_for_completion_io+0x270/0x270 [ 1984.701603] ? rcu_read_lock_any_held+0x75/0xa0 [ 1984.702532] ? vfs_write+0x354/0xa70 [ 1984.703301] ? fput_many+0x2f/0x1a0 [ 1984.704068] ? ksys_write+0x1a9/0x260 [ 1984.704832] ? __ia32_sys_read+0xb0/0xb0 [ 1984.705672] __x64_sys_sendmmsg+0x99/0x100 [ 1984.706539] do_syscall_64+0x33/0x40 [ 1984.707310] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1984.708359] RIP: 0033:0x7f5519312b19 [ 1984.709103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1984.712751] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1984.714262] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 1984.715687] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1984.717103] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1984.718518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1984.719951] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 21:59:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:59:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 32) 21:59:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:59:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:59:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c37", 0x23}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:59:24 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 1) [ 1984.849527] FAULT_INJECTION: forcing a failure. [ 1984.849527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1984.850093] FAULT_INJECTION: forcing a failure. [ 1984.850093] name failslab, interval 1, probability 0, space 0, times 0 [ 1984.851014] CPU: 0 PID: 11996 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1984.853879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1984.854770] Call Trace: [ 1984.855070] dump_stack+0x107/0x167 [ 1984.855497] should_fail.cold+0x5/0xa [ 1984.855915] _copy_from_user+0x2e/0x1b0 [ 1984.856351] __copy_msghdr_from_user+0x91/0x4b0 [ 1984.856862] ? __ia32_sys_shutdown+0x80/0x80 [ 1984.857348] ? __lock_acquire+0xbb1/0x5b00 [ 1984.857816] sendmsg_copy_msghdr+0xa1/0x160 [ 1984.858293] ? do_recvmmsg+0x6d0/0x6d0 [ 1984.858712] ? perf_trace_lock+0xac/0x490 [ 1984.859168] ? SOFTIRQ_verbose+0x10/0x10 [ 1984.859617] ? __lockdep_reset_lock+0x180/0x180 [ 1984.860124] ? perf_trace_lock+0xac/0x490 [ 1984.860578] ___sys_sendmsg+0xc6/0x170 [ 1984.861005] ? sendmsg_copy_msghdr+0x160/0x160 [ 1984.861525] ? __fget_files+0x26d/0x4c0 [ 1984.861966] ? lock_downgrade+0x6d0/0x6d0 [ 1984.862432] ? lock_downgrade+0x6d0/0x6d0 [ 1984.862905] ? __fget_files+0x296/0x4c0 [ 1984.863369] ? __fget_light+0xea/0x290 [ 1984.863803] __sys_sendmmsg+0x195/0x470 [ 1984.864232] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1984.864723] ? lock_downgrade+0x6d0/0x6d0 [ 1984.865186] ? ksys_write+0x12d/0x260 [ 1984.865607] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1984.866146] ? wait_for_completion_io+0x270/0x270 [ 1984.866699] ? rcu_read_lock_any_held+0x75/0xa0 [ 1984.867221] ? vfs_write+0x354/0xa70 [ 1984.867660] ? fput_many+0x2f/0x1a0 [ 1984.868071] ? ksys_write+0x1a9/0x260 [ 1984.868495] ? __ia32_sys_read+0xb0/0xb0 [ 1984.868954] __x64_sys_sendmmsg+0x99/0x100 [ 1984.869427] do_syscall_64+0x33/0x40 [ 1984.869843] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1984.870408] RIP: 0033:0x7f8ee15a0b19 [ 1984.870820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1984.872846] RSP: 002b:00007f8edeb16188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1984.873696] RAX: ffffffffffffffda RBX: 00007f8ee16b3f60 RCX: 00007f8ee15a0b19 [ 1984.874489] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1984.875288] RBP: 00007f8edeb161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1984.876077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1984.876862] R13: 00007ffda1f41f5f R14: 00007f8edeb16300 R15: 0000000000022000 [ 1984.877675] CPU: 1 PID: 11994 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1984.879091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1984.880767] Call Trace: [ 1984.881302] dump_stack+0x107/0x167 [ 1984.882043] should_fail.cold+0x5/0xa [ 1984.882826] should_failslab+0x5/0x20 [ 1984.883642] __kmalloc_node_track_caller+0x74/0x3b0 [ 1984.884685] ? alloc_skb_with_frags+0x92/0x570 [ 1984.885630] __alloc_skb+0xb1/0x5b0 [ 1984.886380] alloc_skb_with_frags+0x92/0x570 [ 1984.887304] ? find_held_lock+0x2c/0x110 [ 1984.888159] sock_alloc_send_pskb+0x7af/0x930 [ 1984.889097] ? sk_alloc+0x350/0x350 [ 1984.889855] ? perf_trace_lock+0xac/0x490 [ 1984.890705] ? SOFTIRQ_verbose+0x10/0x10 [ 1984.891561] ? lock_chain_count+0x20/0x20 [ 1984.892427] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1984.893466] ? ip6_mtu+0x1bb/0x3d0 [ 1984.894191] ? lock_downgrade+0x6d0/0x6d0 [ 1984.895024] ? ip_frag_init+0x350/0x350 [ 1984.895850] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1984.896795] ? ip6_mtu+0x1e9/0x3d0 [ 1984.897515] ? ip6_setup_cork+0xfb7/0x1740 [ 1984.898377] ip6_make_skb+0x2de/0x4e0 [ 1984.899150] ? ip_frag_init+0x350/0x350 [ 1984.899966] ? ip_frag_init+0x350/0x350 [ 1984.900781] ? ip6_push_pending_frames+0xf0/0xf0 [ 1984.901744] ? ip6_dst_hoplimit+0x199/0x440 [ 1984.902621] ? lock_downgrade+0x6d0/0x6d0 [ 1984.903504] udpv6_sendmsg+0x20d0/0x2af0 [ 1984.904329] ? ip_frag_init+0x350/0x350 [ 1984.905148] ? udp_v6_push_pending_frames+0x360/0x360 [ 1984.906189] ? __lockdep_reset_lock+0x180/0x180 [ 1984.907140] ? __lockdep_reset_lock+0x180/0x180 [ 1984.908102] ? lock_acquire+0x197/0x470 [ 1984.908901] ? find_held_lock+0x2c/0x110 [ 1984.909737] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1984.910829] ? sock_has_perm+0x1ea/0x280 [ 1984.911696] ? __import_iovec+0x458/0x590 [ 1984.912529] ? udp_v6_push_pending_frames+0x360/0x360 [ 1984.913580] inet6_sendmsg+0x105/0x140 [ 1984.914368] ? inet6_compat_ioctl+0x320/0x320 [ 1984.915272] __sock_sendmsg+0xf2/0x190 [ 1984.916056] ____sys_sendmsg+0x334/0x870 [ 1984.916874] ? sock_write_iter+0x3d0/0x3d0 [ 1984.917722] ? do_recvmmsg+0x6d0/0x6d0 [ 1984.918508] ? __lock_acquire+0x1657/0x5b00 [ 1984.919404] ___sys_sendmsg+0xf3/0x170 [ 1984.920192] ? sendmsg_copy_msghdr+0x160/0x160 [ 1984.921112] ? vmacache_find+0x55/0x2a0 [ 1984.921916] ? __lockdep_reset_lock+0x180/0x180 [ 1984.922866] ? lock_acquire+0x197/0x470 [ 1984.923680] ? find_held_lock+0x2c/0x110 [ 1984.924501] ? __might_fault+0xd3/0x180 [ 1984.925305] ? lock_downgrade+0x6d0/0x6d0 [ 1984.926143] ? asm_exc_page_fault+0x1e/0x30 [ 1984.927037] __sys_sendmmsg+0x195/0x470 [ 1984.927851] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1984.928718] ? lock_downgrade+0x6d0/0x6d0 [ 1984.929576] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1984.930560] ? wait_for_completion_io+0x270/0x270 [ 1984.931557] ? rcu_read_lock_any_held+0x75/0xa0 [ 1984.932510] ? vfs_write+0x354/0xa70 [ 1984.933278] ? fput_many+0x2f/0x1a0 [ 1984.934018] ? ksys_write+0x1a9/0x260 [ 1984.934794] ? __ia32_sys_read+0xb0/0xb0 [ 1984.935644] __x64_sys_sendmmsg+0x99/0x100 [ 1984.936506] do_syscall_64+0x33/0x40 [ 1984.937280] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1984.938312] RIP: 0033:0x7fd6f698fb19 [ 1984.939059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1984.942776] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1984.944329] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 1984.945771] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1984.947213] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1984.948661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1984.950096] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:59:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 21:59:24 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 2) 21:59:24 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) [ 1985.058811] FAULT_INJECTION: forcing a failure. [ 1985.058811] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.061650] CPU: 1 PID: 12007 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1985.063055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1985.064745] Call Trace: [ 1985.065280] dump_stack+0x107/0x167 [ 1985.066022] should_fail.cold+0x5/0xa [ 1985.066798] ? __alloc_skb+0x6d/0x5b0 [ 1985.067596] should_failslab+0x5/0x20 [ 1985.068368] kmem_cache_alloc_node+0x55/0x330 [ 1985.069296] __alloc_skb+0x6d/0x5b0 [ 1985.070041] alloc_skb_with_frags+0x92/0x570 [ 1985.070938] ? mark_lock+0xf5/0x2df0 [ 1985.071703] ? lock_acquire+0x197/0x470 [ 1985.072517] sock_alloc_send_pskb+0x7af/0x930 [ 1985.073435] ? sk_alloc+0x350/0x350 [ 1985.074180] ? perf_trace_lock+0xac/0x490 [ 1985.075012] ? SOFTIRQ_verbose+0x10/0x10 [ 1985.075845] ? lock_chain_count+0x20/0x20 [ 1985.076686] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1985.077710] ? ip6_mtu+0x1bb/0x3d0 [ 1985.078425] ? lock_downgrade+0x6d0/0x6d0 [ 1985.079284] ? ip_frag_init+0x350/0x350 [ 1985.080107] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1985.081048] ? ip6_mtu+0x1e9/0x3d0 [ 1985.081773] ? ip6_setup_cork+0xfb7/0x1740 [ 1985.082645] ip6_make_skb+0x2de/0x4e0 [ 1985.083422] ? ip_frag_init+0x350/0x350 [ 1985.084247] ? ip_frag_init+0x350/0x350 [ 1985.085057] ? ip6_push_pending_frames+0xf0/0xf0 [ 1985.086035] ? ip6_dst_hoplimit+0x199/0x440 [ 1985.086908] ? lock_downgrade+0x6d0/0x6d0 [ 1985.087780] udpv6_sendmsg+0x20d0/0x2af0 [ 1985.088606] ? ip_frag_init+0x350/0x350 [ 1985.089425] ? udp_v6_push_pending_frames+0x360/0x360 [ 1985.090468] ? _down_write_nest_lock+0x160/0x160 [ 1985.091439] ? vmacache_update+0xce/0x140 [ 1985.092299] ? do_user_addr_fault+0x5b0/0xc60 [ 1985.093206] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1985.094283] ? asm_exc_page_fault+0x1e/0x30 [ 1985.095159] ? sock_has_perm+0x1ea/0x280 [ 1985.096027] ? __import_iovec+0x458/0x590 [ 1985.096868] ? udp_v6_push_pending_frames+0x360/0x360 [ 1985.097913] inet6_sendmsg+0x105/0x140 [ 1985.098701] ? inet6_compat_ioctl+0x320/0x320 [ 1985.099609] __sock_sendmsg+0xf2/0x190 [ 1985.100398] ____sys_sendmsg+0x334/0x870 [ 1985.101225] ? sock_write_iter+0x3d0/0x3d0 [ 1985.102073] ? do_recvmmsg+0x6d0/0x6d0 [ 1985.102858] ? perf_trace_lock+0xac/0x490 [ 1985.103714] ? __lockdep_reset_lock+0x180/0x180 [ 1985.104655] ? perf_trace_lock+0xac/0x490 [ 1985.105504] ___sys_sendmsg+0xf3/0x170 [ 1985.106296] ? sendmsg_copy_msghdr+0x160/0x160 [ 1985.107225] ? __fget_files+0x26d/0x4c0 [ 1985.108046] ? lock_downgrade+0x6d0/0x6d0 [ 1985.108907] ? lock_downgrade+0x6d0/0x6d0 [ 1985.109746] ? __fget_files+0x296/0x4c0 [ 1985.110569] ? __fget_light+0xea/0x290 [ 1985.111372] __sys_sendmmsg+0x195/0x470 [ 1985.112196] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1985.113070] ? lock_downgrade+0x6d0/0x6d0 [ 1985.113938] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1985.114915] ? wait_for_completion_io+0x270/0x270 [ 1985.115902] ? rcu_read_lock_any_held+0x75/0xa0 [ 1985.116848] ? vfs_write+0x354/0xa70 [ 1985.117607] ? fput_many+0x2f/0x1a0 [ 1985.118354] ? ksys_write+0x1a9/0x260 [ 1985.119127] ? __ia32_sys_read+0xb0/0xb0 [ 1985.119986] __x64_sys_sendmmsg+0x99/0x100 [ 1985.120851] do_syscall_64+0x33/0x40 [ 1985.121613] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1985.122647] RIP: 0033:0x7f8ee15a0b19 [ 1985.123416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1985.127070] RSP: 002b:00007f8edeb16188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1985.128598] RAX: ffffffffffffffda RBX: 00007f8ee16b3f60 RCX: 00007f8ee15a0b19 [ 1985.130019] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1985.131457] RBP: 00007f8edeb161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1985.132877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1985.134300] R13: 00007ffda1f41f5f R14: 00007f8edeb16300 R15: 0000000000022000 21:59:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:59:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 33) 21:59:41 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 3) [ 2001.784500] FAULT_INJECTION: forcing a failure. 21:59:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000480)="af", 0x1, 0x1000000) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0x78) io_uring_enter(r1, 0x60a2, 0xaa03, 0x1, &(0x7f0000000100)={[0xfffffffffffffffb]}, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000540)='./file0\x00', 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r6, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]]}, 0x34}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'vlan1\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES32=r8, @ANYRESDEC=r3, @ANYRES32, @ANYBLOB="c96f19de8c5de4832662090e02f6010ca2ecf8c44efb47a796d74f9d53502a56d410c7492a47e039fa8aaf04d1de88c2529cd64bce7706b565449daaa5d23d207e471fbadde1435500d083c6edad3927d1775624a43e07689f7bbd821174b429d5342d41e33fc112d7333e764182076079a2acff4c925cb0226b60342c78ed0b70d0d4f855df68bdbbf88d82e7fb402597ac51c6a38eb00d27488eb840e0180918c5ffcd9033d31b4c9be2f636be2eb3c75bfa11f58d83003a61369e0000000000", @ANYRESHEX=r0, @ANYRESDEC, @ANYBLOB="a99c76d316149599336120081b4e5def127f6ae72dbce226cad6a9c0564ce5dbdba126b533307616c7bb70c85cfedb03a2cd0271fae7"], 0xfdef) io_destroy(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext, 0x40500, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x3, 0x3, 0x8000008000) [ 2001.784500] name failslab, interval 1, probability 0, space 0, times 0 [ 2001.787252] CPU: 1 PID: 12016 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2001.788795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2001.790617] Call Trace: [ 2001.791201] dump_stack+0x107/0x167 [ 2001.792026] should_fail.cold+0x5/0xa [ 2001.792889] should_failslab+0x5/0x20 21:59:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 2001.793737] __kmalloc_node_track_caller+0x74/0x3b0 [ 2001.794905] ? alloc_skb_with_frags+0x92/0x570 [ 2001.795934] __alloc_skb+0xb1/0x5b0 [ 2001.796755] alloc_skb_with_frags+0x92/0x570 [ 2001.797721] ? find_held_lock+0x2c/0x110 [ 2001.798632] sock_alloc_send_pskb+0x7af/0x930 [ 2001.799723] ? sk_alloc+0x350/0x350 [ 2001.800656] ? perf_trace_lock+0xac/0x490 21:59:41 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c37", 0x23}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:59:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 10) [ 2001.801700] ? SOFTIRQ_verbose+0x10/0x10 [ 2001.802862] ? lock_chain_count+0x20/0x20 [ 2001.803856] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2001.804978] ? ip6_mtu+0x1bb/0x3d0 [ 2001.805765] ? lock_downgrade+0x6d0/0x6d0 [ 2001.806690] ? ip_frag_init+0x350/0x350 [ 2001.807524] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2001.808501] ? ip6_mtu+0x1e9/0x3d0 [ 2001.809278] ? ip6_setup_cork+0xfb7/0x1740 [ 2001.810223] ip6_make_skb+0x2de/0x4e0 21:59:41 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) [ 2001.811058] ? ip_frag_init+0x350/0x350 [ 2001.812062] ? ip_frag_init+0x350/0x350 [ 2001.812958] ? ip6_push_pending_frames+0xf0/0xf0 [ 2001.814010] ? ip6_dst_hoplimit+0x199/0x440 [ 2001.814956] ? lock_downgrade+0x6d0/0x6d0 [ 2001.815903] udpv6_sendmsg+0x20d0/0x2af0 [ 2001.816817] ? ip_frag_init+0x350/0x350 [ 2001.817713] ? udp_v6_push_pending_frames+0x360/0x360 [ 2001.818847] ? __lockdep_reset_lock+0x180/0x180 [ 2001.819910] ? __lockdep_reset_lock+0x180/0x180 [ 2001.820890] ? lock_acquire+0x197/0x470 [ 2001.821735] ? find_held_lock+0x2c/0x110 [ 2001.822642] ? sock_has_perm+0x1ea/0x280 [ 2001.823551] ? __import_iovec+0x458/0x590 [ 2001.824442] ? udp_v6_push_pending_frames+0x360/0x360 [ 2001.825539] inet6_sendmsg+0x105/0x140 [ 2001.826342] ? inet6_compat_ioctl+0x320/0x320 [ 2001.827268] __sock_sendmsg+0xf2/0x190 [ 2001.828109] ____sys_sendmsg+0x334/0x870 [ 2001.828985] ? sock_write_iter+0x3d0/0x3d0 [ 2001.829873] ? do_recvmmsg+0x6d0/0x6d0 [ 2001.830735] ? __lock_acquire+0x1657/0x5b00 [ 2001.831688] ___sys_sendmsg+0xf3/0x170 [ 2001.832523] ? sendmsg_copy_msghdr+0x160/0x160 [ 2001.833507] ? vmacache_find+0x55/0x2a0 [ 2001.834351] ? __lockdep_reset_lock+0x180/0x180 [ 2001.835368] ? lock_acquire+0x197/0x470 [ 2001.835972] FAULT_INJECTION: forcing a failure. [ 2001.835972] name failslab, interval 1, probability 0, space 0, times 0 [ 2001.836254] ? find_held_lock+0x2c/0x110 [ 2001.836282] ? __might_fault+0xd3/0x180 [ 2001.836309] ? lock_downgrade+0x6d0/0x6d0 [ 2001.841361] ? asm_exc_page_fault+0x1e/0x30 [ 2001.842342] __sys_sendmmsg+0x195/0x470 [ 2001.843235] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2001.844147] ? lock_downgrade+0x6d0/0x6d0 [ 2001.845027] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2001.846064] ? wait_for_completion_io+0x270/0x270 [ 2001.847140] ? rcu_read_lock_any_held+0x75/0xa0 [ 2001.848187] ? vfs_write+0x354/0xa70 [ 2001.849009] ? fput_many+0x2f/0x1a0 [ 2001.849812] ? ksys_write+0x1a9/0x260 [ 2001.850654] ? __ia32_sys_read+0xb0/0xb0 [ 2001.851566] __x64_sys_sendmmsg+0x99/0x100 [ 2001.852498] do_syscall_64+0x33/0x40 [ 2001.853308] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2001.854453] RIP: 0033:0x7fd6f698fb19 [ 2001.855280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2001.859412] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2001.861119] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 2001.862719] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2001.864487] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 2001.866236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2001.868022] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 [ 2001.869806] CPU: 0 PID: 12024 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 2001.871246] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2001.872937] Call Trace: [ 2001.873485] dump_stack+0x107/0x167 [ 2001.874243] should_fail.cold+0x5/0xa [ 2001.875026] ? create_object.isra.0+0x3a/0xa20 [ 2001.875968] should_failslab+0x5/0x20 [ 2001.876749] kmem_cache_alloc+0x5b/0x310 [ 2001.877590] create_object.isra.0+0x3a/0xa20 [ 2001.878494] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2001.879578] kmem_cache_alloc_node+0x169/0x330 [ 2001.880530] __alloc_skb+0x6d/0x5b0 [ 2001.881294] alloc_skb_with_frags+0x92/0x570 [ 2001.882200] ? mark_lock+0xf5/0x2df0 [ 2001.882972] ? lock_acquire+0x197/0x470 [ 2001.883807] sock_alloc_send_pskb+0x7af/0x930 [ 2001.884760] ? sk_alloc+0x350/0x350 [ 2001.885521] ? perf_trace_lock+0xac/0x490 [ 2001.886383] ? SOFTIRQ_verbose+0x10/0x10 [ 2001.887235] ? lock_chain_count+0x20/0x20 [ 2001.888118] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2001.889156] ? ip6_mtu+0x1bb/0x3d0 [ 2001.889892] ? lock_downgrade+0x6d0/0x6d0 [ 2001.890757] ? ip_frag_init+0x350/0x350 [ 2001.891631] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2001.892587] ? ip6_mtu+0x1e9/0x3d0 [ 2001.893323] ? ip6_setup_cork+0xfb7/0x1740 [ 2001.894197] ip6_make_skb+0x2de/0x4e0 [ 2001.894972] ? ip_frag_init+0x350/0x350 [ 2001.895800] ? ip_frag_init+0x350/0x350 [ 2001.896624] ? ip6_push_pending_frames+0xf0/0xf0 [ 2001.897606] ? ip6_dst_hoplimit+0x199/0x440 [ 2001.898489] ? lock_downgrade+0x6d0/0x6d0 [ 2001.899378] udpv6_sendmsg+0x20d0/0x2af0 [ 2001.900247] ? ip_frag_init+0x350/0x350 [ 2001.901099] ? udp_v6_push_pending_frames+0x360/0x360 [ 2001.902187] ? _down_write_nest_lock+0x160/0x160 [ 2001.903190] ? vmacache_update+0xce/0x140 [ 2001.904073] ? do_user_addr_fault+0x5b0/0xc60 [ 2001.905025] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2001.906118] ? asm_exc_page_fault+0x1e/0x30 [ 2001.907035] ? sock_has_perm+0x1ea/0x280 [ 2001.907963] ? __import_iovec+0x458/0x590 [ 2001.908832] ? udp_v6_push_pending_frames+0x360/0x360 [ 2001.909888] inet6_sendmsg+0x105/0x140 [ 2001.910683] ? inet6_compat_ioctl+0x320/0x320 [ 2001.911766] __sock_sendmsg+0xf2/0x190 [ 2001.912568] ____sys_sendmsg+0x334/0x870 [ 2001.913406] ? sock_write_iter+0x3d0/0x3d0 [ 2001.914266] ? do_recvmmsg+0x6d0/0x6d0 [ 2001.915067] ? perf_trace_lock+0xac/0x490 [ 2001.915938] ? __lockdep_reset_lock+0x180/0x180 [ 2001.916885] ? perf_trace_lock+0xac/0x490 [ 2001.917744] ___sys_sendmsg+0xf3/0x170 [ 2001.918554] ? sendmsg_copy_msghdr+0x160/0x160 [ 2001.919504] ? __fget_files+0x26d/0x4c0 [ 2001.920332] ? lock_downgrade+0x6d0/0x6d0 [ 2001.921197] ? lock_downgrade+0x6d0/0x6d0 [ 2001.922051] ? __fget_files+0x296/0x4c0 [ 2001.922880] ? __fget_light+0xea/0x290 [ 2001.923707] __sys_sendmmsg+0x195/0x470 [ 2001.924537] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2001.925423] ? lock_downgrade+0x6d0/0x6d0 [ 2001.926303] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2001.927308] ? wait_for_completion_io+0x270/0x270 [ 2001.928337] ? rcu_read_lock_any_held+0x75/0xa0 [ 2001.929291] ? vfs_write+0x354/0xa70 [ 2001.930058] ? fput_many+0x2f/0x1a0 [ 2001.930797] ? ksys_write+0x1a9/0x260 [ 2001.931585] ? __ia32_sys_read+0xb0/0xb0 [ 2001.932420] __x64_sys_sendmmsg+0x99/0x100 [ 2001.933282] do_syscall_64+0x33/0x40 [ 2001.934045] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2001.935187] RIP: 0033:0x7f8ee15a0b19 [ 2001.936035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2001.939736] RSP: 002b:00007f8edeb16188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2001.941265] RAX: ffffffffffffffda RBX: 00007f8ee16b3f60 RCX: 00007f8ee15a0b19 [ 2001.942689] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2001.943390] FAULT_INJECTION: forcing a failure. [ 2001.943390] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2001.944129] RBP: 00007f8edeb161d0 R08: 0000000000000000 R09: 0000000000000000 21:59:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2001.944140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2001.944151] R13: 00007ffda1f41f5f R14: 00007f8edeb16300 R15: 0000000000022000 [ 2001.953180] CPU: 1 PID: 12026 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2001.954882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2001.956992] Call Trace: [ 2001.957669] dump_stack+0x107/0x167 [ 2001.958602] should_fail.cold+0x5/0xa [ 2001.959588] __alloc_pages_nodemask+0x182/0x600 [ 2001.960770] ? mark_lock+0xf5/0x2df0 [ 2001.961719] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2001.963245] ? perf_trace_lock+0xac/0x490 [ 2001.964306] alloc_pages_vma+0xbb/0x410 [ 2001.965321] wp_page_copy+0xee7/0x1f00 [ 2001.966319] ? print_bad_pte+0x5a0/0x5a0 [ 2001.967318] ? lock_downgrade+0x6d0/0x6d0 [ 2001.968368] ? vm_normal_page+0x162/0x2e0 [ 2001.969408] ? trace_hardirqs_on+0x5b/0x180 [ 2001.970486] do_wp_page+0x27b/0x1390 [ 2001.971416] handle_mm_fault+0x1cc7/0x3500 [ 2001.972477] ? mark_held_locks+0x9e/0xe0 [ 2001.973486] ? __pmd_alloc+0x5e0/0x5e0 [ 2001.974496] do_user_addr_fault+0x56e/0xc60 [ 2001.975591] exc_page_fault+0xa2/0x1a0 [ 2001.976564] asm_exc_page_fault+0x1e/0x30 [ 2001.977581] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 2001.978800] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca e9 91 2c 1e 02 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca e9 72 2c 1e 02 66 90 48 bb f9 ef ff ff ff 7f [ 2001.983376] RSP: 0018:ffff88804d21fcf0 EFLAGS: 00050293 [ 2001.984706] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020004d38 [ 2001.986463] RDX: 0000000000040000 RSI: ffffffff830fa6f2 RDI: ffff88800d2d3db8 [ 2001.988236] RBP: 0000000000040000 R08: 0000000000000000 R09: 0000000000000000 [ 2001.990009] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 2001.991792] R13: 0000000020004d00 R14: 000000000000002f R15: 000000000000002e [ 2001.993589] ? __sys_sendmmsg+0x1c2/0x470 [ 2001.994611] __sys_sendmmsg+0x1cf/0x470 [ 2001.995638] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2001.996713] ? lock_downgrade+0x6d0/0x6d0 [ 2001.997771] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2001.998957] ? wait_for_completion_io+0x270/0x270 [ 2002.000154] ? rcu_read_lock_any_held+0x75/0xa0 [ 2002.001304] ? vfs_write+0x354/0xa70 [ 2002.002225] ? fput_many+0x2f/0x1a0 [ 2002.003124] ? ksys_write+0x1a9/0x260 [ 2002.004092] ? __ia32_sys_read+0xb0/0xb0 [ 2002.005273] __x64_sys_sendmmsg+0x99/0x100 [ 2002.006486] do_syscall_64+0x33/0x40 [ 2002.007574] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2002.009019] RIP: 0033:0x7f5519312b19 [ 2002.009953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2002.014460] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2002.016321] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 2002.018073] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2002.019844] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2002.021600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2002.023362] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 21:59:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 34) [ 2002.212288] FAULT_INJECTION: forcing a failure. [ 2002.212288] name failslab, interval 1, probability 0, space 0, times 0 [ 2002.214592] CPU: 0 PID: 12034 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2002.215989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2002.217654] Call Trace: [ 2002.218191] dump_stack+0x107/0x167 [ 2002.218934] should_fail.cold+0x5/0xa [ 2002.219713] ? lock_release+0x680/0x680 [ 2002.220526] ? skb_clone+0x14f/0x3d0 [ 2002.221285] should_failslab+0x5/0x20 [ 2002.222054] kmem_cache_alloc+0x5b/0x310 [ 2002.222875] skb_clone+0x14f/0x3d0 [ 2002.223611] dev_queue_xmit_nit+0x3a7/0xb00 [ 2002.224480] ? ipv6_mc_check_mld+0x1110/0x1110 [ 2002.225408] dev_hard_start_xmit+0xab/0x6f0 [ 2002.226276] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2002.227336] __dev_queue_xmit+0x17ec/0x2710 [ 2002.228226] ? find_held_lock+0x2c/0x110 [ 2002.229051] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2002.229975] ? lock_downgrade+0x6d0/0x6d0 [ 2002.230800] ? lock_acquire+0x197/0x470 [ 2002.231597] ? ip6_finish_output2+0x203/0x1fe0 [ 2002.232512] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2002.233559] neigh_connected_output+0x382/0x4d0 [ 2002.234504] ip6_finish_output2+0xaaf/0x1fe0 [ 2002.235430] __ip6_finish_output.part.0+0x4f7/0xb50 [ 2002.236449] ip6_output+0x3aa/0x7e0 [ 2002.237184] ip6_local_out+0xb4/0x1a0 [ 2002.237948] ip6_send_skb+0xb7/0x350 [ 2002.238712] udp_v6_send_skb+0x7aa/0x15b0 [ 2002.239562] udpv6_sendmsg+0x2113/0x2af0 [ 2002.240374] ? ip_frag_init+0x350/0x350 [ 2002.241176] ? udp_v6_push_pending_frames+0x360/0x360 [ 2002.242197] ? __lockdep_reset_lock+0x180/0x180 [ 2002.243134] ? __lockdep_reset_lock+0x180/0x180 [ 2002.244078] ? lock_acquire+0x197/0x470 [ 2002.244864] ? find_held_lock+0x2c/0x110 [ 2002.245685] ? lock_chain_count+0x20/0x20 [ 2002.246512] ? sock_has_perm+0x1ea/0x280 [ 2002.247350] ? __import_iovec+0x458/0x590 [ 2002.248189] ? udp_v6_push_pending_frames+0x360/0x360 [ 2002.249217] inet6_sendmsg+0x105/0x140 [ 2002.249991] ? inet6_compat_ioctl+0x320/0x320 [ 2002.250878] __sock_sendmsg+0xf2/0x190 [ 2002.251692] ____sys_sendmsg+0x334/0x870 [ 2002.252507] ? sock_write_iter+0x3d0/0x3d0 [ 2002.253369] ? do_recvmmsg+0x6d0/0x6d0 [ 2002.254154] ? __lock_acquire+0x1657/0x5b00 [ 2002.255064] ___sys_sendmsg+0xf3/0x170 [ 2002.255859] ? sendmsg_copy_msghdr+0x160/0x160 [ 2002.256770] ? __lockdep_reset_lock+0x180/0x180 [ 2002.257688] ? trace_hardirqs_on+0x5b/0x180 [ 2002.258556] ? lock_acquire+0x197/0x470 [ 2002.259340] ? find_held_lock+0x2c/0x110 [ 2002.260165] ? __might_fault+0xd3/0x180 [ 2002.260968] ? lock_downgrade+0x6d0/0x6d0 [ 2002.261797] ? io_schedule_timeout+0x140/0x140 [ 2002.262736] __sys_sendmmsg+0x195/0x470 [ 2002.263572] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2002.264458] ? lock_downgrade+0x6d0/0x6d0 [ 2002.265327] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2002.266323] ? wait_for_completion_io+0x270/0x270 [ 2002.267315] ? rcu_read_lock_any_held+0x75/0xa0 [ 2002.268285] ? vfs_write+0x354/0xa70 [ 2002.269049] ? fput_many+0x2f/0x1a0 [ 2002.269787] ? ksys_write+0x1a9/0x260 [ 2002.270556] ? __ia32_sys_read+0xb0/0xb0 [ 2002.271389] __x64_sys_sendmmsg+0x99/0x100 [ 2002.272258] do_syscall_64+0x33/0x40 [ 2002.273012] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2002.274045] RIP: 0033:0x7fd6f698fb19 [ 2002.274797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2002.278524] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2002.280069] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 2002.281501] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2002.282934] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 2002.284377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2002.285809] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 21:59:56 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 21:59:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 35) 21:59:56 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c348a2c3d3effd972c783f20f30d975fad0de7106da4686f1590fdf52", 0x36}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c37", 0x23}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:59:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 11) 21:59:56 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 4) 21:59:56 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 21:59:56 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x8, 0x0, 0x8000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)}, {0x0}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="4dca72f680b8867586ddb50d592e535d3fb03e7a7bcd7a395df2fe84ffd969808d9afc9d3fb4f133077daca8fc25f68b27e5271bcb98b93708253c7d833f548824aeacde19d185325fb463a7fffc71de4f7548118624d32d08b52a6b0d19997af362ff2d7df138a95e41e94c6589fe5ea3b4d03bad1c", @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESHEX, @ANYRES64=r0, @ANYRES64, @ANYBLOB="18131eeb68835c589ba0f99839a25ce5a19a46738363e3ee181216a989523cf158c9ff176b24b2a22d3bda9b3f3c16164481c7b5ea933a60a5530175f75bccfa0046ab3a6a9a04ac5135c5cd5db1bfb6fd0dfc3405348333638f5f6a2577e4a09fa0e4b99680f296e3a764f75eedecb06a71949cd2db84134136b7c48e45200a3e21ef"]) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0x2}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000480)="af", 0x1, 0x1000000) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0x78) r4 = fork() tkill(r4, 0x2e) tkill(r4, 0x14) wait4(r4, 0x0, 0x2, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000001e00)={0x2508, 0x33, 0x200, 0x70bd25, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xe, 0x0, 0x0, @pid=r4}, @nested={0x10bd, 0x45, 0x0, 0x1, [@generic="ea8e545baf14e1adbd13f613ff1742940b031b739ce74ef7041d25083c05178e45c2de4c72fe0581f131200c03635da3a9b0744151d3b814fe51c904773121a707d8b0ef3fd2f7c01745554c2521b3d0a6858508b203417bfb8b0a9c68670434c320715bfaae52a40abcd2363683aad00908d97b835f4b0d2c0f4dec68d9d35e5a2c9d963568c970dedf35dd599c8431feeb9a2534f2ad95fbc0bafa0fd766b8ba5e1f009cbc01d8a2018c28a635a772ce1471ec0b", @typed={0x4, 0x3d}, @generic="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"]}, @typed={0x14, 0x8b, 0x0, 0x0, @binary="e91be6d6790d655826377bfd48faa075"}, @generic="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", @generic="05aac084031ff7b0dee2fe5e8aba738f29dbc72d62296877ecfac932642ae5f6c65db9ea47377c474911b6effeecce21804c53e159df7abdf02a4708ca9811f631eee4740fb83252f45e58e379fae28b9890afc1f6ddc2295e335cc081e10fbea64b8e23cac5eb8dd2882ce26d8d6001c9f2c3c6ebbd5b939641efadd9a06cb3c4fd3f0cb8c51e484d90111bb08ecad690da4cd2b3f65f7939071fa089c4c19b14", @nested={0x17b, 0x1b, 0x0, 0x1, [@generic="165e1b83ee79491822092c53e5880501bd2104963d97a7776bf4036028bbcb0154a27deff24157cd1068c8d3c1", @generic="b49d52530ebcdf6b7ff05034ade1e27308441e50fd33d88593817045cead32b7d4e8073707a79b08d695e1fc1fb260e28dcaca71f389c1941478a83e1e50b1b78103c31edfdf8e9602e38e3d2e385c86246cd4", @generic="992cce9252fc3e03a1f5ac047eafb9ba33ec0b0fa7b921805684c8f477583cac14d178e1b9d33e0d382ead3559ca2bb13dbaf2592dc68cdc803018a5cae072dd3dfe35a80459cf72fc5d1f4057998ad0eb4b3c513879d39c4bc7e993483f272cf23427bbd8b30f54d814cba39cfad7fbd538a6e4502e6cbf765394850bd5b1f4c7391fe7f2876c81f4fd625e70efede838466823ff068fb9fe7199f7c7ed57d88b3ccdaadd7b34f381a69f8595609207555c56db6694f33d26da889a4a6447e465fc1c0f4916dc5f64efc97a08708a62d90906860deda9058cb1b9dc3bbde0d6d5907c9629e713130afc6e32a841e2b12e1b0ea798d160"]}, @generic="9250eb2a176c27c75df8710359e03bb4a138f1550ec672eeef930608979d76e46335afddfd26930655ebad6d1ddab9967c02fc3117f1709297b63d6bc3e820c482a5f3dfa0e45bd11ac1550fe45bfd9b913e2bc88536b1f04e6a8561fb4aed61d7e6ddb2452bb60f28a41aa41560fa897a2d0ba002ec5a0dcd116837510ead2e348b87bccc16680daf62c97ff834a444b121401792ff0a74c50f9864618bc3603ae1b1af2303c3b695477e67d81206aa8bea97e44401ebf32b0b460e3135695b253adeda0953b654a09b12ddaf9f4a355f362a3f82c478f370c7ec8d7a4ee4fef6e9d47a", @generic="d9f375ae064ad2bd737855884d41857ff752a2de155f9fec219a83397e3e84d67b596de7bc9ceccc51f24e2f56aa08bd5b75", @generic="0c9dfe8cb1d51076e98f37b8bc9cc5bedd7fa5aeeb0ad1b7b392088f25074b8ffbe8a52a8a06c491459099aeb1e867f4edc7ac3fa461338ae1847398ff521edb33512ff7cd88d858961888ae2e510b7a0effc89d1a921acabd54d37031a9fa9e6c09d853c62742dd19e4a62d4cda4a96e48667785ae6c842af26442f998ce2f9979dfe84b78e5f3f4c3a046443370bf584a1e25deb0bcdfceb753c3d89319245506b5b45d2b8ddcb0bffda9e027fe35ad9d4d1643220101780eda4e5c16012667235aa1fe753fe645e69b7ff5ff1bceaefd9bed3ecdf221ae320123968ad7420a04199ab"]}, 0x2508}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendfile(r1, r2, 0x0, 0x100000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) open(&(0x7f0000000200)='./file2\x00', 0x381000, 0x20) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5b, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x14170, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r5, 0x0, 0x80000001) 21:59:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2016.549693] FAULT_INJECTION: forcing a failure. [ 2016.549693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2016.552424] CPU: 0 PID: 12041 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2016.553804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2016.555455] Call Trace: [ 2016.556010] dump_stack+0x107/0x167 [ 2016.556738] should_fail.cold+0x5/0xa [ 2016.557507] _copy_from_user+0x2e/0x1b0 [ 2016.558308] __copy_msghdr_from_user+0x91/0x4b0 [ 2016.559231] ? __ia32_sys_shutdown+0x80/0x80 [ 2016.560115] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2016.561197] ? perf_trace_lock+0xac/0x490 [ 2016.562034] sendmsg_copy_msghdr+0xa1/0x160 [ 2016.563018] ? do_recvmmsg+0x6d0/0x6d0 [ 2016.563820] ? handle_mm_fault+0x9e9/0x3500 [ 2016.564714] ? find_held_lock+0x2c/0x110 [ 2016.565566] ___sys_sendmsg+0xc6/0x170 [ 2016.566368] ? sendmsg_copy_msghdr+0x160/0x160 [ 2016.567312] ? vmacache_find+0x55/0x2a0 [ 2016.568135] ? do_user_addr_fault+0x5b0/0xc60 [ 2016.569050] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2016.570103] ? exc_page_fault+0xca/0x1a0 [ 2016.570925] ? trace_hardirqs_on+0x5b/0x180 [ 2016.571809] ? exc_page_fault+0xca/0x1a0 [ 2016.572628] ? asm_exc_page_fault+0x1e/0x30 [ 2016.573526] __sys_sendmmsg+0x195/0x470 [ 2016.574329] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2016.575192] ? lock_downgrade+0x6d0/0x6d0 [ 2016.576062] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2016.577057] ? wait_for_completion_io+0x270/0x270 [ 2016.578049] ? rcu_read_lock_any_held+0x75/0xa0 [ 2016.579000] ? vfs_write+0x354/0xa70 [ 2016.579772] ? fput_many+0x2f/0x1a0 [ 2016.580515] ? ksys_write+0x1a9/0x260 [ 2016.581293] ? __ia32_sys_read+0xb0/0xb0 [ 2016.582133] __x64_sys_sendmmsg+0x99/0x100 [ 2016.582991] do_syscall_64+0x33/0x40 [ 2016.583777] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2016.584814] RIP: 0033:0x7f5519312b19 [ 2016.585567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2016.589309] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2016.590865] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 2016.592326] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2016.593776] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2016.594836] FAULT_INJECTION: forcing a failure. [ 2016.594836] name failslab, interval 1, probability 0, space 0, times 0 [ 2016.595227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2016.595239] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 [ 2016.600952] CPU: 1 PID: 12054 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 2016.602374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2016.604152] Call Trace: [ 2016.604691] dump_stack+0x107/0x167 [ 2016.605444] should_fail.cold+0x5/0xa [ 2016.606236] should_failslab+0x5/0x20 [ 2016.607015] __kmalloc_node_track_caller+0x74/0x3b0 [ 2016.608061] ? alloc_skb_with_frags+0x92/0x570 [ 2016.608999] __alloc_skb+0xb1/0x5b0 [ 2016.609756] alloc_skb_with_frags+0x92/0x570 [ 2016.610669] ? mark_lock+0xf5/0x2df0 [ 2016.611435] ? lock_acquire+0x197/0x470 [ 2016.612296] sock_alloc_send_pskb+0x7af/0x930 [ 2016.613265] ? sk_alloc+0x350/0x350 [ 2016.614010] ? perf_trace_lock+0xac/0x490 [ 2016.614867] ? SOFTIRQ_verbose+0x10/0x10 [ 2016.615709] ? lock_chain_count+0x20/0x20 [ 2016.616566] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2016.617589] ? ip6_mtu+0x1bb/0x3d0 [ 2016.618315] ? lock_downgrade+0x6d0/0x6d0 [ 2016.619154] ? ip_frag_init+0x350/0x350 [ 2016.619996] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2016.620962] ? ip6_mtu+0x1e9/0x3d0 [ 2016.621693] ? ip6_setup_cork+0xfb7/0x1740 [ 2016.622671] ip6_make_skb+0x2de/0x4e0 [ 2016.623436] ? ip_frag_init+0x350/0x350 [ 2016.624283] ? ip_frag_init+0x350/0x350 [ 2016.625089] ? ip6_push_pending_frames+0xf0/0xf0 [ 2016.626051] ? ip6_dst_hoplimit+0x199/0x440 [ 2016.626914] ? lock_downgrade+0x6d0/0x6d0 [ 2016.627775] udpv6_sendmsg+0x20d0/0x2af0 [ 2016.628601] ? ip_frag_init+0x350/0x350 [ 2016.629405] ? udp_v6_push_pending_frames+0x360/0x360 [ 2016.630430] ? _down_write_nest_lock+0x160/0x160 [ 2016.631548] ? vmacache_update+0xce/0x140 [ 2016.632438] ? do_user_addr_fault+0x5b0/0xc60 [ 2016.633341] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2016.634466] ? asm_exc_page_fault+0x1e/0x30 21:59:56 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 1) [ 2016.635329] ? sock_has_perm+0x1ea/0x280 [ 2016.636350] ? __import_iovec+0x458/0x590 [ 2016.637328] ? udp_v6_push_pending_frames+0x360/0x360 [ 2016.638603] inet6_sendmsg+0x105/0x140 [ 2016.639524] ? inet6_compat_ioctl+0x320/0x320 [ 2016.640600] __sock_sendmsg+0xf2/0x190 [ 2016.641390] ____sys_sendmsg+0x334/0x870 [ 2016.642198] ? sock_write_iter+0x3d0/0x3d0 [ 2016.643030] ? do_recvmmsg+0x6d0/0x6d0 [ 2016.643861] ? perf_trace_lock+0xac/0x490 [ 2016.644696] ? __lockdep_reset_lock+0x180/0x180 [ 2016.645615] ? perf_trace_lock+0xac/0x490 [ 2016.646450] ___sys_sendmsg+0xf3/0x170 [ 2016.647220] ? sendmsg_copy_msghdr+0x160/0x160 [ 2016.648131] ? __fget_files+0x26d/0x4c0 [ 2016.648982] ? lock_downgrade+0x6d0/0x6d0 [ 2016.649829] ? lock_downgrade+0x6d0/0x6d0 [ 2016.650661] ? __fget_files+0x296/0x4c0 [ 2016.651464] ? __fget_light+0xea/0x290 [ 2016.652259] __sys_sendmmsg+0x195/0x470 [ 2016.653064] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2016.653925] ? lock_downgrade+0x6d0/0x6d0 [ 2016.654768] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2016.655735] ? wait_for_completion_io+0x270/0x270 [ 2016.656695] ? rcu_read_lock_any_held+0x75/0xa0 [ 2016.657610] ? vfs_write+0x354/0xa70 [ 2016.658356] ? fput_many+0x2f/0x1a0 [ 2016.659095] ? ksys_write+0x1a9/0x260 [ 2016.659867] ? __ia32_sys_read+0xb0/0xb0 [ 2016.660671] __x64_sys_sendmmsg+0x99/0x100 [ 2016.661507] do_syscall_64+0x33/0x40 [ 2016.662246] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2016.663285] RIP: 0033:0x7f8ee15a0b19 [ 2016.664034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2016.667660] RSP: 002b:00007f8edeb16188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2016.669155] RAX: ffffffffffffffda RBX: 00007f8ee16b3f60 