failslab, interval 1, probability 0, space 0, times 0 [ 1892.304173] CPU: 0 PID: 10746 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 1892.305958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1892.308000] Call Trace: [ 1892.308655] dump_stack+0x107/0x167 [ 1892.309560] should_fail.cold+0x5/0xa [ 1892.310496] ? create_object.isra.0+0x3a/0xa30 [ 1892.311613] should_failslab+0x5/0x20 [ 1892.312543] kmem_cache_alloc+0x5b/0x310 [ 1892.313558] create_object.isra.0+0x3a/0xa30 [ 1892.314650] kmemleak_alloc_percpu+0xa0/0x100 [ 1892.315757] pcpu_alloc+0x4e2/0x1240 [ 1892.316682] ? io_tctx_exit_cb+0xf0/0xf0 [ 1892.317686] percpu_ref_init+0x31/0x3d0 [ 1892.318660] io_uring_setup+0x47a/0x2980 [ 1892.319649] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1892.320828] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1892.322069] ? wait_for_completion_io+0x270/0x270 [ 1892.323285] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1892.324562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1892.325831] do_syscall_64+0x33/0x40 [ 1892.326740] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1892.327989] RIP: 0033:0x7fbb28dd6b19 [ 1892.328893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1892.333388] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1892.335243] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 1892.336984] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1892.338732] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1892.340472] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1892.342221] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1892.355155] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. 13:10:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="61010000190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:10:31 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{r3, 0x19520}, {r4, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x5, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x142}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@private, @in=@private}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x8, 0x3) sendfile(r1, r5, &(0x7f0000000140)=0x3fd, 0x1) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x100000001) 13:10:31 executing program 0: r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f00000003c0)='-\xfcx{\xe6\xac\xc8\xdf\x8e;\xb4Wy\xbea\xac2@\xa7\\\x98\x1f\x9d\x00\x00\x00', 0x0) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000480)="1e5f09ced5ea37aac13b5ffe932d9b026c045ee9af320b63d8e5b540a06c145627547d72b848c0af9897028a", 0x2c}], 0x1, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000440)=0x7, 0x4) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000070000000000080000002607b8ed5f850000", @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000002080)={'ip6_vti0\x00', &(0x7f0000002000)={'ip6gre0\x00', r3, 0x4, 0x3, 0x20, 0x9, 0x3c, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x10, 0x200, 0x5}}) sendmmsg$inet(r2, &(0x7f0000002140)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000040)="f7293784bf29f48492cc73b886aa68284cb9c7cf90933b7019be2e58b3f911541ce7e46c47c437c398176802364642027cbb9e12977278ab3ecad80812d27fe3d4e7c5835bdae6808ac5135e8ba71931ed05bf13971dab1a01034650bbdf3001bd895705a85f252db32d8e7ad86f5b0a59395d19e67157d99f394d02bbf7", 0x7e}, {&(0x7f0000000180)="5629da0946f33ba2f42f9c0e15d1702b8b0b778e31d04570f5bc3719aceded74ceab64d30f7fb2272fda2f9019ebcb8a5acedf4215ed8e37f30f264860fda8f3425cd6f1bf7bfeb76d9ecb5c3d2e5e4a41fed5f0fe5ea0ed205c509cc60b12c9c86434795f74abc547b7a038afd8906f", 0x70}, {&(0x7f0000000200)="2931cbd82a342740bc20fcb67dfb872329faf215bd5ee167bdb57633dcc876b2e54913b932f2313804eaddc2e8959cec3ef3681f4c675efd2d2c0fdd6966e5001f2ff41bc7a59b03ff78259cfa3d", 0x4e}, {&(0x7f0000000280)="87419249b3ac981388ea8adeab0aa5d0188cd4ed21c3e2889d38503afe18583b9628d602dddd2ae6819234b5a526b1576c2ad12cc6a8ad671bfbd32195de29e89f8c1ef5f6fbbfb54ada2a7b78984cd9b5aebd60fae75a81cc4d5cc010a6803751fa2bc1fff57650c7bf6b6a43d18ab77b52e0778e644253b8c8de0a74a2aaf4fdf15565be8e5676bbc3013d69986dd248", 0x91}, {&(0x7f00000000c0)="75e42a5586b0", 0x6}, {&(0x7f0000000340)="216ddf920abb9c5df471fbb2e677fba18249e7a0f282376a292bcaa243ef70ad16a23e4b33641f2fbd53c7e3dea9d68bef9ddc4e0633f99439962571ec0456ebf799fd2989e68d67ccd43cc71f", 0x4d}], 0x6, &(0x7f00000022c0)=ANY=[@ANYBLOB="110000000000000000000000010000000000000000000000100000000000000000000000070000001400000000000000000000000100000001000000000000001c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="ac1e00010a01010100000011000000000000000000000001000000f8000000000000001400000000000063d23d000000000002000000ff070000000000001c000000002300000000000008", @ANYRES32=r3, @ANYBLOB="ac1414320000000000000000140000000000000000000000010000000200000000000000"], 0xc8}}, {{&(0x7f0000000540)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000580)="081a7fefd0dbe8decf3fbff9576a3b626bfe554453a7f6bf894e8e", 0x1b}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="3bed65aeef8329ee575190804b1e37fbe272ef386e51c5688a084a1189cec16686370b1b24f9ba17832ee6a853efaf10e6612d04cd578d26a9ea814f575b83c646", 0x41}, {&(0x7f0000001640)="fd8c05eb6adca2444124268353cc5449036f586e92530630eb949bbf76962c70de691182865bacccef82b162965eccb7e15e1600235ebcf9ebab015cdbe45098effdcfcb5a0247e41c877936cc81d30e3d9ac8b613d665a25f8df39565beb5feff66493a572b0c4cc831009e99960b9661c49d997dac21ee32ac2992c80e514b1d1b11456eb38a7bb50c738b9e63c686986ff2", 0x93}, {&(0x7f0000001700)="0504c944fdb1878ead9a4634ed9c0bf714be3ad126f3e90976da31d25649eb15bebea779daf847b7374ea0cbdf51cd8da265074d3fc68dfd6583a765d56b844798035b00e037aea4d72052a4c5044283ec0d4c224eb903a360b49210312202806043342fbaac09ec5a390f0ddf01852046266fcbe4d2ae7e37607ce8b223db5c572629a48bb3e7d9726ba2f784f98bd53307d0fead1a7c53a7b0d6a01abf4423cf38aa81e4", 0xa5}, {&(0x7f00000017c0)="f1cd5c5d4f0b41f3fa79faadce40484ffffb0a2fc12fdd7c22da6186a9a8bf69e8641e88f5df0e78c23c0bd35521899a8ccd24f511fd806ebfe233b76b91cc3e4c60cb52f7cf7af7ec45a656f014a4f0da73ae42c617dfaa3396c81f0c050c570eaa42747f396d34f3ca213168ef761062ecfb631d7933a74da48ccaf780f01e33fa87d35cf310c6ac00d3405f9d2bbdac04b464b2e009ce68a5e907eeae24491776aecf045dfc00ee0e05bd1e8b0693a13ca5eeb53d528d6908ac355c4c7bfdca0815fe42aa6ad3a635d351d3b9faf0f83fd8c1e5f731c6326af45a0c1fc0132d27e3a5d60a746cdca244619f6d26d611e1bc685f0e01d6e7bcd5926534", 0xfe}, {&(0x7f00000018c0)="cba991b89ded2bcc23285992cbd11b02be25ea84f8f6c34252d57d7314f709e2fd88101b2b0c7fc163ff8809fd7413b2ebd377f7873214a8add1a792cbb8b60a6b36357798582c3aae64e41901f098f52ebfe1521b2d36f0d7f1a7b2cbf9f488c9717d0d2119278f501e4156d886e0", 0x6f}], 0x7, &(0x7f00000019c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x17, 0xa5, [@multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x12}, @local, @loopback]}, @lsrr={0x83, 0xb, 0xd0, [@multicast2, @empty]}, @generic={0x82, 0xf, "52026fa61ab42ee770938bc035"}, @timestamp_addr={0x44, 0x1c, 0xde, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x3f}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @rr={0x7, 0xb, 0x53, [@rand_addr=0x64010100, @private=0xa010101]}, @cipso={0x86, 0xf, 0xffffffffffffffff, [{0x5, 0x9, "eb088a3bf0d6e6"}]}, @generic={0x7, 0x12, "1b78ac7fc20f1f5f67e00b50f5bbbb28"}]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xd8, 0x0, 0x7, [0x7, 0x8, 0x0, 0x1ab1, 0x3, 0x3]}, @noop, @cipso={0x86, 0x19, 0x1, [{0x1, 0x5, "f93357"}, {0x5, 0xe, "cd401e35cf635c80e7b7f4e8"}]}, @generic={0x86, 0x11, "1886f1b70ce6dd89cbc82a123dbd62"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x198}}, {{&(0x7f0000001b80)={0x2, 0x7fff, @multicast1}, 0x10, &(0x7f0000002240)=[{&(0x7f0000001bc0)="53186488ec5fcf365f58f46b2a658e0f4a75d91d36f3fdbd991c80ee7a1641a6e244e3349b46a491150e5b401b75f6c1b09fe1b23a9c513bc0bf30fcf690693b70c766a2ba51ff1e851e8dc4834252269c008caf6a2ed3b0fc1dd04aa7de0b2ad91035c1574d04bc44a9636406e94ca8f761c7e7c83bbd426771594521f10b11b314978e2b1172c3ede2e6884c8d3ec2142523029f8c3d1006e45850798568f8d4df04fdf678a4145eba6a609f0078e0c55e29f35a18fcccc21c4db380e089b879ef0772a53069cefb9b4b1d13880ce7420e", 0xd2}, {&(0x7f0000001cc0)="1c623ad2221fc1636802e7680a6da15062351a08f6b05a1949549395e97f4a6cda1c4ff7ebb9a849233bb0899f12c6def26ee903b2ff5b99e065d7636a13191dab853d10ff8aa84ad7626137f7f2e2e755b9a7de2eb0cb0b2b73d433f430b3e581e71e2f180f5ff86e786567ca530f9aaa2fddfbf5257ca0d1639181c5b83d9d94bd474c44471f1133ef9c420d32cc4876e7", 0x92}, {&(0x7f0000001d80)="f2fc855f112bc4f635cc96e406151796b6d29da80ee4f6085fbe4b4ebd29e4f95f3d7a001557798bc6d39007ec267e0b3055899f70435ecb5079146b90291a1f214101973fb919670f6e5cdbb2d80be61d0f4ba88ab4d19c45a8483d716c4f2082692b2c5f4bc8984f6e53b1805e8ab7c3b00243d160ef42f034171e2a4fcfe049d0", 0x82}, {&(0x7f0000001e40)="ebe283035d344a95e305a732b14af0103ea9d658c3cf4115058802bec88b70d17200f2d90cfa3656", 0x28}, {&(0x7f0000001e80)="1722826621840c32ce709905627925e08b02047f7474d9507de49af43c9630a9f6dbde49e9d6731714c5c409e6c205010fdb85e1296a4c1e46f339e6393c9c637830540ea3b7aae54ea59d6dcb1da040b07284a0423a111b2b69c046338001e3706c13c706f470a82bd1133a751c2472d6d147936abe83d7bb995a9d897ee814f555cee33c861edf2d8125902671450ccfb498dbc50c44eb7bbba7e71c8d47ea6ac8200dc118c94e2866bc6098f7816e4b23f99750821698840de4057fd8dea866a45a373d135f5f267a7fc6756e417040103e4105e58513448fc0552f31342731c35514e0fc", 0xe6}, {&(0x7f0000002200)}], 0x6, &(0x7f00000020c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x68}}], 0x3, 0x4) 13:10:31 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x12, 0x4, 0x1, 0x1, 0x48, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x17, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x2, 0x2}, {0x6, 0x2}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:10:31 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:10:31 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:10:31 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x200202, 0x1, 0xa}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f00000010c0), &(0x7f0000001100)=0x0, &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug={'debug', 0x3d, 0x924}}, {@nodevmap}, {@noextend}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@afid={'afid', 0x3d, 0x345}}]}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10, r5, 0x0) 13:10:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x6800, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) [ 1908.292176] device syz_tun entered promiscuous mode [ 1908.294049] device syz_tun left promiscuous mode [ 1908.302063] device syz_tun entered promiscuous mode [ 1908.303429] device syz_tun left promiscuous mode [ 1908.310436] FAULT_INJECTION: forcing a failure. [ 1908.310436] name failslab, interval 1, probability 0, space 0, times 0 [ 1908.312795] CPU: 1 PID: 10766 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 1908.314279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1908.315999] Call Trace: [ 1908.316556] dump_stack+0x107/0x167 [ 1908.317312] should_fail.cold+0x5/0xa [ 1908.318140] ? percpu_ref_init+0xd8/0x3d0 [ 1908.319012] should_failslab+0x5/0x20 [ 1908.319813] kmem_cache_alloc_trace+0x55/0x320 [ 1908.320767] ? io_tctx_exit_cb+0xf0/0xf0 [ 1908.321652] percpu_ref_init+0xd8/0x3d0 [ 1908.322492] io_uring_setup+0x47a/0x2980 [ 1908.323335] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1908.324348] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1908.325417] ? wait_for_completion_io+0x270/0x270 [ 1908.326448] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1908.327559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1908.328651] do_syscall_64+0x33/0x40 [ 1908.329463] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1908.330524] RIP: 0033:0x7fbb28dd6b19 13:10:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="c0020000190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 1908.331304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1908.335279] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1908.336851] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 1908.338381] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1908.339941] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1908.341802] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1908.343280] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1908.348919] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10768 comm=syz-executor.5 13:10:32 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) dup3(r1, r2, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x7}, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) 13:10:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x6c00, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:10:32 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:10:32 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 11) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:10:32 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x12, 0x4, 0x1, 0x1, 0x48, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x17, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x2, 0x2}, {0x6, 0x2}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 1908.648117] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10784 comm=syz-executor.5 [ 1908.658651] device syz_tun entered promiscuous mode [ 1908.664147] device syz_tun left promiscuous mode [ 1908.680096] device syz_tun entered promiscuous mode [ 1908.685800] device syz_tun left promiscuous mode [ 1908.689342] FAULT_INJECTION: forcing a failure. [ 1908.689342] name failslab, interval 1, probability 0, space 0, times 0 [ 1908.691717] CPU: 0 PID: 10790 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 1908.693151] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1908.695052] Call Trace: [ 