RCX: 00007f8ee15a0b19 [ 2016.670564] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2016.671991] RBP: 00007f8edeb161d0 R08: 0000000000000000 R09: 0000000000000000 [ 2016.673393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2016.674804] R13: 00007ffda1f41f5f R14: 00007f8edeb16300 R15: 0000000000022000 [ 2016.695734] FAULT_INJECTION: forcing a failure. [ 2016.695734] name failslab, interval 1, probability 0, space 0, times 0 [ 2016.698046] CPU: 0 PID: 12053 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2016.699421] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2016.701082] Call Trace: [ 2016.701608] dump_stack+0x107/0x167 [ 2016.702340] should_fail.cold+0x5/0xa [ 2016.703103] ? create_object.isra.0+0x3a/0xa20 [ 2016.704018] should_failslab+0x5/0x20 [ 2016.704782] kmem_cache_alloc+0x5b/0x310 [ 2016.705590] ? lock_acquire+0x197/0x470 [ 2016.706390] create_object.isra.0+0x3a/0xa20 [ 2016.707266] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2016.708299] kmem_cache_alloc+0x159/0x310 [ 2016.709134] skb_clone+0x14f/0x3d0 [ 2016.709850] dev_queue_xmit_nit+0x3a7/0xb00 [ 2016.710592] FAULT_INJECTION: forcing a failure. [ 2016.710592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2016.710713] ? ipv6_mc_check_mld+0x1110/0x1110 [ 2016.713887] dev_hard_start_xmit+0xab/0x6f0 [ 2016.714746] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2016.715806] __dev_queue_xmit+0x17ec/0x2710 [ 2016.716672] ? find_held_lock+0x2c/0x110 [ 2016.717484] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2016.718395] ? lock_downgrade+0x6d0/0x6d0 [ 2016.719216] ? lock_acquire+0x197/0x470 [ 2016.720021] ? ip6_finish_output2+0x203/0x1fe0 [ 2016.720939] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2016.722136] neigh_connected_output+0x382/0x4d0 [ 2016.723098] ip6_finish_output2+0xaaf/0x1fe0 [ 2016.724016] __ip6_finish_output.part.0+0x4f7/0xb50 [ 2016.725035] ip6_output+0x3aa/0x7e0 [ 2016.725781] ip6_local_out+0xb4/0x1a0 [ 2016.726556] ip6_send_skb+0xb7/0x350 [ 2016.727321] udp_v6_send_skb+0x7aa/0x15b0 [ 2016.728198] udpv6_sendmsg+0x2113/0x2af0 [ 2016.729025] ? ip_frag_init+0x350/0x350 [ 2016.729863] ? udp_v6_push_pending_frames+0x360/0x360 [ 2016.730914] ? __lockdep_reset_lock+0x180/0x180 [ 2016.731886] ? __lockdep_reset_lock+0x180/0x180 [ 2016.732847] ? lock_acquire+0x197/0x470 [ 2016.733664] ? find_held_lock+0x2c/0x110 [ 2016.734508] ? lock_chain_count+0x20/0x20 [ 2016.735362] ? sock_has_perm+0x1ea/0x280 [ 2016.736242] ? __import_iovec+0x458/0x590 [ 2016.737087] ? udp_v6_push_pending_frames+0x360/0x360 [ 2016.738151] inet6_sendmsg+0x105/0x140 [ 2016.738964] ? inet6_compat_ioctl+0x320/0x320 [ 2016.739879] __sock_sendmsg+0xf2/0x190 [ 2016.740670] ____sys_sendmsg+0x334/0x870 [ 2016.741490] ? sock_write_iter+0x3d0/0x3d0 [ 2016.742339] ? do_recvmmsg+0x6d0/0x6d0 [ 2016.743136] ? find_held_lock+0x2c/0x110 [ 2016.743984] ___sys_sendmsg+0xf3/0x170 [ 2016.744776] ? sendmsg_copy_msghdr+0x160/0x160 [ 2016.745708] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2016.746765] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2016.747691] ? trace_hardirqs_on+0x5b/0x180 [ 2016.748582] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2016.749494] ? finish_task_switch+0x126/0x5d0 [ 2016.750406] ? finish_task_switch+0xef/0x5d0 [ 2016.751309] ? __switch_to+0x572/0xf70 [ 2016.752112] ? __switch_to_asm+0x3a/0x60 [ 2016.752938] ? __switch_to_asm+0x34/0x60 [ 2016.753773] ? __schedule+0x82c/0x1ea0 [ 2016.754573] ? io_schedule_timeout+0x140/0x140 [ 2016.755527] __sys_sendmmsg+0x195/0x470 [ 2016.756355] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2016.757246] ? lock_downgrade+0x6d0/0x6d0 [ 2016.758120] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2016.759101] ? wait_for_completion_io+0x270/0x270 [ 2016.760101] ? rcu_read_lock_any_held+0x75/0xa0 [ 2016.761040] ? vfs_write+0x354/0xa70 [ 2016.761803] ? fput_many+0x2f/0x1a0 [ 2016.762554] ? ksys_write+0x1a9/0x260 [ 2016.763326] ? __ia32_sys_read+0xb0/0xb0 [ 2016.764178] __x64_sys_sendmmsg+0x99/0x100 [ 2016.765048] do_syscall_64+0x33/0x40 [ 2016.765803] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2016.766851] RIP: 0033:0x7fd6f698fb19 [ 2016.767613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2016.771390] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2016.772943] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 2016.774395] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2016.775856] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 2016.777295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2016.778743] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 [ 2016.780285] CPU: 1 PID: 12059 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 2016.781714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2016.783410] Call Trace: [ 2016.783952] dump_stack+0x107/0x167 [ 2016.784708] should_fail.cold+0x5/0xa [ 2016.785493] _copy_from_user+0x2e/0x1b0 [ 2016.786314] __copy_msghdr_from_user+0x91/0x4b0 [ 2016.787265] ? __ia32_sys_shutdown+0x80/0x80 [ 2016.788171] ? mark_lock+0xf5/0x2df0 [ 2016.788950] ? __lock_acquire+0xbb1/0x5b00 [ 2016.789820] sendmsg_copy_msghdr+0xa1/0x160 [ 2016.790710] ? do_recvmmsg+0x6d0/0x6d0 [ 2016.791520] ? perf_trace_lock+0xac/0x490 [ 2016.792374] ? SOFTIRQ_verbose+0x10/0x10 [ 2016.793216] ? __lockdep_reset_lock+0x180/0x180 [ 2016.794163] ? perf_trace_lock+0xac/0x490 [ 2016.795022] ___sys_sendmsg+0xc6/0x170 [ 2016.795844] ? sendmsg_copy_msghdr+0x160/0x160 [ 2016.796786] ? __fget_files+0x26d/0x4c0 [ 2016.797596] ? lock_downgrade+0x6d0/0x6d0 [ 2016.798455] ? lock_downgrade+0x6d0/0x6d0 [ 2016.799299] ? __fget_files+0x296/0x4c0 [ 2016.800143] ? __fget_light+0xea/0x290 [ 2016.800185] FAT-fs (loop7): Unrecognized mount option "MÊrö€¸†u†ÝµY.S]?°>z{Íz9]òþ„ÿÙi€šü?´ñ3}¬¨ü%ö‹'å'˘¹7%<}ƒ?Tˆ$®¬ÞÑ…2_´c§ÿüqÞOuH†$Ó-µ*k™zóbÿ-}ñ8©^AéLe‰þ^£´Ð;­00000000000000000000" or missing value [ 2016.800951] __sys_sendmmsg+0x195/0x470 [ 2016.800978] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2016.801004] ? lock_downgrade+0x6d0/0x6d0 [ 2016.807296] ? ksys_write+0x12d/0x260 [ 2016.808103] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2016.809097] ? wait_for_completion_io+0x270/0x270 [ 2016.810084] ? rcu_read_lock_any_held+0x75/0xa0 [ 2016.811030] ? vfs_write+0x354/0xa70 [ 2016.811803] ? fput_many+0x2f/0x1a0 [ 2016.812541] ? ksys_write+0x1a9/0x260 [ 2016.813322] ? __ia32_sys_read+0xb0/0xb0 [ 2016.814164] __x64_sys_sendmmsg+0x99/0x100 [ 2016.815040] do_syscall_64+0x33/0x40 [ 2016.815817] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2016.816875] RIP: 0033:0x7fed8099eb19 21:59:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2016.817633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2016.821562] RSP: 002b:00007fed7df14188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2016.823108] RAX: ffffffffffffffda RBX: 00007fed80ab1f60 RCX: 00007fed8099eb19 [ 2016.824576] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2016.826014] RBP: 00007fed7df141d0 R08: 0000000000000000 R09: 0000000000000000 [ 2016.827491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2016.828957] R13: 00007ffc6f9e102f R14: 00007fed7df14300 R15: 0000000000022000 21:59:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:59:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 12) 21:59:56 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:59:56 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 5) 21:59:56 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 2) 21:59:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 36) [ 2017.068387] FAULT_INJECTION: forcing a failure. [ 2017.068387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2017.071945] CPU: 1 PID: 12069 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2017.073362] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2017.075050] Call Trace: [ 2017.075592] dump_stack+0x107/0x167 [ 2017.076350] should_fail.cold+0x5/0xa [ 2017.077133] _copy_from_user+0x2e/0x1b0 [ 2017.077948] __copy_msghdr_from_user+0x91/0x4b0 [ 2017.078904] ? __ia32_sys_shutdown+0x80/0x80 [ 2017.079825] ? wp_page_copy+0xe78/0x1f00 [ 2017.080662] ? wp_page_copy+0xebc/0x1f00 [ 2017.081500] ? perf_trace_lock+0xac/0x490 [ 2017.082361] sendmsg_copy_msghdr+0xa1/0x160 [ 2017.083255] ? do_recvmmsg+0x6d0/0x6d0 [ 2017.084058] ? handle_mm_fault+0x9e9/0x3500 [ 2017.084942] ? find_held_lock+0x2c/0x110 [ 2017.085783] ___sys_sendmsg+0xc6/0x170 [ 2017.086581] ? sendmsg_copy_msghdr+0x160/0x160 [ 2017.087502] ? vmacache_find+0x55/0x2a0 [ 2017.088337] ? do_user_addr_fault+0x5b0/0xc60 [ 2017.089255] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2017.090316] ? exc_page_fault+0xca/0x1a0 [ 2017.091143] ? trace_hardirqs_on+0x5b/0x180 [ 2017.092044] ? exc_page_fault+0xca/0x1a0 [ 2017.092873] ? asm_exc_page_fault+0x1e/0x30 [ 2017.093769] __sys_sendmmsg+0x195/0x470 [ 2017.094579] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2017.095449] ? lock_downgrade+0x6d0/0x6d0 [ 2017.096315] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2017.097327] ? wait_for_completion_io+0x270/0x270 [ 2017.098306] ? rcu_read_lock_any_held+0x75/0xa0 [ 2017.099253] ? vfs_write+0x354/0xa70 [ 2017.100035] ? fput_many+0x2f/0x1a0 [ 2017.100777] ? ksys_write+0x1a9/0x260 [ 2017.101554] ? __ia32_sys_read+0xb0/0xb0 [ 2017.102380] __x64_sys_sendmmsg+0x99/0x100 [ 2017.103239] do_syscall_64+0x33/0x40 [ 2017.103999] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2017.105037] RIP: 0033:0x7f5519312b19 [ 2017.105796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2017.109493] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2017.111027] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 2017.112469] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2017.113899] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2017.115382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2017.116853] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 [ 2017.125898] FAULT_INJECTION: forcing a failure. [ 2017.125898] name failslab, interval 1, probability 0, space 0, times 0 [ 2017.128794] CPU: 1 PID: 12072 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 2017.130201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2017.131902] Call Trace: [ 2017.132441] dump_stack+0x107/0x167 [ 2017.133185] should_fail.cold+0x5/0xa [ 2017.133963] ? create_object.isra.0+0x3a/0xa20 [ 2017.134897] should_failslab+0x5/0x20 [ 2017.135694] kmem_cache_alloc+0x5b/0x310 [ 2017.136524] create_object.isra.0+0x3a/0xa20 [ 2017.137415] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2017.138449] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2017.139472] ? alloc_skb_with_frags+0x92/0x570 [ 2017.140406] __alloc_skb+0xb1/0x5b0 [ 2017.141150] alloc_skb_with_frags+0x92/0x570 [ 2017.142045] ? mark_lock+0xf5/0x2df0 [ 2017.142797] ? lock_acquire+0x197/0x470 [ 2017.143611] sock_alloc_send_pskb+0x7af/0x930 [ 2017.144558] ? sk_alloc+0x350/0x350 [ 2017.145301] ? perf_trace_lock+0xac/0x490 [ 2017.146141] ? SOFTIRQ_verbose+0x10/0x10 [ 2017.146974] ? lock_chain_count+0x20/0x20 [ 2017.147837] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2017.148863] ? ip6_mtu+0x1bb/0x3d0 [ 2017.149583] ? lock_downgrade+0x6d0/0x6d0 [ 2017.150418] ? ip_frag_init+0x350/0x350 [ 2017.151247] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2017.152198] ? ip6_mtu+0x1e9/0x3d0 [ 2017.152918] ? ip6_setup_cork+0xfb7/0x1740 [ 2017.153780] ip6_make_skb+0x2de/0x4e0 [ 2017.154551] ? ip_frag_init+0x350/0x350 [ 2017.155361] ? ip_frag_init+0x350/0x350 [ 2017.156190] ? ip6_push_pending_frames+0xf0/0xf0 [ 2017.157155] ? ip6_dst_hoplimit+0x199/0x440 [ 2017.158034] ? lock_downgrade+0x6d0/0x6d0 [ 2017.158891] udpv6_sendmsg+0x20d0/0x2af0 [ 2017.159732] ? ip_frag_init+0x350/0x350 21:59:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:59:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2017.160563] ? udp_v6_push_pending_frames+0x360/0x360 [ 2017.161762] ? _down_write_nest_lock+0x160/0x160 [ 2017.162736] ? vmacache_update+0xce/0x140 [ 2017.163590] ? do_user_addr_fault+0x5b0/0xc60 [ 2017.164532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2017.165604] ? asm_exc_page_fault+0x1e/0x30 [ 2017.166481] ? sock_has_perm+0x1ea/0x280 [ 2017.167333] ? __import_iovec+0x458/0x590 [ 2017.168182] ? udp_v6_push_pending_frames+0x360/0x360 [ 2017.169227] inet6_sendmsg+0x105/0x140 [ 2017.170011] ? inet6_compat_ioctl+0x320/0x320 [ 2017.170934] __sock_sendmsg+0xf2/0x190 [ 2017.171732] ____sys_sendmsg+0x334/0x870 [ 2017.172558] ? sock_write_iter+0x3d0/0x3d0 [ 2017.173414] ? do_recvmmsg+0x6d0/0x6d0 [ 2017.174202] ? perf_trace_lock+0xac/0x490 [ 2017.175062] ? __lockdep_reset_lock+0x180/0x180 [ 2017.176005] ? perf_trace_lock+0xac/0x490 [ 2017.176851] ___sys_sendmsg+0xf3/0x170 [ 2017.177644] ? sendmsg_copy_msghdr+0x160/0x160 [ 2017.178570] ? __fget_files+0x26d/0x4c0 [ 2017.179379] ? lock_downgrade+0x6d0/0x6d0 [ 2017.180258] ? lock_downgrade+0x6d0/0x6d0 [ 2017.181110] ? __fget_files+0x296/0x4c0 [ 2017.181929] ? __fget_light+0xea/0x290 [ 2017.182724] __sys_sendmmsg+0x195/0x470 [ 2017.183543] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2017.184436] ? lock_downgrade+0x6d0/0x6d0 [ 2017.185302] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2017.186288] ? wait_for_completion_io+0x270/0x270 [ 2017.187271] ? rcu_read_lock_any_held+0x75/0xa0 [ 2017.188217] ? vfs_write+0x354/0xa70 [ 2017.188975] ? fput_many+0x2f/0x1a0 [ 2017.189711] ? ksys_write+0x1a9/0x260 [ 2017.190484] ? __ia32_sys_read+0xb0/0xb0 [ 2017.191316] __x64_sys_sendmmsg+0x99/0x100 [ 2017.192199] do_syscall_64+0x33/0x40 [ 2017.192958] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2017.193994] RIP: 0033:0x7f8ee15a0b19 [ 2017.194748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2017.198470] RSP: 002b:00007f8edeb16188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2017.200028] RAX: ffffffffffffffda RBX: 00007f8ee16b3f60 RCX: 00007f8ee15a0b19 [ 2017.201469] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2017.202910] RBP: 00007f8edeb161d0 R08: 0000000000000000 R09: 0000000000000000 [ 2017.204358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2017.205804] R13: 00007ffda1f41f5f R14: 00007f8edeb16300 R15: 0000000000022000 [ 2017.277614] FAULT_INJECTION: forcing a failure. [ 2017.277614] name failslab, interval 1, probability 0, space 0, times 0 [ 2017.279895] CPU: 1 PID: 12080 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2017.281292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2017.282967] Call Trace: [ 2017.283498] dump_stack+0x107/0x167 [ 2017.284250] should_fail.cold+0x5/0xa [ 2017.285023] ? create_object.isra.0+0x3a/0xa20 [ 2017.285946] should_failslab+0x5/0x20 21:59:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2017.286722] kmem_cache_alloc+0x5b/0x310 [ 2017.287699] ? lock_acquire+0x197/0x470 [ 2017.288513] create_object.isra.0+0x3a/0xa20 [ 2017.289402] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2017.290441] kmem_cache_alloc+0x159/0x310 [ 2017.291296] skb_clone+0x14f/0x3d0 [ 2017.292035] dev_queue_xmit_nit+0x3a7/0xb00 [ 2017.292912] ? ipv6_mc_check_mld+0x1110/0x1110 [ 2017.293843] dev_hard_start_xmit+0xab/0x6f0 21:59:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2017.294733] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2017.295958] __dev_queue_xmit+0x17ec/0x2710 [ 2017.296844] ? find_held_lock+0x2c/0x110 [ 2017.297671] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2017.298602] ? lock_downgrade+0x6d0/0x6d0 [ 2017.299441] ? lock_acquire+0x197/0x470 [ 2017.300259] ? ip6_finish_output2+0x203/0x1fe0 [ 2017.301194] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2017.302268] neigh_connected_output+0x382/0x4d0 [ 2017.303225] ip6_finish_output2+0xaaf/0x1fe0 [ 2017.304154] __ip6_finish_output.part.0+0x4f7/0xb50 [ 2017.305172] ip6_output+0x3aa/0x7e0 [ 2017.305920] ip6_local_out+0xb4/0x1a0 [ 2017.306698] ip6_send_skb+0xb7/0x350 [ 2017.307467] udp_v6_send_skb+0x7aa/0x15b0 [ 2017.308340] udpv6_sendmsg+0x2113/0x2af0 [ 2017.309165] ? ip_frag_init+0x350/0x350 [ 2017.309983] ? udp_v6_push_pending_frames+0x360/0x360 [ 2017.311031] ? __lockdep_reset_lock+0x180/0x180 [ 2017.311993] ? __lockdep_reset_lock+0x180/0x180 [ 2017.312944] ? lock_acquire+0x197/0x470 [ 2017.313749] ? find_held_lock+0x2c/0x110 [ 2017.314602] ? sock_has_perm+0x1ea/0x280 [ 2017.315459] ? __import_iovec+0x458/0x590 [ 2017.316315] ? udp_v6_push_pending_frames+0x360/0x360 [ 2017.317361] inet6_sendmsg+0x105/0x140 [ 2017.318150] ? inet6_compat_ioctl+0x320/0x320 [ 2017.319057] __sock_sendmsg+0xf2/0x190 [ 2017.319856] ____sys_sendmsg+0x334/0x870 [ 2017.320726] ? sock_write_iter+0x3d0/0x3d0 [ 2017.321584] ? do_recvmmsg+0x6d0/0x6d0 [ 2017.322378] ? __lock_acquire+0x1657/0x5b00 [ 2017.323268] ___sys_sendmsg+0xf3/0x170 [ 2017.324078] ? sendmsg_copy_msghdr+0x160/0x160 [ 2017.324997] ? vmacache_find+0x55/0x2a0 [ 2017.325806] ? __lockdep_reset_lock+0x180/0x180 [ 2017.326760] ? lock_acquire+0x197/0x470 [ 2017.327565] ? find_held_lock+0x2c/0x110 [ 2017.328409] ? __might_fault+0xd3/0x180 [ 2017.329214] ? lock_downgrade+0x6d0/0x6d0 [ 2017.330053] ? asm_exc_page_fault+0x1e/0x30 [ 2017.330956] __sys_sendmmsg+0x195/0x470 [ 2017.331795] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2017.332683] ? lock_downgrade+0x6d0/0x6d0 [ 2017.333573] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2017.334566] ? wait_for_completion_io+0x270/0x270 [ 2017.335563] ? rcu_read_lock_any_held+0x75/0xa0 [ 2017.336521] ? vfs_write+0x354/0xa70 [ 2017.337293] ? fput_many+0x2f/0x1a0 [ 2017.338043] ? ksys_write+0x1a9/0x260 [ 2017.338828] ? __ia32_sys_read+0xb0/0xb0 [ 2017.339682] __x64_sys_sendmmsg+0x99/0x100 [ 2017.340555] do_syscall_64+0x33/0x40 [ 2017.341320] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2017.342367] RIP: 0033:0x7fd6f698fb19 [ 2017.343128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2017.346941] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2017.348604] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 2017.350214] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2017.351765] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 2017.353431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2017.354912] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 [ 2017.371878] FAULT_INJECTION: forcing a failure. [ 2017.371878] name failslab, interval 1, probability 0, space 0, times 0 [ 2017.374818] CPU: 1 PID: 12079 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 2017.376221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2017.377894] Call Trace: [ 2017.378422] dump_stack+0x107/0x167 [ 2017.379161] should_fail.cold+0x5/0xa [ 2017.380082] ? __alloc_skb+0x6d/0x5b0 [ 2017.380858] ? __alloc_skb+0x6d/0x5b0 [ 2017.381665] should_failslab+0x5/0x20 [ 2017.382436] kmem_cache_alloc_node+0x55/0x330 [ 2017.383348] __alloc_skb+0x6d/0x5b0 [ 2017.384099] alloc_skb_with_frags+0x92/0x570 [ 2017.385027] ? mark_lock+0xf5/0x2df0 [ 2017.385874] ? lock_acquire+0x197/0x470 [ 2017.386684] sock_alloc_send_pskb+0x7af/0x930 [ 2017.387606] ? sk_alloc+0x350/0x350 [ 2017.388359] ? perf_trace_lock+0xac/0x490 [ 2017.389222] ? SOFTIRQ_verbose+0x10/0x10 [ 2017.390046] ? lock_chain_count+0x20/0x20 [ 2017.391005] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2017.392258] ? ip6_mtu+0x1bb/0x3d0 [ 2017.393002] ? lock_downgrade+0x6d0/0x6d0 [ 2017.393923] ? ip_frag_init+0x350/0x350 [ 2017.394750] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2017.395710] ? ip6_mtu+0x1e9/0x3d0 [ 2017.396538] ? ip6_setup_cork+0xfb7/0x1740 [ 2017.397544] ip6_make_skb+0x2de/0x4e0 [ 2017.398373] ? ip_frag_init+0x350/0x350 [ 2017.399181] ? ip_frag_init+0x350/0x350 [ 2017.400006] ? ip6_push_pending_frames+0xf0/0xf0 [ 2017.400964] ? ip6_dst_hoplimit+0x199/0x440 [ 2017.401831] ? lock_downgrade+0x6d0/0x6d0 [ 2017.402682] udpv6_sendmsg+0x20d0/0x2af0 [ 2017.403643] ? ip_frag_init+0x350/0x350 [ 2017.404467] ? udp_v6_push_pending_frames+0x360/0x360 [ 2017.405500] ? _down_write_nest_lock+0x160/0x160 [ 2017.406455] ? vmacache_update+0xce/0x140 [ 2017.407422] ? do_user_addr_fault+0x5b0/0xc60 [ 2017.408350] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2017.409413] ? asm_exc_page_fault+0x1e/0x30 [ 2017.410284] ? sock_has_perm+0x1ea/0x280 [ 2017.411128] ? __import_iovec+0x458/0x590 [ 2017.412069] ? udp_v6_push_pending_frames+0x360/0x360 [ 2017.413288] inet6_sendmsg+0x105/0x140 [ 2017.414103] ? inet6_compat_ioctl+0x320/0x320 [ 2017.415103] __sock_sendmsg+0xf2/0x190 21:59:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2017.415908] ____sys_sendmsg+0x334/0x870 [ 2017.416831] ? sock_write_iter+0x3d0/0x3d0 [ 2017.417686] ? do_recvmmsg+0x6d0/0x6d0 21:59:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 13) [ 2017.418473] ? perf_trace_lock+0xac/0x490 [ 2017.419398] ? __lockdep_reset_lock+0x180/0x180 [ 2017.420341] ? perf_trace_lock+0xac/0x490 [ 2017.421182] ___sys_sendmsg+0xf3/0x170 [ 2017.421969] ? sendmsg_copy_msghdr+0x160/0x160 [ 2017.422895] ? __fget_files+0x26d/0x4c0 [ 2017.423709] ? lock_downgrade+0x6d0/0x6d0 [ 2017.424681] ? lock_downgrade+0x6d0/0x6d0 [ 2017.425682] ? __fget_files+0x296/0x4c0 [ 2017.426560] ? __fget_light+0xea/0x290 [ 2017.427490] __sys_sendmmsg+0x195/0x470 [ 2017.428312] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2017.429182] ? lock_downgrade+0x6d0/0x6d0 [ 2017.430041] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2017.431015] ? wait_for_completion_io+0x270/0x270 [ 2017.431996] ? rcu_read_lock_any_held+0x75/0xa0 [ 2017.433059] ? vfs_write+0x354/0xa70 [ 2017.433971] ? fput_many+0x2f/0x1a0 [ 2017.434796] ? ksys_write+0x1a9/0x260 [ 2017.435694] ? __ia32_sys_read+0xb0/0xb0 [ 2017.436528] __x64_sys_sendmmsg+0x99/0x100 [ 2017.437384] do_syscall_64+0x33/0x40 [ 2017.438142] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2017.439280] RIP: 0033:0x7fed8099eb19 [ 2017.440162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2017.444102] RSP: 002b:00007fed7df14188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2017.445635] RAX: ffffffffffffffda RBX: 00007fed80ab1f60 RCX: 00007fed8099eb19 [ 2017.447072] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2017.448563] RBP: 00007fed7df141d0 R08: 0000000000000000 R09: 0000000000000000 [ 2017.450056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2017.451491] R13: 00007ffc6f9e102f R14: 00007fed7df14300 R15: 0000000000022000 [ 2017.526734] FAULT_INJECTION: forcing a failure. [ 2017.526734] name failslab, interval 1, probability 0, space 0, times 0 [ 2017.529559] CPU: 0 PID: 12088 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2017.530954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2017.532647] Call Trace: [ 2017.533180] dump_stack+0x107/0x167 [ 2017.533915] should_fail.cold+0x5/0xa [ 2017.534680] ? create_object.isra.0+0x3a/0xa20 [ 2017.535610] should_failslab+0x5/0x20 [ 2017.536386] kmem_cache_alloc+0x5b/0x310 [ 2017.537203] create_object.isra.0+0x3a/0xa20 [ 2017.538083] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2017.539099] kmem_cache_alloc_node+0x169/0x330 [ 2017.540027] __alloc_skb+0x6d/0x5b0 [ 2017.540780] alloc_skb_with_frags+0x92/0x570 [ 2017.541661] ? mark_lock+0xf5/0x2df0 [ 2017.542418] sock_alloc_send_pskb+0x7af/0x930 [ 2017.543332] ? sk_alloc+0x350/0x350 [ 2017.544083] ? perf_trace_lock+0xac/0x490 [ 2017.544909] ? SOFTIRQ_verbose+0x10/0x10 [ 2017.545733] ? lock_chain_count+0x20/0x20 [ 2017.546589] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2017.547622] ? ip6_mtu+0x1bb/0x3d0 [ 2017.548348] ? lock_downgrade+0x6d0/0x6d0 [ 2017.549171] ? ip_frag_init+0x350/0x350 [ 2017.549981] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2017.550925] ? ip6_mtu+0x1e9/0x3d0 [ 2017.551670] ? ip6_setup_cork+0xfb7/0x1740 [ 2017.551967] FAT-fs (loop7): Unrecognized mount option "MÊrö€¸†u†ÝµY.S]?°>z{Íz9]òþ„ÿÙi€šü?´ñ3}¬¨ü%ö‹'å'˘¹7%<}ƒ?Tˆ$®¬ÞÑ…2_´c§ÿüqÞOuH†$Ó-µ*k™zóbÿ-}ñ8©^AéLe‰þ^£´Ð;­00000000000000000000" or missing value [ 2017.552531] ip6_make_skb+0x2de/0x4e0 [ 2017.557021] ? ip_frag_init+0x350/0x350 [ 2017.557817] ? ip_frag_init+0x350/0x350 [ 2017.558616] ? ip6_push_pending_frames+0xf0/0xf0 [ 2017.559567] ? ip6_dst_hoplimit+0x199/0x440 [ 2017.560466] ? lock_downgrade+0x6d0/0x6d0 [ 2017.561319] udpv6_sendmsg+0x20d0/0x2af0 [ 2017.562150] ? ip_frag_init+0x350/0x350 [ 2017.562966] ? udp_v6_push_pending_frames+0x360/0x360 [ 2017.564019] ? __lockdep_reset_lock+0x180/0x180 [ 2017.564978] ? __lockdep_reset_lock+0x180/0x180 [ 2017.565949] ? lock_acquire+0x197/0x470 [ 2017.566755] ? find_held_lock+0x2c/0x110 [ 2017.567592] ? sock_has_perm+0x1ea/0x280 [ 2017.568441] ? __import_iovec+0x458/0x590 [ 2017.569270] ? udp_v6_push_pending_frames+0x360/0x360 [ 2017.570303] inet6_sendmsg+0x105/0x140 [ 2017.571084] ? inet6_compat_ioctl+0x320/0x320 [ 2017.571989] __sock_sendmsg+0xf2/0x190 [ 2017.572774] ____sys_sendmsg+0x334/0x870 [ 2017.573590] ? sock_write_iter+0x3d0/0x3d0 [ 2017.574450] ? do_recvmmsg+0x6d0/0x6d0 [ 2017.575240] ? handle_mm_fault+0x9e9/0x3500 [ 2017.576123] ? find_held_lock+0x2c/0x110 [ 2017.576956] ___sys_sendmsg+0xf3/0x170 [ 2017.577756] ? sendmsg_copy_msghdr+0x160/0x160 [ 2017.578684] ? vmacache_find+0x55/0x2a0 [ 2017.579502] ? do_user_addr_fault+0x5b0/0xc60 [ 2017.580419] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2017.581470] ? exc_page_fault+0xca/0x1a0 [ 2017.582286] ? trace_hardirqs_on+0x5b/0x180 [ 2017.583145] ? exc_page_fault+0xca/0x1a0 [ 2017.583982] ? asm_exc_page_fault+0x1e/0x30 [ 2017.584868] __sys_sendmmsg+0x195/0x470 [ 2017.585676] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2017.586573] ? lock_downgrade+0x6d0/0x6d0 [ 2017.587443] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2017.588430] ? wait_for_completion_io+0x270/0x270 [ 2017.589405] ? rcu_read_lock_any_held+0x75/0xa0 [ 2017.590338] ? vfs_write+0x354/0xa70 [ 2017.591089] ? fput_many+0x2f/0x1a0 [ 2017.591840] ? ksys_write+0x1a9/0x260 [ 2017.592620] ? __ia32_sys_read+0xb0/0xb0 [ 2017.593457] __x64_sys_sendmmsg+0x99/0x100 [ 2017.594337] do_syscall_64+0x33/0x40 [ 2017.595084] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2017.596115] RIP: 0033:0x7f5519312b19 [ 2017.596855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2017.600543] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2017.602056] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 2017.603475] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2017.604910] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2017.606345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2017.607779] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 22:00:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 3) 22:00:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 14) 22:00:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:00:12 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000100)='syz_tun\x00') setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240)=0x90, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0xfffffffffffffe8c, 0xcd08, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xa4482}, 0x18) 22:00:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:00:12 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 6) 22:00:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 37) 22:00:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2033.182543] FAULT_INJECTION: forcing a failure. [ 2033.182543] name failslab, interval 1, probability 0, space 0, times 0 [ 2033.184789] CPU: 0 PID: 12111 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2033.186140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2033.187733] Call Trace: [ 2033.188278] dump_stack+0x107/0x167 [ 2033.188993] should_fail.cold+0x5/0xa [ 2033.189736] ? create_object.isra.0+0x3a/0xa20 [ 2033.190618] should_failslab+0x5/0x20 [ 2033.191363] kmem_cache_alloc+0x5b/0x310 [ 2033.192164] create_object.isra.0+0x3a/0xa20 [ 2033.192557] FAULT_INJECTION: forcing a failure. [ 2033.192557] name failslab, interval 1, probability 0, space 0, times 0 [ 2033.193013] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2033.193040] kmem_cache_alloc+0x159/0x310 [ 2033.193068] skb_clone+0x14f/0x3d0 [ 2033.193094] packet_rcv+0x558/0x1410 [ 2033.198878] packet_rcv_fanout+0x278/0x9d0 [ 2033.199725] ? packet_getname_spkt+0x300/0x300 [ 2033.200643] dev_queue_xmit_nit+0x38b/0xb00 [ 2033.201532] dev_hard_start_xmit+0xab/0x6f0 [ 2033.202397] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2033.203450] __dev_queue_xmit+0x17ec/0x2710 [ 2033.204343] ? find_held_lock+0x2c/0x110 [ 2033.205161] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2033.206080] ? lock_downgrade+0x6d0/0x6d0 [ 2033.206910] ? lock_acquire+0x197/0x470 [ 2033.207703] ? ip6_finish_output2+0x203/0x1fe0 [ 2033.208643] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2033.209689] neigh_connected_output+0x382/0x4d0 [ 2033.210630] ip6_finish_output2+0xaaf/0x1fe0 [ 2033.211522] __ip6_finish_output.part.0+0x4f7/0xb50 [ 2033.212531] ip6_output+0x3aa/0x7e0 [ 2033.213263] ip6_local_out+0xb4/0x1a0 [ 2033.214023] ip6_send_skb+0xb7/0x350 [ 2033.214767] udp_v6_send_skb+0x7aa/0x15b0 [ 2033.215594] udpv6_sendmsg+0x2113/0x2af0 [ 2033.216421] ? ip_frag_init+0x350/0x350 [ 2033.217219] ? udp_v6_push_pending_frames+0x360/0x360 [ 2033.218235] ? __lockdep_reset_lock+0x180/0x180 [ 2033.219167] ? __lockdep_reset_lock+0x180/0x180 [ 2033.220106] ? lock_acquire+0x197/0x470 [ 2033.220888] ? find_held_lock+0x2c/0x110 [ 2033.221724] ? lock_chain_count+0x20/0x20 [ 2033.222558] ? sock_has_perm+0x1ea/0x280 [ 2033.223406] ? __import_iovec+0x458/0x590 [ 2033.224232] ? udp_v6_push_pending_frames+0x360/0x360 [ 2033.225257] inet6_sendmsg+0x105/0x140 [ 2033.226030] ? inet6_compat_ioctl+0x320/0x320 [ 2033.226921] __sock_sendmsg+0xf2/0x190 [ 2033.227705] ____sys_sendmsg+0x334/0x870 [ 2033.228531] ? sock_write_iter+0x3d0/0x3d0 [ 2033.229372] ? do_recvmmsg+0x6d0/0x6d0 [ 2033.230146] ? __lock_acquire+0x1657/0x5b00 [ 2033.231020] ___sys_sendmsg+0xf3/0x170 [ 2033.231787] ? sendmsg_copy_msghdr+0x160/0x160 [ 2033.232699] ? __lockdep_reset_lock+0x180/0x180 [ 2033.233605] ? trace_hardirqs_on+0x5b/0x180 [ 2033.234461] ? lock_acquire+0x197/0x470 [ 2033.235246] ? find_held_lock+0x2c/0x110 [ 2033.236067] ? __might_fault+0xd3/0x180 [ 2033.236847] ? lock_downgrade+0x6d0/0x6d0 [ 2033.237668] ? io_schedule_timeout+0x140/0x140 [ 2033.238578] __sys_sendmmsg+0x195/0x470 [ 2033.239361] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2033.240206] ? lock_downgrade+0x6d0/0x6d0 [ 2033.241037] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2033.241986] ? wait_for_completion_io+0x270/0x270 [ 2033.242925] ? rcu_read_lock_any_held+0x75/0xa0 [ 2033.243821] ? vfs_write+0x354/0xa70 [ 2033.244570] ? fput_many+0x2f/0x1a0 [ 2033.245291] ? ksys_write+0x1a9/0x260 [ 2033.246049] ? __ia32_sys_read+0xb0/0xb0 [ 2033.246871] __x64_sys_sendmmsg+0x99/0x100 [ 2033.247718] do_syscall_64+0x33/0x40 [ 2033.248477] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2033.249476] RIP: 0033:0x7fd6f698fb19 [ 2033.250203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2033.253769] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2033.255245] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 2033.256644] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2033.258023] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 2033.259400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2033.260786] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 [ 2033.262303] CPU: 1 PID: 12101 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 2033.263924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2033.265809] Call Trace: [ 2033.266419] dump_stack+0x107/0x167 [ 2033.267263] should_fail.cold+0x5/0xa [ 2033.268142] ? create_object.isra.0+0x3a/0xa20 [ 2033.269178] should_failslab+0x5/0x20 [ 2033.270040] kmem_cache_alloc+0x5b/0x310 [ 2033.270957] ? lock_is_held_type+0xd2/0x110 [ 2033.271981] create_object.isra.0+0x3a/0xa20 [ 2033.272987] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2033.274154] kmem_cache_alloc_node+0x169/0x330 [ 2033.275197] __alloc_skb+0x6d/0x5b0 [ 2033.276051] alloc_skb_with_frags+0x92/0x570 [ 2033.277051] ? mark_lock+0xf5/0x2df0 [ 2033.277891] ? lock_acquire+0x197/0x470 [ 2033.278800] sock_alloc_send_pskb+0x7af/0x930 [ 2033.279869] ? sk_alloc+0x350/0x350 [ 2033.280709] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2033.281971] ? __ip6_append_data.isra.0+0x1b76/0x3a70 [ 2033.283143] ? __ip6_append_data.isra.0+0x1b91/0x3a70 [ 2033.284333] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2033.285500] ? ip6_mtu+0x1bb/0x3d0 [ 2033.286316] ? lock_downgrade+0x6d0/0x6d0 [ 2033.287251] ? ip_frag_init+0x350/0x350 [ 2033.288192] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2033.289242] ? ip6_mtu+0x1e9/0x3d0 [ 2033.290040] ? ip6_setup_cork+0xfb7/0x1740 [ 2033.290999] ip6_make_skb+0x2de/0x4e0 [ 2033.291871] ? ip_frag_init+0x350/0x350 [ 2033.292771] ? ip_frag_init+0x350/0x350 [ 2033.293671] ? ip6_push_pending_frames+0xf0/0xf0 [ 2033.294746] ? ip6_dst_hoplimit+0x199/0x440 [ 2033.295735] ? lock_downgrade+0x6d0/0x6d0 [ 2033.296704] udpv6_sendmsg+0x20d0/0x2af0 [ 2033.297626] ? ip_frag_init+0x350/0x350 [ 2033.298536] ? udp_v6_push_pending_frames+0x360/0x360 [ 2033.299694] ? _down_write_nest_lock+0x160/0x160 [ 2033.300775] ? vmacache_update+0xce/0x140 [ 2033.301725] ? do_user_addr_fault+0x5b0/0xc60 [ 2033.302747] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2033.303982] ? asm_exc_page_fault+0x1e/0x30 [ 2033.304966] ? sock_has_perm+0x1ea/0x280 [ 2033.305933] ? __import_iovec+0x458/0x590 [ 2033.306877] ? udp_v6_push_pending_frames+0x360/0x360 [ 2033.308050] inet6_sendmsg+0x105/0x140 [ 2033.308931] ? inet6_compat_ioctl+0x320/0x320 [ 2033.309934] __sock_sendmsg+0xf2/0x190 [ 2033.310818] ____sys_sendmsg+0x334/0x870 [ 2033.311748] ? sock_write_iter+0x3d0/0x3d0 [ 2033.312705] ? do_recvmmsg+0x6d0/0x6d0 [ 2033.313582] ? perf_trace_lock+0xac/0x490 [ 2033.314527] ? __lockdep_reset_lock+0x180/0x180 [ 2033.315582] ? perf_trace_lock+0xac/0x490 [ 2033.316556] ___sys_sendmsg+0xf3/0x170 [ 2033.317446] ? sendmsg_copy_msghdr+0x160/0x160 [ 2033.318477] ? __fget_files+0x26d/0x4c0 [ 2033.319366] ? lock_downgrade+0x6d0/0x6d0 [ 2033.320313] ? lock_downgrade+0x6d0/0x6d0 [ 2033.321247] ? __fget_files+0x296/0x4c0 [ 2033.322150] ? __fget_light+0xea/0x290 [ 2033.323035] __sys_sendmmsg+0x195/0x470 [ 2033.323946] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2033.324908] ? lock_downgrade+0x6d0/0x6d0 [ 2033.325865] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2033.326957] ? wait_for_completion_io+0x270/0x270 [ 2033.327682] FAULT_INJECTION: forcing a failure. [ 2033.327682] name failslab, interval 1, probability 0, space 0, times 0 [ 2033.328057] ? rcu_read_lock_any_held+0x75/0xa0 [ 2033.328076] ? vfs_write+0x354/0xa70 [ 2033.328102] ? fput_many+0x2f/0x1a0 [ 2033.328124] ? ksys_write+0x1a9/0x260 [ 2033.328146] ? __ia32_sys_read+0xb0/0xb0 [ 2033.328177] __x64_sys_sendmmsg+0x99/0x100 [ 2033.328202] do_syscall_64+0x33/0x40 [ 2033.328226] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2033.328239] RIP: 0033:0x7fed8099eb19 [ 2033.328259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2033.328271] RSP: 002b:00007fed7df14188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2033.328293] RAX: ffffffffffffffda RBX: 00007fed80ab1f60 RCX: 00007fed8099eb19 [ 2033.328305] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2033.328318] RBP: 00007fed7df141d0 R08: 0000000000000000 R09: 0000000000000000 [ 2033.328330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2033.328342] R13: 00007ffc6f9e102f R14: 00007fed7df14300 R15: 0000000000022000 [ 2033.342820] FAULT_INJECTION: forcing a failure. [ 2033.342820] name failslab, interval 1, probability 0, space 0, times 0 [ 2033.343880] CPU: 0 PID: 12102 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2033.354116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2033.355675] Call Trace: [ 2033.356170] dump_stack+0x107/0x167 [ 2033.356862] should_fail.cold+0x5/0xa [ 2033.357579] ? create_object.isra.0+0x3a/0xa20 [ 2033.358445] should_failslab+0x5/0x20 [ 2033.359157] kmem_cache_alloc+0x5b/0x310 [ 2033.359946] create_object.isra.0+0x3a/0xa20 [ 2033.360777] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2033.361730] kmem_cache_alloc_node+0x169/0x330 [ 2033.362594] __alloc_skb+0x6d/0x5b0 [ 2033.363281] alloc_skb_with_frags+0x92/0x570 [ 2033.364111] ? find_held_lock+0x2c/0x110 [ 2033.364889] sock_alloc_send_pskb+0x7af/0x930 [ 2033.365749] ? sk_alloc+0x350/0x350 [ 2033.366442] ? perf_trace_lock+0xac/0x490 [ 2033.367218] ? SOFTIRQ_verbose+0x10/0x10 [ 2033.367994] ? lock_chain_count+0x20/0x20 [ 2033.368784] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2033.369740] ? ip6_mtu+0x1bb/0x3d0 [ 2033.370422] ? lock_downgrade+0x6d0/0x6d0 [ 2033.371197] ? ip_frag_init+0x350/0x350 [ 2033.371984] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2033.372852] ? ip6_mtu+0x1e9/0x3d0 [ 2033.373521] ? ip6_setup_cork+0xfb7/0x1740 [ 2033.374328] ip6_make_skb+0x2de/0x4e0 [ 2033.375036] ? ip_frag_init+0x350/0x350 [ 2033.375757] ? ip_frag_init+0x350/0x350 [ 2033.376486] ? ip6_push_pending_frames+0xf0/0xf0 [ 2033.377322] ? ip6_dst_hoplimit+0x199/0x440 [ 2033.378125] ? lock_downgrade+0x6d0/0x6d0 [ 2033.378887] udpv6_sendmsg+0x20d0/0x2af0 [ 2033.379658] ? ip_frag_init+0x350/0x350 [ 2033.380417] ? udp_v6_push_pending_frames+0x360/0x360 [ 2033.381376] ? __lockdep_reset_lock+0x180/0x180 [ 2033.382224] ? __lockdep_reset_lock+0x180/0x180 [ 2033.383101] ? lock_acquire+0x197/0x470 [ 2033.383810] ? find_held_lock+0x2c/0x110 [ 2033.384591] ? sock_has_perm+0x1ea/0x280 [ 2033.385377] ? __import_iovec+0x458/0x590 [ 2033.386146] ? udp_v6_push_pending_frames+0x360/0x360 [ 2033.387107] inet6_sendmsg+0x105/0x140 [ 2033.387829] ? inet6_compat_ioctl+0x320/0x320 [ 2033.388668] __sock_sendmsg+0xf2/0x190 [ 2033.389417] ____sys_sendmsg+0x334/0x870 [ 2033.390203] ? sock_write_iter+0x3d0/0x3d0 [ 2033.390988] ? do_recvmmsg+0x6d0/0x6d0 [ 2033.391717] ? handle_mm_fault+0x9e9/0x3500 [ 2033.392530] ? __lock_acquire+0x1657/0x5b00 [ 2033.393330] ? find_held_lock+0x2c/0x110 [ 2033.394085] ___sys_sendmsg+0xf3/0x170 [ 2033.394808] ? sendmsg_copy_msghdr+0x160/0x160 [ 2033.395651] ? vmacache_find+0x55/0x2a0 [ 2033.396423] ? do_user_addr_fault+0x5b0/0xc60 [ 2033.397252] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2033.398230] ? exc_page_fault+0xca/0x1a0 [ 2033.398971] ? trace_hardirqs_on+0x5b/0x180 [ 2033.399790] ? exc_page_fault+0xca/0x1a0 [ 2033.400553] ? asm_exc_page_fault+0x1e/0x30 [ 2033.401375] __sys_sendmmsg+0x195/0x470 [ 2033.402108] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2033.402900] ? lock_downgrade+0x6d0/0x6d0 [ 2033.403685] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2033.404595] ? wait_for_completion_io+0x270/0x270 [ 2033.405485] ? rcu_read_lock_any_held+0x75/0xa0 [ 2033.406361] ? vfs_write+0x354/0xa70 [ 2033.407064] ? fput_many+0x2f/0x1a0 [ 2033.407738] ? ksys_write+0x1a9/0x260 [ 2033.408463] ? __ia32_sys_read+0xb0/0xb0 [ 2033.409219] __x64_sys_sendmmsg+0x99/0x100 [ 2033.409999] do_syscall_64+0x33/0x40 [ 2033.410692] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2033.411636] RIP: 0033:0x7f5519312b19 [ 2033.412339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2033.415739] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2033.417145] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 