1908.695610] dump_stack+0x107/0x167 [ 1908.696384] should_fail.cold+0x5/0xa [ 1908.697174] ? create_object.isra.0+0x3a/0xa30 [ 1908.698135] should_failslab+0x5/0x20 [ 1908.698925] kmem_cache_alloc+0x5b/0x310 [ 1908.699771] create_object.isra.0+0x3a/0xa30 [ 1908.700677] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1908.701760] kmem_cache_alloc_trace+0x151/0x320 [ 1908.702726] ? io_tctx_exit_cb+0xf0/0xf0 [ 1908.703562] percpu_ref_init+0xd8/0x3d0 [ 1908.704389] io_uring_setup+0x47a/0x2980 [ 1908.705244] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1908.706254] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1908.707309] ? wait_for_completion_io+0x270/0x270 [ 1908.708340] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1908.709439] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1908.710518] do_syscall_64+0x33/0x40 [ 1908.711283] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1908.712356] RIP: 0033:0x7fbb28dd6b19 [ 1908.713124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1908.716942] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1908.718523] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 1908.720000] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1908.721484] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1908.722967] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1908.724436] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:10:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="c00e0000190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:10:47 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:10:47 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x7400, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:10:47 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x14, 0x4, 0x1, 0x1, 0x50, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x2, 0x2}, {0x6, 0x9, "92bdec454954f2"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:10:47 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) dup3(r3, r4, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000023c0)={0x3, 0x4}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002380)={'veth0\x00'}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x10001, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r5, 0x29, 0x40, &(0x7f0000000100), 0xfe0f) getsockopt$inet6_int(r5, 0x29, 0x9, &(0x7f0000002400), &(0x7f0000002440)=0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) r6 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r6, &(0x7f0000002340)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="85be9261d858a5675f044fa687ec6578a4eb263ca90f952eb7d0a5e64ff78e8ff83d2a8e531ba1a0f895d5140188f91288907feed0891ebc3b77d97bbf1df20dc08ac202d2b3f81bdb83444fdfcad977cff45bae389064981363b3ae7371f041c4952d664e97c128643c7bfa3c4215e5e7bdc7ebf8309b6ff89260a6d7333464d5d74d2d61d675d725a9b28379c03f07560ac1a62b654ed2ac6e873fd0e278233bbd9d7a19c0b1d0a947e6e32e031de38a10621d0612ba57af8267db199b1da5893996057e5a242d628c0e5f39", 0xcd}, {&(0x7f0000002280)="20e62f347d3a0d862cdc351aadea57d78312df4dd3ab24d6239729c792b6535b5e18a041d2b3937f1bf97aa47cdd2d1918e2867cf4cbfd5a1e3e14ffd26327f1e085eea8e69a702dd4999d51909e2123ae618f63181a25388829704ac32151833a26559b6ede2e94b6f36321d7d8c89661993f2d23163b48dc948a5380ba432d0155854289e565", 0x87}], 0x4, 0x0, 0x0, 0x4000}, 0x40000000) 13:10:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xd, 0x12, r0, 0x0) truncate(&(0x7f0000001040)='./file1\x00', 0x4) pipe2(&(0x7f0000001080)={0x0, 0x0}, 0x0) vmsplice(r1, &(0x7f00000012c0)=[{&(0x7f0000000040)="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", 0xfffffe90}], 0x1, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x10010, r1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0xc, &(0x7f0000000100)=0x3f, 0x4) sendmsg$nl_generic(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x18, 0x16, 0xc21, 0x0, 0x0, {0xa, 0x0, 0x300}, [@generic="9f"]}, 0x18}}, 0x0) sendmsg$nl_netfilter(r8, &(0x7f0000001140)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001100)={&(0x7f0000001300)={0x1c8, 0x3, 0x3, 0x401, 0x70bd27, 0x25dfdbfe, {0xc, 0x0, 0x7}, [@generic="40e0a2037a7894a53814b7a035e7e1ec822c9a180ac61f24b6883a0c1a16f5e77f74d4d25fa478d43272676bf7baa4217c69c7c5560152d9b723e4220ad73d2b1ca06db667af253c52dcd049072d2f938495eb3cb03a6120", @nested={0x15c, 0x29, 0x0, 0x1, [@typed={0x8, 0x36, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x4, 0x6e}, @generic="a91c13882baf8d4ef8e126c0f9733bf9cee6e298c0674a526f4bfe03772372a4b75066310506e7a8ac49770629b961e0f1935b6ebfe7df3dc42e417d20f0894f17222c47017dacbd3d3d7138054513273734e92e302983349a58202166f6c63837f4e6082c826bb1c6bb7b9de5ac8c1e34901ebbb6cea23911a39777a047dee12e6c416af4f7c9b8ddcd9c1b7fc32391c92807f155a023d1ce090e10d4", @typed={0xc, 0xe, 0x0, 0x0, @u64=0x9}, @generic="870c2fbf30f51ff0c42d1d74eff928bf38551d2caa5c2293948b7a5ad0412d1ee50ef9c6d3885d73a08e762c37cad78fa72d65dbf0d28d07701e5c5636aa11ce056d8004ec77597d91eb57cdfdbb993013e53783fd6da5e7e6884ec7e1fae1927bd37cb61a32de3d7269d768ae01646f643f61090b0cea512f8e4943e58db4f5f1348d7c0c7bf3980ab6abd51d0ca783fbd51a452bdb7d7bfa8c4b73a10770c9fbc358"]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x1}, 0x48c0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r9}}, 0x9) 13:10:47 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 12) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:10:47 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{r3, 0x19520}, {r4, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x5, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x142}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@private, @in=@private}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x8, 0x3) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x100000001) 13:10:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="e03f0300190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 1923.593409] FAULT_INJECTION: forcing a failure. [ 1923.593409] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1923.595960] CPU: 0 PID: 10812 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 1923.597411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1923.599172] Call Trace: [ 1923.599733] dump_stack+0x107/0x167 [ 1923.600505] should_fail.cold+0x5/0xa [ 1923.601318] __alloc_pages_nodemask+0x182/0x600 [ 1923.602302] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1923.603581] ? cap_capable+0x1cd/0x230 [ 1923.604415] alloc_pages_current+0x187/0x280 [ 1923.605376] __get_free_pages+0xc/0xa0 [ 1923.606275] io_uring_setup+0xe27/0x2980 [ 1923.607153] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1923.608218] ? wait_for_completion_io+0x270/0x270 [ 1923.609232] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1923.610393] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1923.611583] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1923.612694] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1923.613796] do_syscall_64+0x33/0x40 [ 1923.614582] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1923.614937] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10809 comm=syz-executor.5 [ 1923.615658] RIP: 0033:0x7fbb28dd6b19 [ 1923.615678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1923.615696] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1923.623330] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 1923.624838] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1923.626345] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1923.627855] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1923.629356] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:10:47 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1923.656447] audit: type=1400 audit(1757682647.355:168): avc: denied { map } for pid=10799 comm="syz-executor.3" path="pipe:[39347]" dev="pipefs" ino=39347 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 13:10:47 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x7a00, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) [ 1923.669702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=10808 comm=syz-executor.3 13:10:47 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 13) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:10:47 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x14, 0x4, 0x1, 0x1, 0x50, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x2, 0x2}, {0x6, 0x9, "92bdec454954f2"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 1923.697219] device syz_tun entered promiscuous mode [ 1923.712407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=10815 comm=syz-executor.3 [ 1923.731034] device syz_tun left promiscuous mode [ 1923.772854] device syz_tun entered promiscuous mode 13:10:47 executing program 3: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x14, 0x4, 0x1, 0x1, 0x50, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x2, 0x2}, {0x6, 0x9, "92bdec454954f2"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 1923.775003] device syz_tun left promiscuous mode 13:10:47 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) dup3(r1, r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x2d, 0x3, 0x2f, 0x2, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x700, 0x8, 0xace9}}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x1a, r3, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r5, 0x3, 0x6}, 0x10) [ 1923.832760] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10829 comm=syz-executor.5 [ 1923.840505] FAULT_INJECTION: forcing a failure. [ 1923.840505] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1923.843040] CPU: 0 PID: 10830 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 1923.844493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1923.846238] Call Trace: [ 1923.846801] dump_stack+0x107/0x167 [ 1923.847576] should_fail.cold+0x5/0xa [ 1923.848385] __alloc_pages_nodemask+0x182/0x600 [ 1923.849368] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1923.850643] ? cap_capable+0x1cd/0x230 [ 1923.851476] alloc_pages_current+0x187/0x280 [ 1923.852410] __get_free_pages+0xc/0xa0 [ 1923.853241] io_uring_setup+0xf9a/0x2980 [ 1923.854167] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1923.855260] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1923.856382] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1923.857476] do_syscall_64+0x33/0x40 [ 1923.858275] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1923.859357] RIP: 0033:0x7fbb28dd6b19 [ 1923.860145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1923.864047] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1923.865654] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 1923.867165] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1923.868658] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1923.870166] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1923.871662] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:10:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38090020190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:10:47 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{r2, 0x19520}, {r3, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x5, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x142}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@private, @in=@private}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x100000001) [ 1924.035466] device syz_tun entered promiscuous mode [ 1924.038712] device syz_tun left promiscuous mode [ 1924.045268] device syz_tun entered promiscuous mode [ 1924.046114] device syz_tun left promiscuous mode 13:11:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xe801, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:11:11 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:11:11 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{r2, 0x19520}, {r3, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x5, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x142}) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x100000001) 13:11:11 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:11:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x56, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) 13:11:11 executing program 3: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x14, 0x4, 0x1, 0x1, 0x50, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x2, 0x2}, {0x6, 0x9, "92bdec454954f2"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:11:11 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x14, 0x4, 0x1, 0x1, 0x50, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x2, 0x2}, {0x6, 0x9, "92bdec454954f2"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:11:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="00f0ff7f190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 1947.959382] FAULT_INJECTION: forcing a failure. [ 1947.959382] name failslab, interval 1, probability 0, space 0, times 0 [ 1947.961868] CPU: 0 PID: 10857 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 1947.963363] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1947.965146] Call Trace: [ 1947.965720] dump_stack+0x107/0x167 [ 1947.966522] should_fail.cold+0x5/0xa [ 1947.967353] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1947.968565] should_failslab+0x5/0x20 [ 1947.969390] kmem_cache_alloc_trace+0x55/0x320 [ 1947.970396] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1947.971562] io_uring_setup+0x14f6/0x2980 [ 1947.972469] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1947.973567] ? wait_for_completion_io+0x270/0x270 [ 1947.974646] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1947.975773] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1947.976891] do_syscall_64+0x33/0x40 [ 1947.977699] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1947.978813] RIP: 0033:0x7fbb28dd6b19 [ 1947.979623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1947.983518] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1947.985155] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 1947.986704] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1947.988245] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1947.989790] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1947.991343] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:11:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="effdffff190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 1948.001638] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10860 comm=syz-executor.5 13:11:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xf000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:11:11 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x15, 0x4, 0x1, 0x1, 0x54, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x21, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x2, 0x2}, {0x6, 0xc, "92bdec454954f227d68b"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:11:11 executing program 3: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x14, 0x4, 0x1, 0x1, 0x50, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x2, 0x2}, {0x6, 0x9, "92bdec454954f2"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:11:11 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 15) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) [ 1948.228406] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10869 comm=syz-executor.5 13:11:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38020000190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:11:12 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1948.382282] FAULT_INJECTION: forcing a failure. [ 1948.382282] name failslab, interval 1, probability 0, space 0, times 0 [ 1948.384987] CPU: 1 PID: 10879 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 1948.386799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1948.388763] Call Trace: [ 1948.389412] dump_stack+0x107/0x167 [ 1948.390218] should_fail.cold+0x5/0xa [ 1948.391045] ? create_object.isra.0+0x3a/0xa30 [ 1948.392034] should_failslab+0x5/0x20 [ 1948.392859] kmem_cache_alloc+0x5b/0x310 [ 1948.393737] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1948.395051] create_object.isra.0+0x3a/0xa30 [ 1948.396002] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1948.397106] kmem_cache_alloc_trace+0x151/0x320 [ 1948.398136] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1948.399305] io_uring_setup+0x14f6/0x2980 [ 1948.400211] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1948.401308] ? wait_for_completion_io+0x270/0x270 [ 1948.402386] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1948.403523] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1948.404644] do_syscall_64+0x33/0x40 [ 1948.405450] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1948.406571] RIP: 0033:0x7fbb28dd6b19 [ 1948.407381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1948.411375] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1948.413029] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 1948.414579] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1948.416129] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1948.417679] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1948.419240] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:11:26 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 16) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:11:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x80000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:11:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) 13:11:26 executing program 3: pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000006c0), 0x6}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) syz_open_dev$hidraw(&(0x7f00000004c0), 0x2, 0x10420) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2220c0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, 'nl80211\x00'}}, {@loose}], [{@smackfsfloor}, {@appraise}, {@appraise_type}, {@hash}]}}) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x5c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x26}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4044080) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2f00d5000096b97a564311b49425a0648562a19024f3aabf30a4a952cf7502cf23523835f0dc22f5a7dd94340646149ac6bcb016e57275ef13962b539693950c3b4396c15463cb23645e1cbc7f02a07d9b0ff86c4445dee1564b3ff99e4d38fb6f9307958b01d3e8de3ae452a2ee0b0abd589438b7bdd3417ef54993b6164dddb59c31b7c20227eb8de431c06919c3ea1d7d209a9cbb3f53e3a5f27d5e765c79cd21cea8281fb7a3d18789dfc0dfce"], 0x14}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x7460}}, 0x401) 13:11:26 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x15, 0x4, 0x1, 0x1, 0x54, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x21, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x2, 0x2}, {0x6, 0xc, "92bdec454954f227d68b"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:11:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38030000190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:11:26 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{r2, 0x19520}, {r3, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x5, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x100000001) 13:11:26 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1962.413826] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10896 comm=syz-executor.5 [ 1962.420918] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1962.424397] device syz_tun entered promiscuous mode [ 1962.424727] FAULT_INJECTION: forcing a failure. [ 1962.424727] name failslab, interval 1, probability 0, space 0, times 0 [ 1962.426791] device syz_tun left promiscuous mode [ 1962.426941] CPU: 0 PID: 10899 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 1962.428770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1962.429847] Call Trace: [ 1962.430201] dump_stack+0x107/0x167 [ 1962.430672] should_fail.cold+0x5/0xa [ 1962.431170] ? create_object.isra.0+0x3a/0xa30 [ 1962.431754] should_failslab+0x5/0x20 [ 1962.432246] kmem_cache_alloc+0x5b/0x310 [ 1962.432773] create_object.isra.0+0x3a/0xa30 [ 1962.433345] kmemleak_alloc_percpu+0xa0/0x100 [ 1962.433917] pcpu_alloc+0x4e2/0x1240 [ 1962.434422] ? io_async_queue_proc+0x80/0x80 [ 1962.434982] percpu_ref_init+0x31/0x3d0 [ 1962.435492] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1962.436192] io_uring_setup+0x14f6/0x2980 [ 1962.436727] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1962.437387] ? wait_for_completion_io+0x270/0x270 [ 1962.438055] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1962.438863] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1962.439528] do_syscall_64+0x33/0x40 [ 1962.440010] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1962.440672] RIP: 0033:0x7fbb28dd6b19 [ 1962.441149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1962.443523] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1962.444492] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 1962.445407] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1962.446351] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1962.447271] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1962.448179] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1962.455020] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. 