2033.418450] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2033.419764] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2033.421105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2033.422415] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 [ 2033.423778] CPU: 1 PID: 12109 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 2033.425345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2033.427168] Call Trace: [ 2033.427763] dump_stack+0x107/0x167 [ 2033.428610] should_fail.cold+0x5/0xa [ 2033.429486] ? create_object.isra.0+0x3a/0xa20 [ 2033.430506] should_failslab+0x5/0x20 [ 2033.431339] kmem_cache_alloc+0x5b/0x310 [ 2033.432258] create_object.isra.0+0x3a/0xa20 [ 2033.433228] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2033.434348] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2033.435438] ? alloc_skb_with_frags+0x92/0x570 [ 2033.436482] __alloc_skb+0xb1/0x5b0 [ 2033.437288] alloc_skb_with_frags+0x92/0x570 [ 2033.438273] sock_alloc_send_pskb+0x7af/0x930 [ 2033.439291] ? sk_alloc+0x350/0x350 [ 2033.440116] ? perf_trace_lock+0xac/0x490 [ 2033.441009] ? SOFTIRQ_verbose+0x10/0x10 [ 2033.441904] ? lock_chain_count+0x20/0x20 [ 2033.442823] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2033.443956] ? ip6_mtu+0x1bb/0x3d0 [ 2033.444726] ? lock_downgrade+0x6d0/0x6d0 [ 2033.445644] ? ip_frag_init+0x350/0x350 [ 2033.446524] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2033.447573] ? ip6_mtu+0x1e9/0x3d0 [ 2033.448376] ? ip6_setup_cork+0xfb7/0x1740 [ 2033.449317] ip6_make_skb+0x2de/0x4e0 [ 2033.450161] ? ip_frag_init+0x350/0x350 [ 2033.451047] ? ip_frag_init+0x350/0x350 [ 2033.451939] ? ip6_push_pending_frames+0xf0/0xf0 [ 2033.452988] ? ip6_dst_hoplimit+0x199/0x440 [ 2033.453927] ? lock_downgrade+0x6d0/0x6d0 [ 2033.454860] udpv6_sendmsg+0x20d0/0x2af0 [ 2033.455762] ? ip_frag_init+0x350/0x350 [ 2033.456640] ? udp_v6_push_pending_frames+0x360/0x360 [ 2033.457792] ? _down_write_nest_lock+0x160/0x160 [ 2033.458864] ? vmacache_update+0xce/0x140 [ 2033.459759] ? do_user_addr_fault+0x5b0/0xc60 [ 2033.460746] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2033.461874] ? asm_exc_page_fault+0x1e/0x30 [ 2033.462810] ? sock_has_perm+0x1ea/0x280 [ 2033.463720] ? __import_iovec+0x458/0x590 [ 2033.464651] ? udp_v6_push_pending_frames+0x360/0x360 [ 2033.465754] inet6_sendmsg+0x105/0x140 [ 2033.466586] ? inet6_compat_ioctl+0x320/0x320 [ 2033.467550] __sock_sendmsg+0xf2/0x190 [ 2033.468397] ____sys_sendmsg+0x334/0x870 [ 2033.469273] ? sock_write_iter+0x3d0/0x3d0 [ 2033.470164] ? do_recvmmsg+0x6d0/0x6d0 [ 2033.471012] ? perf_trace_lock+0xac/0x490 [ 2033.471945] ? __lockdep_reset_lock+0x180/0x180 [ 2033.472963] ? perf_trace_lock+0xac/0x490 [ 2033.473870] ___sys_sendmsg+0xf3/0x170 [ 2033.474711] ? sendmsg_copy_msghdr+0x160/0x160 [ 2033.475706] ? __fget_files+0x26d/0x4c0 [ 2033.476587] ? lock_downgrade+0x6d0/0x6d0 [ 2033.477480] ? lock_downgrade+0x6d0/0x6d0 [ 2033.478379] ? __fget_files+0x296/0x4c0 [ 2033.479240] ? __fget_light+0xea/0x290 [ 2033.480104] __sys_sendmmsg+0x195/0x470 [ 2033.480974] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2033.481916] ? lock_downgrade+0x6d0/0x6d0 [ 2033.482843] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2033.483890] ? wait_for_completion_io+0x270/0x270 [ 2033.484948] ? rcu_read_lock_any_held+0x75/0xa0 [ 2033.485940] ? vfs_write+0x354/0xa70 [ 2033.486767] ? fput_many+0x2f/0x1a0 [ 2033.487554] ? ksys_write+0x1a9/0x260 [ 2033.488405] ? __ia32_sys_read+0xb0/0xb0 [ 2033.489279] __x64_sys_sendmmsg+0x99/0x100 [ 2033.490181] do_syscall_64+0x33/0x40 [ 2033.490978] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2033.492085] RIP: 0033:0x7f8ee15a0b19 [ 2033.492884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2033.496848] RSP: 002b:00007f8edeb16188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2033.498477] RAX: ffffffffffffffda RBX: 00007f8ee16b3f60 RCX: 00007f8ee15a0b19 [ 2033.500012] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2033.501568] RBP: 00007f8edeb161d0 R08: 0000000000000000 R09: 0000000000000000 [ 2033.503112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2033.504678] R13: 00007ffda1f41f5f R14: 00007f8edeb16300 R15: 0000000000022000 22:00:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:00:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 38) 22:00:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2033.639170] FAULT_INJECTION: forcing a failure. [ 2033.639170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2033.642175] CPU: 0 PID: 12119 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2033.643883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2033.645843] Call Trace: [ 2033.646466] dump_stack+0x107/0x167 [ 2033.647382] should_fail.cold+0x5/0xa 22:00:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 15) [ 2033.648308] _copy_from_user+0x2e/0x1b0 [ 2033.649352] __copy_msghdr_from_user+0x91/0x4b0 [ 2033.650252] ? __ia32_sys_shutdown+0x80/0x80 [ 2033.651150] ? udp_v6_push_pending_frames+0x360/0x360 [ 2033.652206] ? inet6_sendmsg+0xbd/0x140 [ 2033.652982] ? inet6_compat_ioctl+0x320/0x320 [ 2033.653858] ? __sock_sendmsg+0x55/0x190 [ 2033.654697] sendmsg_copy_msghdr+0xa1/0x160 [ 2033.655550] ? do_recvmmsg+0x6d0/0x6d0 [ 2033.656383] ? __lock_acquire+0x1657/0x5b00 [ 2033.657233] ___sys_sendmsg+0xc6/0x170 [ 2033.657984] ? sendmsg_copy_msghdr+0x160/0x160 [ 2033.658919] ? __lockdep_reset_lock+0x180/0x180 [ 2033.659845] ? trace_hardirqs_on+0x5b/0x180 [ 2033.660762] ? lock_acquire+0x197/0x470 [ 2033.661571] ? find_held_lock+0x2c/0x110 [ 2033.662417] ? __might_fault+0xd3/0x180 [ 2033.663259] ? lock_downgrade+0x6d0/0x6d0 [ 2033.664069] ? io_schedule_timeout+0x140/0x140 [ 2033.664963] __sys_sendmmsg+0x195/0x470 [ 2033.665738] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2033.666622] ? lock_downgrade+0x6d0/0x6d0 [ 2033.667519] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2033.668527] ? wait_for_completion_io+0x270/0x270 [ 2033.669524] ? rcu_read_lock_any_held+0x75/0xa0 [ 2033.670447] ? vfs_write+0x354/0xa70 [ 2033.671216] ? fput_many+0x2f/0x1a0 [ 2033.671972] ? ksys_write+0x1a9/0x260 [ 2033.672725] ? __ia32_sys_read+0xb0/0xb0 [ 2033.673560] __x64_sys_sendmmsg+0x99/0x100 [ 2033.674412] do_syscall_64+0x33/0x40 [ 2033.675148] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2033.676210] RIP: 0033:0x7fd6f698fb19 [ 2033.676962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2033.680790] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2033.682343] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 2033.683837] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2033.685325] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 2033.686796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2033.688305] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 22:00:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2033.766843] FAULT_INJECTION: forcing a failure. [ 2033.766843] name failslab, interval 1, probability 0, space 0, times 0 [ 2033.769894] CPU: 0 PID: 12124 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2033.771314] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2033.773021] Call Trace: [ 2033.773584] dump_stack+0x107/0x167 [ 2033.774355] should_fail.cold+0x5/0xa [ 2033.775133] ? create_object.isra.0+0x3a/0xa20 [ 2033.776114] should_failslab+0x5/0x20 [ 2033.776894] kmem_cache_alloc+0x5b/0x310 [ 2033.777771] create_object.isra.0+0x3a/0xa20 [ 2033.778671] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2033.779713] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2033.780770] ? alloc_skb_with_frags+0x92/0x570 [ 2033.781752] __alloc_skb+0xb1/0x5b0 [ 2033.782505] alloc_skb_with_frags+0x92/0x570 [ 2033.783400] ? find_held_lock+0x2c/0x110 [ 2033.784255] sock_alloc_send_pskb+0x7af/0x930 [ 2033.785185] ? sk_alloc+0x350/0x350 [ 2033.785968] ? perf_trace_lock+0xac/0x490 [ 2033.786811] ? SOFTIRQ_verbose+0x10/0x10 [ 2033.787664] ? lock_chain_count+0x20/0x20 [ 2033.788530] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2033.789557] ? ip6_mtu+0x1bb/0x3d0 [ 2033.790280] ? lock_downgrade+0x6d0/0x6d0 [ 2033.791122] ? ip_frag_init+0x350/0x350 [ 2033.791969] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2033.792930] ? ip6_mtu+0x1e9/0x3d0 [ 2033.793655] ? ip6_setup_cork+0xfb7/0x1740 [ 2033.794521] ip6_make_skb+0x2de/0x4e0 [ 2033.795290] ? ip_frag_init+0x350/0x350 [ 2033.796111] ? ip_frag_init+0x350/0x350 [ 2033.796953] ? ip6_push_pending_frames+0xf0/0xf0 [ 2033.797925] ? ip6_dst_hoplimit+0x199/0x440 [ 2033.798803] ? lock_downgrade+0x6d0/0x6d0 [ 2033.799665] udpv6_sendmsg+0x20d0/0x2af0 [ 2033.800527] ? ip_frag_init+0x350/0x350 [ 2033.801389] ? udp_v6_push_pending_frames+0x360/0x360 [ 2033.802416] ? __lockdep_reset_lock+0x180/0x180 [ 2033.803401] ? __lockdep_reset_lock+0x180/0x180 [ 2033.804377] ? lock_acquire+0x197/0x470 [ 2033.805254] ? find_held_lock+0x2c/0x110 [ 2033.806092] ? sock_has_perm+0x1ea/0x280 [ 2033.806973] ? __import_iovec+0x458/0x590 [ 2033.807810] ? udp_v6_push_pending_frames+0x360/0x360 [ 2033.808944] inet6_sendmsg+0x105/0x140 [ 2033.809742] ? inet6_compat_ioctl+0x320/0x320 [ 2033.810655] __sock_sendmsg+0xf2/0x190 [ 2033.811452] ____sys_sendmsg+0x334/0x870 [ 2033.812305] ? sock_write_iter+0x3d0/0x3d0 [ 2033.813200] ? do_recvmmsg+0x6d0/0x6d0 [ 2033.814033] ? handle_mm_fault+0x9e9/0x3500 [ 2033.814944] ? __lock_acquire+0x1657/0x5b00 [ 2033.815891] ? find_held_lock+0x2c/0x110 [ 2033.816727] ___sys_sendmsg+0xf3/0x170 [ 2033.817551] ? sendmsg_copy_msghdr+0x160/0x160 [ 2033.818490] ? vmacache_find+0x55/0x2a0 [ 2033.819355] ? do_user_addr_fault+0x5b0/0xc60 [ 2033.820342] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2033.821427] ? exc_page_fault+0xca/0x1a0 [ 2033.822287] ? trace_hardirqs_on+0x5b/0x180 [ 2033.823180] ? exc_page_fault+0xca/0x1a0 [ 2033.824027] ? asm_exc_page_fault+0x1e/0x30 [ 2033.824975] __sys_sendmmsg+0x195/0x470 [ 2033.825912] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2033.826820] ? lock_downgrade+0x6d0/0x6d0 [ 2033.827673] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2033.828700] ? wait_for_completion_io+0x270/0x270 [ 2033.829710] ? rcu_read_lock_any_held+0x75/0xa0 [ 2033.830679] ? vfs_write+0x354/0xa70 [ 2033.831428] ? fput_many+0x2f/0x1a0 [ 2033.832233] ? ksys_write+0x1a9/0x260 [ 2033.833001] ? __ia32_sys_read+0xb0/0xb0 [ 2033.833822] __x64_sys_sendmmsg+0x99/0x100 [ 2033.834694] do_syscall_64+0x33/0x40 [ 2033.835444] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2033.836544] RIP: 0033:0x7f5519312b19 [ 2033.837345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2033.841126] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2033.842673] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 2033.844146] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2033.845628] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2033.847080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2033.848689] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 22:00:27 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:00:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:00:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:00:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 39) 22:00:27 executing program 7: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x8, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',dfltgid=', @ANYRESHEX, @ANYBLOB=',posixacl,loose,versi', @ANYRESHEX=0x0, @ANYBLOB=',version=9p200', @ANYRESDEC, @ANYBLOB]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61, 0x6}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwrite64(r4, &(0x7f0000000480)="af", 0x1, 0x1000000) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0x78) copy_file_range(r4, &(0x7f00000000c0)=0xfff, r2, &(0x7f0000000180)=0xff, 0x1ff, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 22:00:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 16) 22:00:27 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:00:27 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2048.163199] FAULT_INJECTION: forcing a failure. [ 2048.163199] name failslab, interval 1, probability 0, space 0, times 0 [ 2048.165766] CPU: 1 PID: 12136 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2048.167186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2048.168861] Call Trace: [ 2048.169412] dump_stack+0x107/0x167 [ 2048.170160] should_fail.cold+0x5/0xa [ 2048.170952] ? create_object.isra.0+0x3a/0xa20 [ 2048.171875] should_failslab+0x5/0x20 [ 2048.172682] kmem_cache_alloc+0x5b/0x310 [ 2048.173518] create_object.isra.0+0x3a/0xa20 [ 2048.174434] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2048.175467] kmem_cache_alloc_node+0x169/0x330 [ 2048.176430] __alloc_skb+0x6d/0x5b0 [ 2048.177176] alloc_skb_with_frags+0x92/0x570 [ 2048.178057] ? find_held_lock+0x2c/0x110 [ 2048.178890] sock_alloc_send_pskb+0x7af/0x930 [ 2048.179808] ? sk_alloc+0x350/0x350 [ 2048.180560] ? perf_trace_lock+0xac/0x490 [ 2048.181394] ? SOFTIRQ_verbose+0x10/0x10 [ 2048.182210] ? lock_chain_count+0x20/0x20 [ 2048.183054] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2048.184086] ? ip6_mtu+0x1bb/0x3d0 [ 2048.184828] ? lock_downgrade+0x6d0/0x6d0 [ 2048.185663] ? ip_frag_init+0x350/0x350 [ 2048.186475] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2048.187410] ? ip6_mtu+0x1e9/0x3d0 [ 2048.188136] ? ip6_setup_cork+0xfb7/0x1740 [ 2048.188995] ip6_make_skb+0x2de/0x4e0 [ 2048.189760] ? ip_frag_init+0x350/0x350 [ 2048.190564] ? ip_frag_init+0x350/0x350 [ 2048.191368] ? ip6_push_pending_frames+0xf0/0xf0 [ 2048.192345] ? ip6_dst_hoplimit+0x199/0x440 [ 2048.193208] ? lock_downgrade+0x6d0/0x6d0 [ 2048.194064] udpv6_sendmsg+0x20d0/0x2af0 [ 2048.194887] ? ip_frag_init+0x350/0x350 [ 2048.195698] ? udp_v6_push_pending_frames+0x360/0x360 [ 2048.196744] ? __lockdep_reset_lock+0x180/0x180 [ 2048.197695] ? __lockdep_reset_lock+0x180/0x180 [ 2048.198641] ? lock_acquire+0x197/0x470 [ 2048.199439] ? find_held_lock+0x2c/0x110 [ 2048.200288] ? sock_has_perm+0x1ea/0x280 [ 2048.200846] FAULT_INJECTION: forcing a failure. [ 2048.200846] name failslab, interval 1, probability 0, space 0, times 0 [ 2048.201128] ? __import_iovec+0x458/0x590 [ 2048.201149] ? udp_v6_push_pending_frames+0x360/0x360 [ 2048.201172] inet6_sendmsg+0x105/0x140 [ 2048.201192] ? inet6_compat_ioctl+0x320/0x320 [ 2048.201208] __sock_sendmsg+0xf2/0x190 [ 2048.201228] ____sys_sendmsg+0x334/0x870 [ 2048.201251] ? sock_write_iter+0x3d0/0x3d0 [ 2048.201266] ? do_recvmmsg+0x6d0/0x6d0 [ 2048.201289] ? __lock_acquire+0x1657/0x5b00 [ 2048.201322] ___sys_sendmsg+0xf3/0x170 [ 2048.201344] ? sendmsg_copy_msghdr+0x160/0x160 [ 2048.201358] ? vmacache_find+0x55/0x2a0 [ 2048.201381] ? __lockdep_reset_lock+0x180/0x180 [ 2048.201409] ? lock_acquire+0x197/0x470 [ 2048.201426] ? find_held_lock+0x2c/0x110 [ 2048.201450] ? __might_fault+0xd3/0x180 [ 2048.201469] ? lock_downgrade+0x6d0/0x6d0 [ 2048.201486] ? asm_exc_page_fault+0x1e/0x30 [ 2048.201526] __sys_sendmmsg+0x195/0x470 [ 2048.201552] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2048.201571] ? lock_downgrade+0x6d0/0x6d0 [ 2048.201611] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2048.201635] ? wait_for_completion_io+0x270/0x270 [ 2048.201656] ? rcu_read_lock_any_held+0x75/0xa0 [ 2048.201672] ? vfs_write+0x354/0xa70 [ 2048.201695] ? fput_many+0x2f/0x1a0 [ 2048.201715] ? ksys_write+0x1a9/0x260 [ 2048.201734] ? __ia32_sys_read+0xb0/0xb0 [ 2048.201762] __x64_sys_sendmmsg+0x99/0x100 [ 2048.201784] do_syscall_64+0x33/0x40 [ 2048.201805] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2048.201818] RIP: 0033:0x7fd6f698fb19 [ 2048.201852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2048.234340] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2048.235860] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 2048.237295] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2048.238717] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 2048.240146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2048.241566] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 [ 2048.243529] CPU: 0 PID: 12142 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2048.244986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2048.246693] Call Trace: [ 2048.247242] dump_stack+0x107/0x167 [ 2048.247997] should_fail.cold+0x5/0xa [ 2048.248794] ? create_object.isra.0+0x3a/0xa20 [ 2048.249740] should_failslab+0x5/0x20 [ 2048.250526] kmem_cache_alloc+0x5b/0x310 [ 2048.251368] create_object.isra.0+0x3a/0xa20 [ 2048.252297] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2048.253361] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2048.254415] ? alloc_skb_with_frags+0x92/0x570 [ 2048.255384] __alloc_skb+0xb1/0x5b0 [ 2048.256175] alloc_skb_with_frags+0x92/0x570 [ 2048.257101] ? find_held_lock+0x2c/0x110 [ 2048.257949] ? mark_lock+0xf5/0x2df0 [ 2048.258733] sock_alloc_send_pskb+0x7af/0x930 [ 2048.259688] ? sk_alloc+0x350/0x350 [ 2048.260474] ? perf_trace_lock+0xac/0x490 [ 2048.261343] ? SOFTIRQ_verbose+0x10/0x10 [ 2048.262193] ? lock_chain_count+0x20/0x20 [ 2048.263073] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2048.264142] ? ip6_mtu+0x1bb/0x3d0 [ 2048.264889] ? lock_downgrade+0x6d0/0x6d0 [ 2048.265768] ? ip_frag_init+0x350/0x350 [ 2048.266631] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2048.267622] ? ip6_mtu+0x1e9/0x3d0 [ 2048.268386] ? ip6_setup_cork+0xfb7/0x1740 [ 2048.269295] ip6_make_skb+0x2de/0x4e0 [ 2048.270091] ? ip_frag_init+0x350/0x350 [ 2048.270934] ? ip_frag_init+0x350/0x350 [ 2048.271786] ? ip6_push_pending_frames+0xf0/0xf0 [ 2048.272813] ? ip6_dst_hoplimit+0x199/0x440 [ 2048.273717] ? lock_downgrade+0x6d0/0x6d0 [ 2048.274632] udpv6_sendmsg+0x20d0/0x2af0 [ 2048.275507] ? ip_frag_init+0x350/0x350 [ 2048.276387] ? udp_v6_push_pending_frames+0x360/0x360 [ 2048.277460] ? __lockdep_reset_lock+0x180/0x180 [ 2048.278467] ? __lockdep_reset_lock+0x180/0x180 [ 2048.279477] ? lock_acquire+0x197/0x470 [ 2048.280327] ? find_held_lock+0x2c/0x110 [ 2048.281219] ? sock_has_perm+0x1ea/0x280 [ 2048.282116] ? __import_iovec+0x458/0x590 [ 2048.282983] ? udp_v6_push_pending_frames+0x360/0x360 [ 2048.284075] inet6_sendmsg+0x105/0x140 [ 2048.284921] ? inet6_compat_ioctl+0x320/0x320 [ 2048.285884] __sock_sendmsg+0xf2/0x190 [ 2048.286701] ____sys_sendmsg+0x334/0x870 [ 2048.287559] ? sock_write_iter+0x3d0/0x3d0 [ 2048.288475] ? do_recvmmsg+0x6d0/0x6d0 [ 2048.289314] ? handle_mm_fault+0x9e9/0x3500 [ 2048.290248] ? find_held_lock+0x2c/0x110 [ 2048.291108] ___sys_sendmsg+0xf3/0x170 [ 2048.291928] ? sendmsg_copy_msghdr+0x160/0x160 [ 2048.292933] ? vmacache_find+0x55/0x2a0 [ 2048.293814] ? do_user_addr_fault+0x5b0/0xc60 [ 2048.294786] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2048.295880] ? exc_page_fault+0xca/0x1a0 [ 2048.296767] ? trace_hardirqs_on+0x5b/0x180 [ 2048.297704] ? exc_page_fault+0xca/0x1a0 [ 2048.298590] ? asm_exc_page_fault+0x1e/0x30 [ 2048.299519] __sys_sendmmsg+0x195/0x470 [ 2048.300404] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2048.301336] ? lock_downgrade+0x6d0/0x6d0 [ 2048.302261] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2048.303271] ? wait_for_completion_io+0x270/0x270 [ 2048.304328] ? rcu_read_lock_any_held+0x75/0xa0 [ 2048.305333] ? vfs_write+0x354/0xa70 [ 2048.306136] ? fput_many+0x2f/0x1a0 [ 2048.306902] ? ksys_write+0x1a9/0x260 [ 2048.307697] ? __ia32_sys_read+0xb0/0xb0 [ 2048.308610] __x64_sys_sendmmsg+0x99/0x100 [ 2048.309549] do_syscall_64+0x33/0x40 [ 2048.310375] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2048.311501] RIP: 0033:0x7f5519312b19 [ 