13:11:26 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 17) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:11:26 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:11:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xe0ffff, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:11:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x0, 0xfffffff9, &(0x7f0000000180)=""/4096, &(0x7f0000000000)=0x1000) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x6}, 0x10) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000001280), 0x4000) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000003240)={0x0, 0x1}, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) dup3(r1, r2, 0x0) recvmmsg$unix(r1, &(0x7f0000003300)=[{{&(0x7f0000001180), 0x6e, &(0x7f0000002780)=[{&(0x7f0000001200)=""/128, 0x80}, {&(0x7f0000001400)=""/239, 0xef}, {&(0x7f0000001500)=""/164, 0xa4}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/226, 0xe2}, {&(0x7f00000026c0)=""/38, 0x26}, {&(0x7f0000002700)=""/86, 0x56}], 0x7, &(0x7f0000002800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000002900)=@abs, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/196, 0xc4}], 0x2, &(0x7f0000002b40)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000002c00)=@abs, 0x6e, &(0x7f0000003140)=[{&(0x7f0000002c80)=""/66, 0x42}, {&(0x7f0000002d00)=""/237, 0xed}, {&(0x7f0000002e00)=""/20, 0x14}, {&(0x7f0000002e40)=""/155, 0x9b}, {&(0x7f0000002f00)=""/40, 0x28}, {&(0x7f0000002f40)=""/222, 0xde}, {&(0x7f0000003040)=""/250, 0xfa}], 0x7}}, {{&(0x7f00000031c0), 0x6e, &(0x7f0000003280)=[{&(0x7f0000003240)}], 0x1, &(0x7f00000032c0)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x10021, &(0x7f0000003400)={0x77359400}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001300)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000003440)={{{@in=@loopback, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000003540)=0xe8) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6}, 0x10) 13:11:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38080000190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:11:26 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x15, 0x4, 0x1, 0x1, 0x54, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x21, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x2, 0x2}, {0x6, 0xc, "92bdec454954f227d68b"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 1962.597385] FAULT_INJECTION: forcing a failure. [ 1962.597385] name failslab, interval 1, probability 0, space 0, times 0 13:11:26 executing program 3: pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000006c0), 0x6}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) syz_open_dev$hidraw(&(0x7f00000004c0), 0x2, 0x10420) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2220c0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, 'nl80211\x00'}}, {@loose}], [{@smackfsfloor}, {@appraise}, {@appraise_type}, {@hash}]}}) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x5c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x26}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4044080) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2f00d5000096b97a564311b49425a0648562a19024f3aabf30a4a952cf7502cf23523835f0dc22f5a7dd94340646149ac6bcb016e57275ef13962b539693950c3b4396c15463cb23645e1cbc7f02a07d9b0ff86c4445dee1564b3ff99e4d38fb6f9307958b01d3e8de3ae452a2ee0b0abd589438b7bdd3417ef54993b6164dddb59c31b7c20227eb8de431c06919c3ea1d7d209a9cbb3f53e3a5f27d5e765c79cd21cea8281fb7a3d18789dfc0dfce"], 0x14}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x7460}}, 0x401) [ 1962.598777] CPU: 0 PID: 10908 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 1962.599737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1962.600732] Call Trace: [ 1962.601055] dump_stack+0x107/0x167 [ 1962.601497] should_fail.cold+0x5/0xa [ 1962.601959] ? create_object.isra.0+0x3a/0xa30 [ 1962.602513] should_failslab+0x5/0x20 [ 1962.602979] kmem_cache_alloc+0x5b/0x310 [ 1962.603475] create_object.isra.0+0x3a/0xa30 [ 1962.604009] kmemleak_alloc_percpu+0xa0/0x100 [ 1962.604557] pcpu_alloc+0x4e2/0x1240 [ 1962.605016] ? io_async_queue_proc+0x80/0x80 [ 1962.605546] percpu_ref_init+0x31/0x3d0 [ 1962.606025] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1962.606682] io_uring_setup+0x14f6/0x2980 [ 1962.607188] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1962.607796] ? wait_for_completion_io+0x270/0x270 [ 1962.608397] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1962.609028] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1962.609649] do_syscall_64+0x33/0x40 [ 1962.610103] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1962.610719] RIP: 0033:0x7fbb28dd6b19 [ 1962.611166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1962.613374] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1962.614294] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 1962.615148] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1962.616002] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1962.616861] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1962.617717] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1962.671198] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10911 comm=syz-executor.5 13:11:26 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) 13:11:26 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 18) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) [ 1962.936398] device syz_tun entered promiscuous mode [ 1962.937084] device syz_tun left promiscuous mode [ 1962.954414] FAULT_INJECTION: forcing a failure. [ 1962.954414] name failslab, interval 1, probability 0, space 0, times 0 [ 1962.956865] CPU: 1 PID: 10929 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 1962.958331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1962.960068] Call Trace: [ 1962.960625] dump_stack+0x107/0x167 [ 1962.961395] should_fail.cold+0x5/0xa [ 1962.962205] ? percpu_ref_init+0xd8/0x3d0 [ 1962.963073] should_failslab+0x5/0x20 [ 1962.963875] kmem_cache_alloc_trace+0x55/0x320 [ 1962.964843] ? io_async_queue_proc+0x80/0x80 [ 1962.965764] percpu_ref_init+0xd8/0x3d0 [ 1962.966612] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1962.967751] io_uring_setup+0x14f6/0x2980 [ 1962.968630] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1962.969668] ? wait_for_completion_io+0x270/0x270 [ 1962.970726] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1962.971839] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1962.972926] do_syscall_64+0x33/0x40 [ 1962.973707] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1962.974796] RIP: 0033:0x7fbb28dd6b19 [ 1962.975585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1962.979459] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1962.981069] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 1962.982586] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1962.984090] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1962.985586] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1962.987100] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:11:39 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 19) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:11:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xf0ffff, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:11:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000040)={'syztnl1\x00', r2, 0x8000, 0x7800, 0x4e561498, 0x7, {{0x16, 0x4, 0x2, 0x19, 0x58, 0x68, 0x0, 0xcf, 0x21ed14352c50ff7e, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@lsrr={0x83, 0x13, 0xaa, [@multicast2, @remote, @multicast2, @remote]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xa7, 0x3, 0x3, [{@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8fd}, {@empty, 0xfff}, {@private=0xa010101, 0x1000}]}]}}}}}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400000, 0x26) 13:11:39 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="98000000200039040000000000000000020000000dc0c23671f1a964651e4d52c3dc9432e6af519d60c901a7ea83dce8f6a9c36adbbf7c23348ed7953cc124f0f2e2f1324bf1187b4e1f5a7bf5116e03f38056144e579e46004fbfb9ae99572129d57aa41a4c792b56978ebd2e72f57ca14145c5bcd879afed4e97abd691d56cf2d815f272170c0011000000000000000000bb3e3c7562af739c74b82fd57e7bd51e163e9c2394948632056b9357f234b64631cba457c59e6d0eae9098c89e3c7aa8b1cbc03bd674263161cff69945516e14595dfad881c353d7fb9bbdc2fb19f3306b4f29f5ac8dddb92ee4fe33f6e190dffd186aa055b9a9547a834f1d619073f3ccf4b3acda5d78a8cff254a2de72f20938d689ca4044fab0a3ee36278183e00f05d56ee58c70cc78f1fe11e55c898d61e09dd9ec4bdefd952f33df697d06ffd93de78dd16ff6fabb99fb6b42eb449d317ff0b62c982878d984496c08a7a672102affbb245b18bb39d4a7b9a75298857b75fa243b23c8cf9643bb00000000005fcbe43f062951cd61eb7fd89947c9213bca5dc0b85ccc521acda794895462c77f5ff370f89a2e870f5d485e58951dd7d1e27236dc52ce2c5ad9c73e0a61401a4a516c41604d7981f0c5d28db9d69e06008070a1c8a29ab4b046f86a311abc00000000000000000000000021d58c77edb293cc9578f585bdd701f9ee2106436f5fcf55fe6240095b6b3d472798f8f9275542afa54cb35bead6ff06f9faacfe22aecf3a338b66d6b6d7493b8154647492b7504ee04560f3f09be3740b00fc6d83b0d8d71b009490cc8c05463d87a3dc636dd21e096d9d81c6d82e6476e7d92eac37b40eabf6c87bcf97f4e81c20d6cbc305948014b499ce164cd61e37a219f9e9d6192534a1e19508041dee4e6388131d075a48f73d985675042259c55328516aa0d7714a86cb42c54b353075a75bd6c97f07e67799bb3c4acde717de323a07b094965969ea17dedd4e913cc697ce6454df791c397f653bc1d2408fe440061011d098bba54b0d10e129c468dc1c556c655499d5a8d997d7ba122c42209860f8dd4e3f2993f60563fbb3017e10130ba23b7a165e98be854f41773afda6d73adb0f00d1a977cbdb5c3cb7e00897420f0df622573b78bd6c04d38822dc8a2c0a34984c28fe9b13010e182ad77a6d7186202d8177d60129be4d487ab48759eabcb23ff4fc1a149e01dff17dca8148be0262812a"], 0x98}}, 0x0) close_range(r1, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000003c0)=""/4, &(0x7f0000000400)=0x4) fcntl$addseals(r1, 0x409, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000440)=0x7, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0x3, 0x8, &(0x7f0000000140)="ef3003e7d4d5730dd9bc0d2116cbd2ec2d4cef0397c67262d0882d05da47c1147ab3a8e1b3dfac797791d00529f0be39c7c3024d4751fcbfb4d3ec4b7b6dc1", 0x3f, 0x0, 0x1}, 0x9) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', r3) r4 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000640)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000480)={'ip6tnl0\x00'}) add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r4) unshare(0x48020200) 13:11:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38090000190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:11:39 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:11:39 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x15, 0x4, 0x1, 0x1, 0x54, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x23, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x2, 0x2}, {0x6, 0xe, "92bdec454954f227d68b158d"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:11:39 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{r2, 0x19520}, {r3, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x5, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x100000001) [ 1975.500452] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10942 comm=syz-executor.5 [ 1975.500657] FAULT_INJECTION: forcing a failure. [ 1975.500657] name failslab, interval 1, probability 0, space 0, times 0 [ 1975.504604] CPU: 0 PID: 10941 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 1975.505501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1975.506552] Call Trace: [ 1975.506896] dump_stack+0x107/0x167 [ 1975.507356] should_fail.cold+0x5/0xa [ 1975.507848] ? create_object.isra.0+0x3a/0xa30 [ 1975.508421] should_failslab+0x5/0x20 [ 1975.508908] kmem_cache_alloc+0x5b/0x310 [ 1975.509425] create_object.isra.0+0x3a/0xa30 [ 1975.509983] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1975.510637] kmem_cache_alloc_trace+0x151/0x320 [ 1975.511221] ? io_async_queue_proc+0x80/0x80 [ 1975.511775] percpu_ref_init+0xd8/0x3d0 [ 1975.512289] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1975.512978] io_uring_setup+0x14f6/0x2980 [ 1975.513505] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1975.514151] ? wait_for_completion_io+0x270/0x270 [ 1975.514793] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1975.515457] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1975.516128] do_syscall_64+0x33/0x40 [ 1975.516605] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1975.517247] RIP: 0033:0x7fbb28dd6b19 [ 1975.517720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1975.520050] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1975.521012] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 1975.521913] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1975.522835] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1975.523722] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1975.524614] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1975.531727] device