2048.312327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2048.316137] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2048.317733] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 2048.319202] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2048.320677] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2048.322125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2048.323589] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 22:00:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2048.413780] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2048.415786] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2048.417207] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2048.418540] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2048.420157] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 2048.428444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2048.430076] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2048.432335] Buffer I/O error on dev sr0, logical block 0, async page read [ 2048.436564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2048.437802] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2048.439846] Buffer I/O error on dev sr0, logical block 1, async page read [ 2048.443025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2048.444234] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2048.446309] Buffer I/O error on dev sr0, logical block 2, async page read [ 2048.449682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2048.450885] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2048.453005] Buffer I/O error on dev sr0, logical block 3, async page read [ 2048.456061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2048.457214] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2048.459243] Buffer I/O error on dev sr0, logical block 4, async page read 22:00:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2048.532395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2048.533633] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2048.535669] Buffer I/O error on dev sr0, logical block 5, async page read [ 2048.537933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2048.539091] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2048.541122] Buffer I/O error on dev sr0, logical block 6, async page read [ 2048.547273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2048.548447] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2048.550467] Buffer I/O error on dev sr0, logical block 7, async page read 22:00:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 40) 22:00:28 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2, 0x0) 22:00:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:00:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2, 0x0) 22:00:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 17) [ 2048.703918] FAULT_INJECTION: forcing a failure. [ 2048.703918] name failslab, interval 1, probability 0, space 0, times 0 [ 2048.706339] CPU: 0 PID: 12158 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2048.707750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2048.709453] Call Trace: [ 2048.709995] dump_stack+0x107/0x167 [ 2048.710749] should_fail.cold+0x5/0xa [ 2048.711532] ? __alloc_skb+0x6d/0x5b0 [ 2048.712321] should_failslab+0x5/0x20 [ 2048.713096] kmem_cache_alloc_node+0x55/0x330 [ 2048.714014] __alloc_skb+0x6d/0x5b0 [ 2048.714782] alloc_skb_with_frags+0x92/0x570 [ 2048.715682] ? find_held_lock+0x2c/0x110 [ 2048.716540] sock_alloc_send_pskb+0x7af/0x930 [ 2048.717480] ? sk_alloc+0x350/0x350 [ 2048.718234] ? perf_trace_lock+0xac/0x490 [ 2048.719081] ? SOFTIRQ_verbose+0x10/0x10 [ 2048.719919] ? lock_chain_count+0x20/0x20 [ 2048.720777] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2048.721816] ? ip6_mtu+0x1bb/0x3d0 [ 2048.722555] ? lock_downgrade+0x6d0/0x6d0 [ 2048.723395] ? ip_frag_init+0x350/0x350 [ 2048.724239] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2048.725191] ? ip6_mtu+0x1e9/0x3d0 [ 2048.725911] ? ip6_setup_cork+0xfb7/0x1740 [ 2048.726790] ip6_make_skb+0x2de/0x4e0 [ 2048.727566] ? ip_frag_init+0x350/0x350 [ 2048.728393] ? ip_frag_init+0x350/0x350 [ 2048.729235] ? ip6_push_pending_frames+0xf0/0xf0 [ 2048.730218] ? ip6_dst_hoplimit+0x199/0x440 [ 2048.731106] ? lock_downgrade+0x6d0/0x6d0 [ 2048.731965] udpv6_sendmsg+0x20d0/0x2af0 [ 2048.732807] ? ip_frag_init+0x350/0x350 [ 2048.733637] ? udp_v6_push_pending_frames+0x360/0x360 [ 2048.734696] ? __lockdep_reset_lock+0x180/0x180 [ 2048.735654] ? __lockdep_reset_lock+0x180/0x180 [ 2048.736629] ? lock_acquire+0x197/0x470 [ 2048.737435] ? find_held_lock+0x2c/0x110 [ 2048.738283] ? sock_has_perm+0x1ea/0x280 [ 2048.739143] ? __import_iovec+0x458/0x590 [ 2048.739980] ? udp_v6_push_pending_frames+0x360/0x360 [ 2048.741031] inet6_sendmsg+0x105/0x140 [ 2048.741828] ? inet6_compat_ioctl+0x320/0x320 [ 2048.742746] __sock_sendmsg+0xf2/0x190 [ 2048.743532] ____sys_sendmsg+0x334/0x870 [ 2048.744372] ? sock_write_iter+0x3d0/0x3d0 [ 2048.745235] ? do_recvmmsg+0x6d0/0x6d0 [ 2048.746038] ? __lock_acquire+0x1657/0x5b00 [ 2048.746932] ___sys_sendmsg+0xf3/0x170 [ 2048.747730] ? sendmsg_copy_msghdr+0x160/0x160 [ 2048.748683] ? vmacache_find+0x55/0x2a0 [ 2048.749505] ? __lockdep_reset_lock+0x180/0x180 [ 2048.750454] ? lock_acquire+0x197/0x470 [ 2048.751255] ? find_held_lock+0x2c/0x110 [ 2048.752085] ? __might_fault+0xd3/0x180 [ 2048.752905] ? lock_downgrade+0x6d0/0x6d0 [ 2048.753754] ? asm_exc_page_fault+0x1e/0x30 [ 2048.754652] __sys_sendmmsg+0x195/0x470 [ 2048.755462] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2048.756361] ? lock_downgrade+0x6d0/0x6d0 [ 2048.757237] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2048.758214] ? wait_for_completion_io+0x270/0x270 [ 2048.759189] ? rcu_read_lock_any_held+0x75/0xa0 [ 2048.760147] ? vfs_write+0x354/0xa70 [ 2048.760914] ? fput_many+0x2f/0x1a0 [ 2048.761666] ? ksys_write+0x1a9/0x260 [ 2048.762455] ? __ia32_sys_read+0xb0/0xb0 [ 2048.763293] __x64_sys_sendmmsg+0x99/0x100 [ 2048.764164] do_syscall_64+0x33/0x40 [ 2048.764936] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2048.765986] RIP: 0033:0x7fd6f698fb19 [ 2048.766742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2048.770522] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2048.772084] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 2048.773528] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2048.774999] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 2048.776496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2048.777970] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 [ 2048.817618] FAULT_INJECTION: forcing a failure. [ 2048.817618] name failslab, interval 1, probability 0, space 0, times 0 [ 2048.820046] CPU: 0 PID: 12165 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2048.821467] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2048.823151] Call Trace: [ 2048.823681] dump_stack+0x107/0x167 [ 2048.824429] should_fail.cold+0x5/0xa [ 2048.825195] ? lock_release+0x680/0x680 [ 2048.825997] ? skb_clone+0x14f/0x3d0 [ 2048.826755] should_failslab+0x5/0x20 [ 2048.827523] kmem_cache_alloc+0x5b/0x310 [ 2048.828365] skb_clone+0x14f/0x3d0 [ 2048.829086] dev_queue_xmit_nit+0x3a7/0xb00 [ 2048.829975] ? ipv6_mc_check_mld+0x1110/0x1110 [ 2048.830904] dev_hard_start_xmit+0xab/0x6f0 [ 2048.831796] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2048.832878] __dev_queue_xmit+0x17ec/0x2710 [ 2048.833771] ? find_held_lock+0x2c/0x110 [ 2048.834617] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2048.835542] ? lock_downgrade+0x6d0/0x6d0 [ 2048.836397] ? lock_acquire+0x197/0x470 [ 2048.837207] ? ip6_finish_output2+0x203/0x1fe0 [ 2048.838148] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2048.839226] neigh_connected_output+0x382/0x4d0 [ 2048.840197] ip6_finish_output2+0xaaf/0x1fe0 [ 2048.841099] __ip6_finish_output.part.0+0x4f7/0xb50 [ 2048.842101] ip6_output+0x3aa/0x7e0 [ 2048.842831] ip6_local_out+0xb4/0x1a0 [ 2048.843596] ip6_send_skb+0xb7/0x350 [ 2048.844362] udp_v6_send_skb+0x7aa/0x15b0 [ 2048.845212] udpv6_sendmsg+0x2113/0x2af0 [ 2048.846037] ? ip_frag_init+0x350/0x350 [ 2048.846849] ? udp_v6_push_pending_frames+0x360/0x360 [ 2048.847867] ? __lockdep_reset_lock+0x180/0x180 [ 2048.848811] ? __lockdep_reset_lock+0x180/0x180 [ 2048.849739] ? lock_acquire+0x197/0x470 [ 2048.850528] ? find_held_lock+0x2c/0x110 [ 2048.851363] ? sock_has_perm+0x1ea/0x280 [ 2048.852213] ? __import_iovec+0x458/0x590 [ 2048.853051] ? udp_v6_push_pending_frames+0x360/0x360 [ 2048.854090] inet6_sendmsg+0x105/0x140 [ 2048.854857] ? inet6_compat_ioctl+0x320/0x320 [ 2048.855750] __sock_sendmsg+0xf2/0x190 [ 2048.856556] ____sys_sendmsg+0x334/0x870 [ 2048.857383] ? sock_write_iter+0x3d0/0x3d0 [ 2048.858222] ? do_recvmmsg+0x6d0/0x6d0 [ 2048.859008] ? handle_mm_fault+0x9e9/0x3500 [ 2048.859851] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2048.860917] ? find_held_lock+0x2c/0x110 [ 2048.861756] ___sys_sendmsg+0xf3/0x170 [ 2048.862534] ? sendmsg_copy_msghdr+0x160/0x160 [ 2048.863447] ? vmacache_find+0x55/0x2a0 [ 2048.864310] ? do_user_addr_fault+0x5b0/0xc60 [ 2048.865212] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2048.866281] ? exc_page_fault+0xca/0x1a0 [ 2048.867093] ? trace_hardirqs_on+0x5b/0x180 [ 2048.867979] ? exc_page_fault+0xca/0x1a0 [ 2048.868790] ? asm_exc_page_fault+0x1e/0x30 [ 2048.869696] __sys_sendmmsg+0x195/0x470 [ 2048.870507] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2048.871378] ? lock_downgrade+0x6d0/0x6d0 [ 2048.872246] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2048.873206] ? wait_for_completion_io+0x270/0x270 [ 2048.874162] ? rcu_read_lock_any_held+0x75/0xa0 [ 2048.875100] ? vfs_write+0x354/0xa70 [ 2048.875874] ? fput_many+0x2f/0x1a0 [ 2048.876618] ? ksys_write+0x1a9/0x260 [ 2048.877368] ? __ia32_sys_read+0xb0/0xb0 [ 2048.878176] __x64_sys_sendmmsg+0x99/0x100 [ 2048.879023] do_syscall_64+0x33/0x40 [ 2048.879778] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2048.880856] RIP: 0033:0x7f5519312b19 [ 2048.881626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2048.885313] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2048.886886] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 2048.888355] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2048.889774] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2048.891176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2048.892614] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 [ 2048.899519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2048.900867] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2048.902854] Buffer I/O error on dev sr0, logical block 0, async page read [ 2048.904417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2048.905532] Buffer I/O error on dev sr0, logical block 1, async page read [ 2048.913068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2048.914289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2048.915485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2048.916746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2048.918463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2048.919711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 22:00:28 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x3, 0x0) 22:00:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x3, 0x0) 22:00:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 41) 22:00:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2049.019226] FAULT_INJECTION: forcing a failure. [ 2049.019226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2049.021615] CPU: 1 PID: 12172 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2049.022953] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2049.024571] Call Trace: [ 2049.025085] dump_stack+0x107/0x167 [ 2049.025800] should_fail.cold+0x5/0xa [ 2049.026550] _copy_from_user+0x2e/0x1b0 [ 2049.027334] __copy_msghdr_from_user+0x91/0x4b0 [ 2049.028262] ? __ia32_sys_shutdown+0x80/0x80 [ 2049.029110] ? udp_v6_push_pending_frames+0x360/0x360 [ 2049.029137] ? inet6_sendmsg+0xbd/0x140 [ 2049.030885] ? inet6_compat_ioctl+0x320/0x320 [ 2049.031756] ? __sock_sendmsg+0x55/0x190 [ 2049.032564] sendmsg_copy_msghdr+0xa1/0x160 [ 2049.033402] ? do_recvmmsg+0x6d0/0x6d0 [ 2049.034169] ? __lock_acquire+0x1657/0x5b00 [ 2049.035022] ___sys_sendmsg+0xc6/0x170 [ 2049.035793] ? sendmsg_copy_msghdr+0x160/0x160 [ 2049.036688] ? __lockdep_reset_lock+0x180/0x180 [ 2049.037596] ? trace_hardirqs_on+0x5b/0x180 [ 2049.038451] ? lock_acquire+0x197/0x470 [ 2049.039223] ? find_held_lock+0x2c/0x110 [ 2049.040011] ? __might_fault+0xd3/0x180 [ 2049.040804] ? lock_downgrade+0x6d0/0x6d0 [ 2049.041608] ? io_schedule_timeout+0x140/0x140 [ 2049.042510] __sys_sendmmsg+0x195/0x470 [ 2049.043285] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2049.044122] ? lock_downgrade+0x6d0/0x6d0 [ 2049.044938] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2049.045875] ? wait_for_completion_io+0x270/0x270 [ 2049.046807] ? rcu_read_lock_any_held+0x75/0xa0 [ 2049.047706] ? vfs_write+0x354/0xa70 [ 2049.048450] ? fput_many+0x2f/0x1a0 [ 2049.049156] ? ksys_write+0x1a9/0x260 [ 2049.049904] ? __ia32_sys_read+0xb0/0xb0 [ 2049.050695] __x64_sys_sendmmsg+0x99/0x100 [ 2049.051524] do_syscall_64+0x33/0x40 [ 2049.052277] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2049.053267] RIP: 0033:0x7fd6f698fb19 [ 2049.053993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2049.057539] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2049.058995] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 2049.060362] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2049.061726] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 2049.063089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2049.064474] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 22:00:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:00:42 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:00:42 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:00:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 18) 22:00:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x4, 0x0) 22:00:42 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x4, 0x0) 22:00:42 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa}, 0x11010, 0x7000, 0x3, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x0) pkey_alloc(0x0, 0x3) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ff7000/0x2000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f0000ff4000/0x2000)=nil) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) munlock(&(0x7f0000ff5000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x3, &(0x7f0000ffa000/0x4000)=nil, 0x5) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x9bbb) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ff7000/0x2000)=nil) mmap$usbmon(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x13, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x5) 22:00:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 42) 22:00:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2063.106593] FAULT_INJECTION: forcing a failure. [ 2063.106593] name failslab, interval 1, probability 0, space 0, times 0 [ 2063.108051] CPU: 1 PID: 12191 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2063.108898] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2063.109905] Call Trace: [ 2063.110229] dump_stack+0x107/0x167 [ 2063.110675] should_fail.cold+0x5/0xa [ 2063.111137] ? create_object.isra.0+0x3a/0xa20 [ 2063.111690] should_failslab+0x5/0x20 [ 2063.112146] kmem_cache_alloc+0x5b/0x310 [ 2063.112650] create_object.isra.0+0x3a/0xa20 [ 2063.113191] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2063.113814] kmem_cache_alloc_node+0x169/0x330 [ 2063.114371] __alloc_skb+0x6d/0x5b0 [ 2063.114818] alloc_skb_with_frags+0x92/0x570 [ 2063.115353] ? find_held_lock+0x2c/0x110 [ 2063.115852] sock_alloc_send_pskb+0x7af/0x930 [ 2063.116427] ? sk_alloc+0x350/0x350 [ 2063.116873] ? perf_trace_lock+0xac/0x490 [ 2063.117375] ? SOFTIRQ_verbose+0x10/0x10 [ 2063.117868] ? lock_chain_count+0x20/0x20 [ 2063.118384] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2063.119015] ? ip6_mtu+0x1bb/0x3d0 [ 2063.119465] ? lock_downgrade+0x6d0/0x6d0 [ 2063.119979] ? ip_frag_init+0x350/0x350 [ 2063.120500] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2063.121087] ? ip6_mtu+0x1e9/0x3d0 [ 2063.121531] ? ip6_setup_cork+0xfb7/0x1740 [ 2063.122067] ip6_make_skb+0x2de/0x4e0 [ 2063.122424] FAULT_INJECTION: forcing a failure. [ 2063.122424] name failslab, interval 1, probability 0, space 0, times 0 [ 2063.122541] ? ip_frag_init+0x350/0x350 [ 2063.122557] ? ip_frag_init+0x350/0x350 [ 2063.122578] ? ip6_push_pending_frames+0xf0/0xf0 [ 2063.126397] ? ip6_dst_hoplimit+0x199/0x440 [ 2063.126912] ? lock_downgrade+0x6d0/0x6d0 [ 2063.127439] udpv6_sendmsg+0x20d0/0x2af0 [ 2063.127953] ? ip_frag_init+0x350/0x350 [ 2063.128474] ? udp_v6_push_pending_frames+0x360/0x360 [ 2063.129127] ? __lockdep_reset_lock+0x180/0x180 [ 2063.129706] ? lock_acquire+0x197/0x470 [ 2063.130196] ? find_held_lock+0x2c/0x110 [ 2063.130710] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2063.131384] ? sock_has_perm+0x1ea/0x280 [ 2063.131908] ? __import_iovec+0x458/0x590 [ 2063.132418] ? udp_v6_push_pending_frames+0x360/0x360 [ 2063.133065] inet6_sendmsg+0x105/0x140 [ 2063.133553] ? inet6_compat_ioctl+0x320/0x320 [ 2063.134107] __sock_sendmsg+0xf2/0x190 [ 2063.134587] ____sys_sendmsg+0x334/0x870 [ 2063.135091] ? sock_write_iter+0x3d0/0x3d0 [ 2063.135615] ? do_recvmmsg+0x6d0/0x6d0 [ 2063.136107] ? __lock_acquire+0x1657/0x5b00 [ 2063.136639] ___sys_sendmsg+0xf3/0x170 [ 2063.137129] ? sendmsg_copy_msghdr+0x160/0x160 [ 2063.137697] ? vmacache_find+0x55/0x2a0 [ 2063.138194] ? __lockdep_reset_lock+0x180/0x180 [ 2063.138775] ? lock_acquire+0x197/0x470 [ 2063.139254] ? find_held_lock+0x2c/0x110 [ 2063.139766] ? __might_fault+0xd3/0x180 [ 2063.140247] ? lock_downgrade+0x6d0/0x6d0 [ 2063.140764] ? asm_exc_page_fault+0x1e/0x30 [ 2063.141284] __sys_sendmmsg+0x195/0x470 [ 2063.141785] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2063.142302] ? lock_downgrade+0x6d0/0x6d0 [ 2063.142830] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2063.143406] ? wait_for_completion_io+0x270/0x270 [ 2063.144017] ? rcu_read_lock_any_held+0x75/0xa0 [ 2063.144569] ? vfs_write+0x354/0xa70 [ 2063.145036] ? fput_many+0x2f/0x1a0 [ 2063.145480] ? ksys_write+0x1a9/0x260 [ 2063.145953] ? __ia32_sys_read+0xb0/0xb0 [ 2063.146463] __x64_sys_sendmmsg+0x99/0x100 [ 2063.146997] do_syscall_64+0x33/0x40 [ 2063.147464] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2063.148099] RIP: 0033:0x7f5519312b19 [ 2063.148576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2063.150832] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2063.151776] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 2063.152669] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2063.153543] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2063.154427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2063.155309] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 [ 2063.156249] CPU: 0 PID: 12192 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2063.158035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2063.160105] Call Trace: [ 2063.160802] dump_stack+0x107/0x167 [ 2063.161741] should_fail.cold+0x5/0xa [ 2063.162709] ? create_object.isra.0+0x3a/0xa20 [ 2063.163864] should_failslab+0x5/0x20 [ 2063.164836] kmem_cache_alloc+0x5b/0x310 [ 2063.165888] create_object.isra.0+0x3a/0xa20 [ 2063.166999] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2063.168308] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2063.169606] ? alloc_skb_with_frags+0x92/0x570 [ 2063.170771] __alloc_skb+0xb1/0x5b0 [ 2063.171717] alloc_skb_with_frags+0x92/0x570 [ 2063.172735] ? find_held_lock+0x2c/0x110 [ 2063.173591] sock_alloc_send_pskb+0x7af/0x930 [ 2063.174522] ? sk_alloc+0x350/0x350 [ 2063.175284] ? perf_trace_lock+0xac/0x490 [ 2063.176123] ? SOFTIRQ_verbose+0x10/0x10 [ 2063.176964] ? lock_chain_count+0x20/0x20 [ 2063.177819] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2063.178869] ? ip6_mtu+0x1bb/0x3d0 [ 2063.179607] ? lock_downgrade+0x6d0/0x6d0 [ 2063.180480] ? ip_frag_init+0x350/0x350 [ 2063.181301] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2063.182250] ? ip6_mtu+0x1e9/0x3d0 [ 2063.182969] ? ip6_setup_cork+0xfb7/0x1740 [ 2063.183837] ip6_make_skb+0x2de/0x4e0 [ 2063.184605] ? ip_frag_init+0x350/0x350 [ 2063.185422] ? ip_frag_init+0x350/0x350 [ 2063.186229] ? ip6_push_pending_frames+0xf0/0xf0 [ 2063.187197] ? ip6_dst_hoplimit+0x199/0x440 [ 2063.188077] ? lock_downgrade+0x6d0/0x6d0 [ 2063.188960] udpv6_sendmsg+0x20d0/0x2af0 [ 2063.189790] ? ip_frag_init+0x350/0x350 [ 2063.190609] ? udp_v6_push_pending_frames+0x360/0x360 [ 2063.191644] ? __lockdep_reset_lock+0x180/0x180 [ 2063.192613] ? __lockdep_reset_lock+0x180/0x180 [ 2063.193566] ? lock_acquire+0x197/0x470 [ 2063.194368] ? find_held_lock+0x2c/0x110 [ 2063.195198] ? lock_chain_count+0x20/0x20 [ 2063.196047] ? sock_has_perm+0x1ea/0x280 [ 2063.196912] ? __import_iovec+0x458/0x590 [ 2063.197757] ? udp_v6_push_pending_frames+0x360/0x360 [ 2063.198805] inet6_sendmsg+0x105/0x140 [ 2063.199604] ? inet6_compat_ioctl+0x320/0x320 [ 2063.200516] __sock_sendmsg+0xf2/0x190 [ 2063.201306] ____sys_sendmsg+0x334/0x870 [ 2063.202136] ? sock_write_iter+0x3d0/0x3d0 [ 2063.202994] ? do_recvmmsg+0x6d0/0x6d0 [ 2063.203785] ? __lock_acquire+0x1657/0x5b00 [ 2063.204707] ___sys_sendmsg+0xf3/0x170 [ 2063.205495] ? sendmsg_copy_msghdr+0x160/0x160 [ 2063.206430] ? __lockdep_reset_lock+0x180/0x180 [ 2063.207368] ? trace_hardirqs_on+0x5b/0x180 [ 2063.208251] ? lock_acquire+0x197/0x470 [ 2063.209054] ? find_held_lock+0x2c/0x110 [ 2063.209878] ? __might_fault+0xd3/0x180 [ 2063.210688] ? lock_downgrade+0x6d0/0x6d0 [ 2063.211533] ? io_schedule_timeout+0x140/0x140 [ 2063.212487] __sys_sendmmsg+0x195/0x470 [ 2063.213323] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2063.214203] ? lock_downgrade+0x6d0/0x6d0 [ 2063.215074] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2063.216074] ? wait_for_completion_io+0x270/0x270 [ 2063.217078] ? rcu_read_lock_any_held+0x75/0xa0 [ 2063.218018] ? vfs_write+0x354/0xa70 [ 2063.218783] ? fput_many+0x2f/0x1a0 [ 2063.219529] ? ksys_write+0x1a9/0x260 [ 2063.220318] ? __ia32_sys_read+0xb0/0xb0 [ 2063.221152] __x64_sys_sendmmsg+0x99/0x100 [ 2063.222009] do_syscall_64+0x33/0x40 [ 2063.222761] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2063.223803] RIP: 0033:0x7fd6f698fb19 [ 2063.224580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2063.228288] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2063.229830] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 2063.231269] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2063.232736] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 2063.234169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2063.235609] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 22:00:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 19) 22:00:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:00:55 executing program 7: clock_gettime(0x0, &(0x7f0000001f80)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000140)=""/33, 0x21}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f00000005c0)=""/206, 0xce}], 0x6}}, {{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f00000007c0)=""/223, 0xdf}, {&(0x7f00000008c0)=""/176, 0xb0}, {&(0x7f0000000980)=""/123, 0x7b}, {&(0x7f0000000a00)=""/185, 0xb9}, {&(0x7f0000000ac0)=""/90, 0x5a}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/187, 0xbb}], 0x7}}, {{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c80)=""/139, 0x8b}, {&(0x7f0000001d40)=""/125, 0x7d}], 0x2, &(0x7f0000001e00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x4, 0x40000002, &(0x7f0000001fc0)={r0, r1+10000000}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r2) mkdirat(r3, &(0x7f00000001c0)='./file0\x00', 0x80) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0x80047210, 0x0) 22:00:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:00:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x5, 0x0) 22:00:55 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x5, 0x0) 22:00:55 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:00:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 43) [ 2076.476172] FAULT_INJECTION: forcing a failure. [ 2076.476172] name failslab, interval 1, probability 0, space 0, times 0 [ 2076.478482] CPU: 0 PID: 12213 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2076.479883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2076.481563] Call Trace: [ 2076.482100] dump_stack+0x107/0x167 [ 2076.482849] should_fail.cold+0x5/0xa [ 2076.483626] ? create_object.isra.0+0x3a/0xa20 [ 2076.484586] should_failslab+0x5/0x20 [ 2076.485356] kmem_cache_alloc+0x5b/0x310 [ 2076.486176] ? lock_acquire+0x197/0x470 [ 2076.486982] create_object.isra.0+0x3a/0xa20 [ 2076.487867] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2076.488912] kmem_cache_alloc+0x159/0x310 [ 2076.489756] skb_clone+0x14f/0x3d0 [ 2076.490498] dev_queue_xmit_nit+0x3a7/0xb00 [ 2076.491370] ? ipv6_mc_check_mld+0x1110/0x1110 [ 2076.492330] dev_hard_start_xmit+0xab/0x6f0 [ 2076.493217] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2076.494292] __dev_queue_xmit+0x17ec/0x2710 [ 2076.495178] ? find_held_lock+0x2c/0x110 [ 2076.496009] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2076.496967] ? lock_downgrade+0x6d0/0x6d0 [ 2076.497817] ? lock_acquire+0x197/0x470 [ 2076.498627] ? ip6_finish_output2+0x203/0x1fe0 [ 2076.499564] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2076.500653] neigh_connected_output+0x382/0x4d0 [ 2076.501641] ip6_finish_output2+0xaaf/0x1fe0 [ 2076.501659] FAULT_INJECTION: forcing a failure. [ 2076.501659] name failslab, interval 1, probability 0, space 0, times 0 [ 2076.504977] __ip6_finish_output.part.0+0x4f7/0xb50 [ 2076.505998] ip6_output+0x3aa/0x7e0 [ 2076.506744] ip6_local_out+0xb4/0x1a0 [ 2076.507525] ip6_send_skb+0xb7/0x350 [ 2076.508284] udp_v6_send_skb+0x7aa/0x15b0 [ 2076.509153] udpv6_sendmsg+0x2113/0x2af0 [ 2076.509981] ? ip_frag_init+0x350/0x350 [ 2076.510796] ? udp_v6_push_pending_frames+0x360/0x360 [ 2076.511831] ? __lockdep_reset_lock+0x180/0x180 [ 2076.512788] ? __lockdep_reset_lock+0x180/0x180 [ 2076.513734] ? lock_acquire+0x197/0x470 [ 2076.514533] ? find_held_lock+0x2c/0x110 [ 2076.515370] ? sock_has_perm+0x1ea/0x280 [ 2076.516219] ? __import_iovec+0x458/0x590 [ 2076.517072] ? udp_v6_push_pending_frames+0x360/0x360 [ 2076.518114] inet6_sendmsg+0x105/0x140 [ 2076.518952] ? inet6_compat_ioctl+0x320/0x320 [ 2076.519866] __sock_sendmsg+0xf2/0x190 [ 2076.520833] ____sys_sendmsg+0x334/0x870 [ 2076.521665] ? sock_write_iter+0x3d0/0x3d0 [ 2076.522521] ? do_recvmmsg+0x6d0/0x6d0 [ 2076.523318] ? __lock_acquire+0x1657/0x5b00 [ 2076.524213] ___sys_sendmsg+0xf3/0x170 [ 2076.525026] ? sendmsg_copy_msghdr+0x160/0x160 [ 2076.525949] ? vmacache_find+0x55/0x2a0 [ 2076.526760] ? __lockdep_reset_lock+0x180/0x180 [ 2076.527719] ? lock_acquire+0x197/0x470 [ 2076.528534] ? find_held_lock+0x2c/0x110 [ 2076.529366] ? __might_fault+0xd3/0x180 [ 2076.530179] ? lock_downgrade+0x6d0/0x6d0 [ 2076.531018] ? asm_exc_page_fault+0x1e/0x30 [ 2076.531924] __sys_sendmmsg+0x195/0x470 [ 2076.532751] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2076.533629] ? lock_downgrade+0x6d0/0x6d0 [ 2076.534496] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2076.535499] ? wait_for_completion_io+0x270/0x270 [ 2076.536503] ? rcu_read_lock_any_held+0x75/0xa0 [ 2076.537448] ? vfs_write+0x354/0xa70 [ 2076.538213] ? fput_many+0x2f/0x1a0 [ 2076.538955] ? ksys_write+0x1a9/0x260 [ 2076.539732] ? __ia32_sys_read+0xb0/0xb0 [ 2076.540581] __x64_sys_sendmmsg+0x99/0x100 [ 2076.541449] do_syscall_64+0x33/0x40 [ 2076.542210] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2076.543248] RIP: 0033:0x7fd6f698fb19 [ 2076.544011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2076.547701] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2076.549255] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 2076.550692] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2076.552146] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 2076.553592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2076.555028] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 [ 2076.556555] CPU: 1 PID: 12222 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2076.557970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2076.559638] Call Trace: [ 2076.560175] dump_stack+0x107/0x167 [ 2076.560937] should_fail.cold+0x5/0xa [ 2076.561711] ? create_object.isra.0+0x3a/0xa20 [ 2076.562632] should_failslab+0x5/0x20 [ 2076.563396] kmem_cache_alloc+0x5b/0x310 [ 2076.564222] create_object.isra.0+0x3a/0xa20 [ 2076.565116] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2076.566140] kmem_cache_alloc+0x159/0x310 [ 2076.566981] skb_clone+0x14f/0x3d0 [ 2076.567703] packet_rcv+0x558/0x1410 [ 2076.568475] packet_rcv_fanout+0x278/0x9d0 [ 2076.569334] ? packet_getname_spkt+0x300/0x300 [ 2076.570249] dev_queue_xmit_nit+0x38b/0xb00 [ 2076.571136] dev_hard_start_xmit+0xab/0x6f0 [ 2076.572003] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2076.573079] __dev_queue_xmit+0x17ec/0x2710 [ 2076.573957] ? find_held_lock+0x2c/0x110 [ 2076.574776] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2076.575700] ? lock_downgrade+0x6d0/0x6d0 [ 2076.576540] ? lock_acquire+0x197/0x470 [ 2076.577344] ? ip6_finish_output2+0x203/0x1fe0 [ 2076.578268] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2076.579328] neigh_connected_output+0x382/0x4d0 [ 2076.580279] ip6_finish_output2+0xaaf/0x1fe0 [ 2076.581203] __ip6_finish_output.part.0+0x4f7/0xb50 [ 2076.582216] ip6_output+0x3aa/0x7e0 [ 2076.582959] ip6_local_out+0xb4/0x1a0 [ 2076.583732] ip6_send_skb+0xb7/0x350 [ 2076.584493] udp_v6_send_skb+0x7aa/0x15b0 [ 2076.585341] udpv6_sendmsg+0x2113/0x2af0 [ 2076.586158] ? ip_frag_init+0x350/0x350 [ 2076.586971] ? udp_v6_push_pending_frames+0x360/0x360 [ 2076.588004] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2076.589074] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2076.590169] ? __lockdep_reset_lock+0x180/0x180 [ 2076.591109] ? lock_acquire+0x1b9/0x470 [ 2076.591909] ? find_held_lock+0x2c/0x110 [ 2076.592783] ? inet_send_prepare+0x1a/0x540 [ 2076.593649] ? __sanitizer_cov_trace_pc+0x45/0x60 [ 2076.594615] ? udp_v6_push_pending_frames+0x360/0x360 [ 2076.595654] inet6_sendmsg+0x105/0x140 [ 2076.596442] ? inet6_compat_ioctl+0x320/0x320 [ 2076.597337] __sock_sendmsg+0xf2/0x190 [ 2076.598111] ____sys_sendmsg+0x334/0x870 [ 2076.598908] ? sock_write_iter+0x3d0/0x3d0 [ 2076.599744] ? do_recvmmsg+0x6d0/0x6d0 [ 2076.600529] ? handle_mm_fault+0x9e9/0x3500 [ 2076.601389] ? __lock_acquire+0x1657/0x5b00 [ 2076.602245] ? find_held_lock+0x2c/0x110 [ 2076.603067] ___sys_sendmsg+0xf3/0x170 [ 2076.603843] ? sendmsg_copy_msghdr+0x160/0x160 [ 2076.604750] ? vmacache_find+0x55/0x2a0 [ 2076.605559] ? do_user_addr_fault+0x5b0/0xc60 [ 2076.606455] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2076.607498] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2076.608549] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2076.609626] ? trace_hardirqs_on+0x5b/0x180 [ 2076.610490] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2076.611595] __sys_sendmmsg+0x195/0x470 [ 2076.612408] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2076.613274] ? lock_downgrade+0x6d0/0x6d0 [ 2076.614129] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2076.615099] ? wait_for_completion_io+0x270/0x270 [ 2076.616063] ? rcu_read_lock_any_held+0x75/0xa0 [ 2076.616995] ? vfs_write+0x354/0xa70 [ 2076.617745] ? fput_many+0x2f/0x1a0 [ 2076.618474] ? ksys_write+0x1a9/0x260 [ 2076.619235] ? __ia32_sys_read+0xb0/0xb0 [ 2076.620070] __x64_sys_sendmmsg+0x99/0x100 [ 2076.620935] do_syscall_64+0x33/0x40 [ 2076.621684] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2076.622710] RIP: 0033:0x7f5519312b19 [ 2076.623454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2076.627125] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2076.628661] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 2076.630083] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2076.631503] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2076.632932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2076.634354] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 [ 2076.665357] FAT-fs (loop7): Unrecognized mount option "./file1" or missing value 22:00:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:00:56 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x6, 0x0) [ 2076.764230] FAT-fs (loop7): Unrecognized mount option "./file1" or missing value 22:00:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:00:56 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x6, 0x0) 22:00:56 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:00:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 44) 22:00:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2076.925290] FAULT_INJECTION: forcing a failure. [ 2076.925290] name failslab, interval 1, probability 0, space 0, times 0 [ 2076.927620] CPU: 0 PID: 12245 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2076.929026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2076.930696] Call Trace: [ 2076.931242] dump_stack+0x107/0x167 [ 2076.931994] should_fail.cold+0x5/0xa [ 2076.932783] ? create_object.isra.0+0x3a/0xa20 [ 2076.933715] should_failslab+0x5/0x20 [ 2076.934492] kmem_cache_alloc+0x5b/0x310 [ 2076.935324] ? lock_acquire+0x197/0x470 [ 2076.936141] create_object.isra.0+0x3a/0xa20 [ 2076.937054] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 22:00:56 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f0000000480)="af", 0x1, 0x1000000) write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0x78) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000000)) [ 2076.938092] kmem_cache_alloc+0x159/0x310 [ 2076.939063] skb_clone+0x14f/0x3d0 [ 2076.939790] dev_queue_xmit_nit+0x3a7/0xb00 [ 2076.940668] ? ipv6_mc_check_mld+0x1110/0x1110 [ 2076.941601] dev_hard_start_xmit+0xab/0x6f0 [ 2076.942467] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2076.943535] __dev_queue_xmit+0x17ec/0x2710 [ 2076.944432] ? find_held_lock+0x2c/0x110 [ 2076.945257] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2076.946188] ? lock_downgrade+0x6d0/0x6d0 [ 2076.947022] ? lock_acquire+0x197/0x470 [ 2076.947830] ? ip6_finish_output2+0x203/0x1fe0 [ 2076.948766] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2076.949824] neigh_connected_output+0x382/0x4d0 [ 2076.950784] ip6_finish_output2+0xaaf/0x1fe0 [ 2076.951696] __ip6_finish_output.part.0+0x4f7/0xb50 [ 2076.952726] ip6_output+0x3aa/0x7e0 [ 2076.953476] ip6_local_out+0xb4/0x1a0 [ 2076.954253] ip6_send_skb+0xb7/0x350 [ 2076.955013] udp_v6_send_skb+0x7aa/0x15b0 [ 2076.955866] udpv6_sendmsg+0x2113/0x2af0 [ 2076.956696] ? ip_frag_init+0x350/0x350 [ 2076.957515] ? udp_v6_push_pending_frames+0x360/0x360 [ 2076.958553] ? __lockdep_reset_lock+0x180/0x180 [ 2076.959509] ? __lockdep_reset_lock+0x180/0x180 [ 2076.960465] ? lock_acquire+0x197/0x470 [ 2076.961266] ? find_held_lock+0x2c/0x110 [ 2076.962104] ? sock_has_perm+0x1ea/0x280 [ 2076.962969] ? __import_iovec+0x458/0x590 [ 2076.963803] ? udp_v6_push_pending_frames+0x360/0x360 [ 2076.964867] inet6_sendmsg+0x105/0x140 [ 2076.965662] ? inet6_compat_ioctl+0x320/0x320 [ 2076.966561] __sock_sendmsg+0xf2/0x190 [ 2076.967347] ____sys_sendmsg+0x334/0x870 [ 2076.968178] ? sock_write_iter+0x3d0/0x3d0 [ 2076.969037] ? do_recvmmsg+0x6d0/0x6d0 [ 2076.969829] ? __lock_acquire+0x1657/0x5b00 [ 2076.970716] ___sys_sendmsg+0xf3/0x170 [ 2076.971511] ? sendmsg_copy_msghdr+0x160/0x160 [ 2076.972429] ? vmacache_find+0x55/0x2a0 [ 2076.973241] ? __lockdep_reset_lock+0x180/0x180 [ 2076.974191] ? lock_acquire+0x197/0x470 [ 2076.974996] ? find_held_lock+0x2c/0x110 [ 2076.975820] ? __might_fault+0xd3/0x180 [ 2076.976645] ? lock_downgrade+0x6d0/0x6d0 [ 2076.977481] ? asm_exc_page_fault+0x1e/0x30 [ 2076.978378] __sys_sendmmsg+0x195/0x470 [ 2076.979187] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2076.980065] ? lock_downgrade+0x6d0/0x6d0 [ 2076.980932] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2076.981913] ? wait_for_completion_io+0x270/0x270 [ 2076.982888] ? rcu_read_lock_any_held+0x75/0xa0 [ 2076.983831] ? vfs_write+0x354/0xa70 [ 2076.984597] ? fput_many+0x2f/0x1a0 [ 2076.985338] ? ksys_write+0x1a9/0x260 [ 2076.986116] ? __ia32_sys_read+0xb0/0xb0 [ 2076.986951] __x64_sys_sendmmsg+0x99/0x100 [ 2076.987812] do_syscall_64+0x33/0x40 [ 2076.988589] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2076.989620] RIP: 0033:0x7fd6f698fb19 [ 2076.990374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2076.994057] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2076.995590] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 2076.997035] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2076.998475] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 2076.999900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2077.001346] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 22:01:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 20) 22:01:10 executing program 7: bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000080)={0x200, 0x50, '\x00', 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 22:01:10 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7, 0x0) 22:01:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7, 0x0) 22:01:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c34", 0x1b}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:01:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:01:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 45) 22:01:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2090.717590] FAULT_INJECTION: forcing a failure. [ 2090.717590] name failslab, interval 1, probability 0, space 0, times 0 [ 2090.719568] CPU: 0 PID: 12265 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2090.720733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2090.722102] Call Trace: [ 2090.722564] dump_stack+0x107/0x167 [ 2090.723062] FAULT_INJECTION: forcing a failure. [ 2090.723062] name failslab, interval 1, probability 0, space 0, times 0 [ 2090.723164] should_fail.cold+0x5/0xa [ 2090.726495] ? create_object.isra.0+0x3a/0xa20 [ 2090.727244] should_failslab+0x5/0x20 [ 2090.727885] kmem_cache_alloc+0x5b/0x310 [ 2090.728548] create_object.isra.0+0x3a/0xa20 [ 2090.729272] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2090.730102] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2090.730928] ? alloc_skb_with_frags+0x92/0x570 [ 2090.731716] __alloc_skb+0xb1/0x5b0 [ 2090.732310] alloc_skb_with_frags+0x92/0x570 [ 2090.733048] ? find_held_lock+0x2c/0x110 [ 2090.733722] sock_alloc_send_pskb+0x7af/0x930 [ 2090.734467] ? sk_alloc+0x350/0x350 [ 2090.735068] ? perf_trace_lock+0xac/0x490 [ 2090.735742] ? SOFTIRQ_verbose+0x10/0x10 [ 2090.736430] ? lock_chain_count+0x20/0x20 [ 2090.737154] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2090.737979] ? ip6_mtu+0x1bb/0x3d0 [ 2090.738559] ? lock_downgrade+0x6d0/0x6d0 [ 2090.739230] ? ip_frag_init+0x350/0x350 [ 2090.739878] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2090.740675] ? ip6_mtu+0x1e9/0x3d0 [ 2090.741254] ? ip6_setup_cork+0xfb7/0x1740 [ 2090.741944] ip6_make_skb+0x2de/0x4e0 [ 2090.742561] ? ip_frag_init+0x350/0x350 [ 2090.743207] ? ip_frag_init+0x350/0x350 [ 2090.743843] ? ip6_push_pending_frames+0xf0/0xf0 [ 2090.744670] ? ip6_dst_hoplimit+0x199/0x440 [ 2090.745371] ? lock_downgrade+0x6d0/0x6d0 [ 2090.746042] ? ip6_sk_dst_lookup_flow+0x56d/0x740 [ 2090.746817] ? ip6_sk_dst_lookup_flow+0x57b/0x740 [ 2090.747598] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 2090.748406] udpv6_sendmsg+0x20d0/0x2af0 [ 2090.749077] ? ip_frag_init+0x350/0x350 [ 2090.749736] ? udp_v6_push_pending_frames+0x360/0x360 [ 2090.750581] ? __lockdep_reset_lock+0x180/0x180 [ 2090.751336] ? hrtimer_start_range_ns+0x336/0xae0 [ 2090.752111] ? lock_acquire+0x197/0x470 [ 2090.752800] ? find_held_lock+0x2c/0x110 [ 2090.753473] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2090.754355] ? sock_has_perm+0x1ea/0x280 [ 2090.755031] ? __import_iovec+0x458/0x590 [ 2090.755709] ? udp_v6_push_pending_frames+0x360/0x360 [ 2090.756597] inet6_sendmsg+0x105/0x140 [ 2090.757235] ? inet6_compat_ioctl+0x320/0x320 [ 2090.757985] __sock_sendmsg+0xf2/0x190 [ 2090.758631] ____sys_sendmsg+0x334/0x870 [ 2090.759300] ? sock_write_iter+0x3d0/0x3d0 [ 2090.759977] ? do_recvmmsg+0x6d0/0x6d0 [ 2090.760635] ? find_held_lock+0x2c/0x110 [ 2090.761328] ___sys_sendmsg+0xf3/0x170 [ 2090.761996] ? sendmsg_copy_msghdr+0x160/0x160 [ 2090.762748] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2090.763609] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2090.764325] ? trace_hardirqs_on+0x5b/0x180 [ 2090.765052] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2090.765806] ? finish_task_switch+0x126/0x5d0 [ 2090.766548] ? finish_task_switch+0xef/0x5d0 [ 2090.767258] ? __switch_to+0x572/0xf70 [ 2090.767887] ? __switch_to_asm+0x3a/0x60 [ 2090.768540] ? __switch_to_asm+0x34/0x60 [ 2090.769210] ? __schedule+0x82c/0x1ea0 [ 2090.769847] ? io_schedule_timeout+0x140/0x140 [ 2090.770637] __sys_sendmmsg+0x195/0x470 [ 2090.771288] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2090.772004] ? lock_downgrade+0x6d0/0x6d0 [ 2090.772693] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2090.773473] ? wait_for_completion_io+0x270/0x270 [ 2090.774250] ? rcu_read_lock_any_held+0x75/0xa0 [ 2090.774994] ? vfs_write+0x354/0xa70 [ 2090.775627] ? fput_many+0x2f/0x1a0 [ 2090.776209] ? ksys_write+0x1a9/0x260 [ 2090.776846] ? __ia32_sys_read+0xb0/0xb0 [ 2090.777545] __x64_sys_sendmmsg+0x99/0x100 [ 2090.778237] do_syscall_64+0x33/0x40 [ 2090.778840] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2090.779665] RIP: 0033:0x7f5519312b19 [ 2090.780263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2090.783262] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2090.784503] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 [ 2090.785657] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2090.786802] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2090.787966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2090.789129] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 [ 2090.790341] CPU: 1 PID: 12264 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2090.792016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2090.793965] Call Trace: [ 2090.794611] dump_stack+0x107/0x167 [ 2090.795462] should_fail.cold+0x5/0xa [ 2090.796345] ? skb_clone+0x14f/0x3d0 [ 2090.797216] should_failslab+0x5/0x20 [ 2090.798098] kmem_cache_alloc+0x5b/0x310 [ 2090.799051] skb_clone+0x14f/0x3d0 [ 2090.799877] packet_rcv+0x558/0x1410 [ 2090.800771] packet_rcv_fanout+0x278/0x9d0 [ 2090.801757] ? packet_getname_spkt+0x300/0x300 [ 2090.802805] dev_queue_xmit_nit+0x38b/0xb00 [ 2090.803824] dev_hard_start_xmit+0xab/0x6f0 [ 2090.804841] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2090.806068] __dev_queue_xmit+0x17ec/0x2710 [ 2090.807076] ? find_held_lock+0x2c/0x110 [ 2090.808025] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2090.809094] ? lock_downgrade+0x6d0/0x6d0 [ 2090.810054] ? lock_acquire+0x197/0x470 [ 2090.810974] ? ip6_finish_output2+0x203/0x1fe0 [ 2090.812037] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2090.813267] neigh_connected_output+0x382/0x4d0 [ 2090.814365] ip6_finish_output2+0xaaf/0x1fe0 [ 2090.815405] __ip6_finish_output.part.0+0x4f7/0xb50 [ 2090.816584] ip6_output+0x3aa/0x7e0 [ 2090.817445] ip6_local_out+0xb4/0x1a0 [ 2090.818335] ip6_send_skb+0xb7/0x350 [ 2090.819204] udp_v6_send_skb+0x7aa/0x15b0 [ 2090.820178] udpv6_sendmsg+0x2113/0x2af0 [ 2090.821143] ? ip_frag_init+0x350/0x350 [ 2090.822078] ? udp_v6_push_pending_frames+0x360/0x360 [ 2090.823254] ? __lockdep_reset_lock+0x180/0x180 [ 2090.824333] ? __lockdep_reset_lock+0x180/0x180 [ 2090.825414] ? lock_acquire+0x197/0x470 [ 2090.826336] ? find_held_lock+0x2c/0x110 [ 2090.827425] ? sock_has_perm+0x1ea/0x280 [ 2090.828387] ? __import_iovec+0x458/0x590 [ 2090.829357] ? udp_v6_push_pending_frames+0x360/0x360 [ 2090.830750] inet6_sendmsg+0x105/0x140 [ 2090.831645] ? inet6_compat_ioctl+0x320/0x320 [ 2090.832681] __sock_sendmsg+0xf2/0x190 [ 2090.833591] ____sys_sendmsg+0x334/0x870 [ 2090.834523] ? sock_write_iter+0x3d0/0x3d0 [ 2090.835491] ? do_recvmmsg+0x6d0/0x6d0 [ 2090.836381] ? __lock_acquire+0x1657/0x5b00 [ 2090.837414] ___sys_sendmsg+0xf3/0x170 [ 2090.838306] ? sendmsg_copy_msghdr+0x160/0x160 [ 2090.839347] ? vmacache_find+0x55/0x2a0 [ 2090.840258] ? __lockdep_reset_lock+0x180/0x180 [ 2090.841333] ? lock_acquire+0x197/0x470 [ 2090.842237] ? find_held_lock+0x2c/0x110 [ 2090.843170] ? __might_fault+0xd3/0x180 [ 2090.844079] ? lock_downgrade+0x6d0/0x6d0 [ 2090.845045] ? asm_exc_page_fault+0x1e/0x30 [ 2090.846066] __sys_sendmmsg+0x195/0x470 [ 2090.846987] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2090.847976] ? lock_downgrade+0x6d0/0x6d0 [ 2090.848960] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2090.850072] ? wait_for_completion_io+0x270/0x270 [ 2090.851181] ? rcu_read_lock_any_held+0x75/0xa0 [ 2090.852240] ? vfs_write+0x354/0xa70 [ 2090.853101] ? fput_many+0x2f/0x1a0 [ 2090.853933] ? ksys_write+0x1a9/0x260 [ 2090.854804] ? __ia32_sys_read+0xb0/0xb0 [ 2090.855739] __x64_sys_sendmmsg+0x99/0x100 [ 2090.856730] do_syscall_64+0x33/0x40 [ 2090.857578] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2090.858750] RIP: 0033:0x7fd6f698fb19 [ 2090.859595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2090.863746] RSP: 002b:00007fd6f3f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2090.865478] RAX: ffffffffffffffda RBX: 00007fd6f6aa2f60 RCX: 00007fd6f698fb19 [ 2090.867063] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2090.868672] RBP: 00007fd6f3f051d0 R08: 0000000000000000 R09: 0000000000000000 [ 2090.870284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2090.871878] R13: 00007ffdf02c10df R14: 00007fd6f3f05300 R15: 0000000000022000 22:01:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x8, 0x0) 22:01:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 21) [ 2090.971936] [ 2090.972239] ====================================================== [ 2090.973250] WARNING: possible circular locking dependency detected [ 2090.974299] 5.10.200 #1 Not tainted [ 2090.974877] ------------------------------------------------------ [ 2090.975868] syz-executor.7/12270 is trying to acquire lock: [ 2090.976797] ffff88800d46cb78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 2090.978449] [ 2090.978449] but task is already holding lock: [ 2090.979377] ffffffff85619468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2090.980822] [ 2090.980822] which lock already depends on the new lock. [ 2090.980822] [ 2090.982241] [ 2090.982241] the existing dependency chain (in reverse order) is: [ 2090.985779] [ 2090.985779] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 2090.986831] __mutex_lock+0x13d/0x10b0 [ 2090.987522] rfkill_register+0x36/0xa10 [ 2090.988218] hci_register_dev+0x42e/0xc00 [ 2090.988970] __vhci_create_device+0x2c8/0x5c0 [ 2090.989777] vhci_open_timeout+0x38/0x50 [ 2090.990475] process_one_work+0x9a9/0x14b0 [ 2090.991196] worker_thread+0x61d/0x1310 [ 2090.991891] kthread+0x38f/0x470 [ 2090.992489] ret_from_fork+0x22/0x30 [ 2090.993146] [ 2090.993146] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 2090.994171] __mutex_lock+0x13d/0x10b0 [ 2090.994850] vhci_send_frame+0x63/0xa0 [ 2090.995528] hci_send_frame+0x1b9/0x320 [ 2090.996220] hci_tx_work+0x10af/0x1660 [ 2090.996917] process_one_work+0x9a9/0x14b0 [ 2090.997723] worker_thread+0x61d/0x1310 [ 2090.998431] kthread+0x38f/0x470 [ 2090.999041] ret_from_fork+0x22/0x30 [ 2090.999694] [ 2090.999694] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 2091.000999] __flush_work+0x105/0xa90 [ 2091.001681] hci_dev_do_close+0x131/0x1240 [ 2091.002414] hci_unregister_dev+0x149/0x430 [ 2091.003162] vhci_release+0x70/0xf0 [ 2091.003804] __fput+0x285/0x980 [ 2091.004429] task_work_run+0xe2/0x1a0 [ 2091.005104] do_exit+0xb6f/0x2600 [ 2091.005716] do_group_exit+0x125/0x310 [ 2091.006398] get_signal+0x4bc/0x22f0 [ 2091.007057] arch_do_signal_or_restart+0x2b7/0x1990 [ 2091.007943] exit_to_user_mode_prepare+0x10f/0x190 [ 2091.008801] syscall_exit_to_user_mode+0x38/0x1e0 [ 2091.009636] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2091.010517] [ 2091.010517] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 2091.011554] __mutex_lock+0x13d/0x10b0 [ 2091.012235] bg_scan_update+0x82/0x500 [ 2091.012948] process_one_work+0x9a9/0x14b0 [ 2091.013691] worker_thread+0x61d/0x1310 [ 2091.014383] kthread+0x38f/0x470 [ 2091.014990] ret_from_fork+0x22/0x30 [ 2091.015649] [ 2091.015649] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 2091.016971] __lock_acquire+0x29e7/0x5b00 [ 2091.017695] lock_acquire+0x197/0x470 [ 2091.018357] __flush_work+0x105/0xa90 [ 2091.019032] __cancel_work_timer+0x368/0x4c0 [ 2091.019783] hci_request_cancel_all+0x73/0x230 [ 2091.020643] hci_dev_do_close+0xd9/0x1240 [ 2091.021350] hci_rfkill_set_block+0x166/0x1a0 [ 2091.022118] rfkill_set_block+0x1fd/0x540 [ 2091.022835] rfkill_fop_write+0x253/0x4b0 [ 2091.023560] vfs_write+0x29a/0xa70 [ 2091.024187] ksys_write+0x1f6/0x260 [ 2091.024829] do_syscall_64+0x33/0x40 [ 2091.025473] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2091.026336] [ 2091.026336] other info that might help us debug this: [ 2091.026336] [ 2091.027560] Chain exists of: [ 2091.027560] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 2091.027560] [ 2091.029703] Possible unsafe locking scenario: [ 2091.029703] [ 2091.030620] CPU0 CPU1 [ 2091.031318] ---- ---- [ 2091.032044] lock(rfkill_global_mutex); [ 2091.032720] lock(&data->open_mutex); [ 2091.033745] lock(rfkill_global_mutex); [ 2091.034733] lock((work_completion)(&hdev->bg_scan_update)); [ 2091.035641] [ 2091.035641] *** DEADLOCK *** [ 2091.035641] [ 2091.036599] 1 lock held by syz-executor.7/12270: [ 2091.037331] #0: ffffffff85619468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2091.038776] [ 2091.038776] stack backtrace: [ 2091.039464] CPU: 0 PID: 12270 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 2091.040517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2091.041839] Call Trace: [ 2091.042248] dump_stack+0x107/0x167 [ 2091.042807] check_noncircular+0x263/0x2e0 [ 2091.043457] ? register_lock_class+0xbb/0x17b0 [ 2091.044170] ? print_circular_bug+0x470/0x470 [ 2091.044880] ? find_first_zero_bit+0x94/0xb0 [ 2091.045583] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 2091.046291] __lock_acquire+0x29e7/0x5b00 [ 2091.046964] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2091.047781] ? SOFTIRQ_verbose+0x10/0x10 [ 2091.048407] ? __lockdep_reset_lock+0x180/0x180 [ 2091.049139] ? mark_lock+0xf5/0x2df0 [ 2091.049709] lock_acquire+0x197/0x470 [ 2091.050317] ? __flush_work+0xdd/0xa90 [ 2091.050924] ? lock_release+0x680/0x680 [ 2091.051528] ? __flush_work+0x78c/0xa90 [ 2091.052138] ? lock_downgrade+0x6d0/0x6d0 [ 2091.052802] __flush_work+0x105/0xa90 [ 2091.053387] ? __flush_work+0xdd/0xa90 [ 2091.053981] ? lock_chain_count+0x20/0x20 [ 2091.054607] ? queue_delayed_work_on+0xe0/0xe0 [ 2091.055302] ? mark_lock+0xf5/0x2df0 [ 2091.055868] ? mark_lock+0xf5/0x2df0 [ 2091.056469] ? lock_chain_count+0x20/0x20 [ 2091.057105] ? perf_trace_lock+0xac/0x490 [ 2091.057736] ? lock_chain_count+0x20/0x20 [ 2091.058379] ? mark_held_locks+0x9e/0xe0 [ 2091.059002] __cancel_work_timer+0x368/0x4c0 [ 2091.059666] ? try_to_grab_pending+0xe0/0xe0 [ 2091.060369] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2091.061196] ? cancel_delayed_work+0x24d/0x2b0 [ 2091.061891] ? trace_hardirqs_on+0x5b/0x180 [ 2091.062582] ? cancel_delayed_work+0x1b8/0x2b0 [ 2091.063272] ? cancel_delayed_work_sync+0x20/0x20 [ 2091.064000] hci_request_cancel_all+0x73/0x230 [ 2091.064696] hci_dev_do_close+0xd9/0x1240 [ 2091.065328] ? rfkill_set_block+0x18f/0x540 [ 2091.065974] ? hci_dev_open+0x350/0x350 [ 2091.066600] ? mark_held_locks+0x9e/0xe0 [ 2091.067208] hci_rfkill_set_block+0x166/0x1a0 [ 2091.067902] ? hci_power_off+0x20/0x20 [ 2091.068481] rfkill_set_block+0x1fd/0x540 [ 2091.069143] rfkill_fop_write+0x253/0x4b0 [ 2091.069761] ? rfkill_sync_work+0xa0/0xa0 [ 2091.070397] ? security_file_permission+0x24e/0x570 [ 2091.071146] ? rfkill_sync_work+0xa0/0xa0 [ 2091.071811] vfs_write+0x29a/0xa70 [ 2091.072351] ksys_write+0x1f6/0x260 [ 2091.072902] ? __ia32_sys_read+0xb0/0xb0 [ 2091.073525] do_syscall_64+0x33/0x40 [ 2091.074083] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2091.074875] RIP: 0033:0x7f770b64cb19 [ 2091.075449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2091.078242] RSP: 002b:00007f7708bc2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2091.079428] RAX: ffffffffffffffda RBX: 00007f770b75ff60 RCX: 00007f770b64cb19 [ 2091.080499] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000006 [ 2091.081574] RBP: 00007f770b6a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2091.082672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2091.083731] R13: 00007ffe6e74d3cf R14: 00007f7708bc2300 R15: 0000000000022000 22:01:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:01:10 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x8, 0x0) 22:01:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="9361", 0x2}], 0x1, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2091.155658] FAULT_INJECTION: forcing a failure. [ 2091.155658] name failslab, interval 1, probability 0, space 0, times 0 [ 2091.158783] CPU: 1 PID: 12282 Comm: syz-executor.4 Not tainted 5.10.200 #1 22:01:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="93611a8090936af60da673ab4a42a1d6001677e0d9fe59f71c9c34", 0x1b}, {&(0x7f0000000280)="3cbd703e282683b2a143f7eb3145028fc5ad34d6b879af8b69dce8386fc38342541c3737", 0x24}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x3e0a2035}}], 0x18}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/231, 0xe7, 0x60, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2091.160209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2091.162051] Call Trace: [ 2091.162607] dump_stack+0x107/0x167 [ 2091.163374] should_fail.cold+0x5/0xa [ 2091.164171] ? __alloc_skb+0x6d/0x5b0 [ 2091.164988] should_failslab+0x5/0x20 [ 2091.165767] kmem_cache_alloc_node+0x55/0x330 [ 2091.166715] __alloc_skb+0x6d/0x5b0 [ 2091.167487] alloc_skb_with_frags+0x92/0x570 [ 2091.168392] ? lock_release+0x4d1/0x680 [ 2091.169235] sock_alloc_send_pskb+0x7af/0x930 [ 2091.170206] ? sk_alloc+0x350/0x350 [ 2091.170978] ? perf_trace_lock+0xac/0x490 [ 2091.171867] ? SOFTIRQ_verbose+0x10/0x10 [ 2091.172738] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2091.173797] ? ip6_mtu+0x1bb/0x3d0 [ 2091.174553] ? lock_downgrade+0x6d0/0x6d0 [ 2091.175384] ? ip_frag_init+0x350/0x350 [ 2091.176211] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2091.177190] ? ip6_mtu+0x1e9/0x3d0 [ 2091.177922] ? ip6_setup_cork+0xfb7/0x1740 [ 2091.178790] ip6_make_skb+0x2de/0x4e0 [ 2091.179579] ? ip_frag_init+0x350/0x350 [ 2091.180402] ? ip_frag_init+0x350/0x350 [ 2091.181254] ? ip6_push_pending_frames+0xf0/0xf0 [ 2091.182240] ? ip6_dst_hoplimit+0x199/0x440 [ 2091.183116] ? lock_downgrade+0x6d0/0x6d0 [ 2091.183968] ? sk_dst_check+0x235/0x4b0 [ 2091.184802] udpv6_sendmsg+0x20d0/0x2af0 [ 2091.185677] ? ip_frag_init+0x350/0x350 [ 2091.186512] ? udp_v6_push_pending_frames+0x360/0x360 [ 2091.187553] ? __lockdep_reset_lock+0x180/0x180 [ 2091.188489] ? __lockdep_reset_lock+0x180/0x180 [ 2091.189469] ? sock_has_perm+0x1ea/0x280 [ 2091.190311] ? __import_iovec+0x458/0x590 [ 2091.191171] ? udp_v6_push_pending_frames+0x360/0x360 [ 2091.192238] inet6_sendmsg+0x105/0x140 [ 2091.193030] ? inet6_compat_ioctl+0x320/0x320 [ 2091.193958] __sock_sendmsg+0xf2/0x190 [ 2091.194776] ____sys_sendmsg+0x334/0x870 [ 2091.195635] ? sock_write_iter+0x3d0/0x3d0 [ 2091.196508] ? do_recvmmsg+0x6d0/0x6d0 [ 2091.197312] ? handle_mm_fault+0x9e9/0x3500 [ 2091.198214] ? kfree+0x1ab/0x340 [ 2091.198926] ___sys_sendmsg+0xf3/0x170 [ 2091.199711] ? sendmsg_copy_msghdr+0x160/0x160 [ 2091.200676] ? vmacache_find+0x55/0x2a0 [ 2091.201474] ? __lockdep_reset_lock+0x180/0x180 [ 2091.202407] ? lock_release+0x4d1/0x680 [ 2091.203241] ? exc_page_fault+0xca/0x1a0 [ 2091.204063] ? __might_fault+0xd3/0x180 [ 2091.204864] ? lock_downgrade+0x6d0/0x6d0 [ 2091.205704] ? asm_exc_page_fault+0x1e/0x30 [ 2091.206589] __sys_sendmmsg+0x195/0x470 [ 2091.207383] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2091.208237] ? lock_downgrade+0x6d0/0x6d0 [ 2091.209083] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2091.210169] ? wait_for_completion_io+0x270/0x270 [ 2091.211267] ? vfs_write+0x354/0xa70 [ 2091.212120] ? fput_many+0x2f/0x1a0 [ 2091.212967] ? ksys_write+0x1a9/0x260 [ 2091.213840] ? __ia32_sys_read+0xb0/0xb0 [ 2091.214778] __x64_sys_sendmmsg+0x99/0x100 [ 2091.215744] do_syscall_64+0x33/0x40 [ 2091.216607] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2091.217777] RIP: 0033:0x7f5519312b19 [ 2091.218633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2091.222828] RSP: 002b:00007f5516888188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2091.224560] RAX: ffffffffffffffda RBX: 00007f5519425f60 RCX: 00007f5519312b19 22:01:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2091.226294] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2091.227933] RBP: 00007f55168881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2091.229553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2091.231167] R13: 00007ffc9c69b98f R14: 00007f5516888300 R15: 0000000000022000 22:01:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x9, 0x0) 22:01:10 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x9, 0x0) VM DIAGNOSIS: 22:01:10 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822ca15c RDI=ffffffff879e81e0 RBP=ffffffff879e81a0 RSP=ffff88804e487170 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3d088 R14=fffffbfff0f3d03e R15=dffffc0000000000 RIP=ffffffff822ca1b0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7708bc2700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb4831f4408 CR3=000000000d5ce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81271d48 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806cf3c128 RBP=ffffea0000eff780 RSP=ffff88804c957760 R8 =0000000000000000 R9 =ffffffff856725cf R10=0000000000000000 R11=0000000000000001 R12=ffffea0000eff788 R13=ffff88804ced83e8 R14=dffffc0000000000 R15=00007f8ee0c7e000 RIP=ffffffff815fa9bf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000559501258a80 CR3=00000000445f0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000