syz_tun entered promiscuous mode [ 1975.533027] device syz_tun left promiscuous mode 13:11:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x1000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) [ 1975.537977] device syz_tun entered promiscuous mode [ 1975.539452] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1975.548695] device syz_tun left promiscuous mode 13:11:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="380a0000190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:11:39 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x15, 0x4, 0x1, 0x1, 0x54, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x23, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x2, 0x2}, {0x6, 0xe, "92bdec454954f227d68b158d"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:11:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) bind(r1, &(0x7f0000000000)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x6}, 0x10) 13:11:39 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1975.670385] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10954 comm=syz-executor.5 13:11:39 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 20) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:11:39 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x15, 0x4, 0x1, 0x1, 0x54, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x23, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x2, 0x2}, {0x6, 0xe, "92bdec454954f227d68b158d"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:11:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x2000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) [ 1975.813710] FAULT_INJECTION: forcing a failure. [ 1975.813710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1975.816755] CPU: 1 PID: 10969 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 1975.818529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1975.820529] Call Trace: [ 1975.821236] dump_stack+0x107/0x167 [ 1975.822068] should_fail.cold+0x5/0xa [ 1975.822955] _copy_to_user+0x2e/0x180 [ 1975.823826] io_uring_setup+0x11b5/0x2980 [ 1975.824780] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1975.825961] ? wait_for_completion_io+0x270/0x270 [ 1975.827130] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1975.828484] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1975.829778] do_syscall_64+0x33/0x40 [ 1975.830639] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1975.832068] RIP: 0033:0x7fbb28dd6b19 [ 1975.832912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1975.837022] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1975.838732] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 1975.840344] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1975.841943] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1975.843553] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1975.845160] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:11:39 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x100000001) [ 1975.880267] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10972 comm=syz-executor.5 13:11:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000005c0)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@multicast1, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000100)=0x3f, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x18, 0x16, 0xc21, 0x0, 0x0, {0xa, 0x0, 0x300}, [@generic="9f"]}, 0x18}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x24008000) 13:11:39 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:11:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) [ 1976.087070] device syz_tun entered promiscuous mode [ 1976.088465] device syz_tun left promiscuous mode [ 1976.102359] device syz_tun entered promiscuous mode [ 1976.111495] device syz_tun left promiscuous mode [ 1976.136164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10981 comm=syz-executor.3 [ 1976.166282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10993 comm=syz-executor.3 13:11:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x3000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:11:54 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x100000001) 13:11:54 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:11:54 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x15, 0x4, 0x1, 0x1, 0x54, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x22, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:11:54 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000dc0)=@ethtool_sset_info={0x19}}) syncfs(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/1539], 0x603) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000bc0)={{{@in=@private, @in6=@initdev}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xfffffffffffffef2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @private0, 0x8}}, 0x0, 0x0, 0x2f, 0x0, "aa3262f5718a75c5e4c107b36be5b731cc4ae77e17704e82b2f5a9337ad14b50884654f3309f0ef8bd0753b6aa533ec31376d261e48a66f039d98a9ac4d5d3ad5ba22181cac531a7c335b46ce3d875ce"}, 0xd8) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000240)=ANY=[]}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea1, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_bond\x00'}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0xf17a, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 13:11:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = accept4(r1, 0x0, &(0x7f0000000080), 0x800) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000000c0)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r6 = fcntl$dupfd(r4, 0x0, r4) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4}, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000000)='./file0\x00', 0x80) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000280)={{0x8000, 0x4}, 0x100, './file0\x00'}) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000001c40)={0x0, 0x6}, 0x4) sendfile(r3, r1, 0x0, 0x500000001) 13:11:54 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 21) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:11:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="380e0000190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 1990.914456] FAULT_INJECTION: forcing a failure. [ 1990.914456] name failslab, interval 1, probability 0, space 0, times 0 [ 1990.916860] CPU: 0 PID: 11004 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 1990.918323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1990.920079] Call Trace: [ 1990.920641] dump_stack+0x107/0x167 [ 1990.921416] should_fail.cold+0x5/0xa [ 1990.922229] ? __d_alloc+0x2a/0x990 [ 1990.923007] should_failslab+0x5/0x20 [ 1990.923819] kmem_cache_alloc+0x5b/0x310 [ 1990.924691] __d_alloc+0x2a/0x990 [ 1990.925425] ? find_held_lock+0x2c/0x110 [ 1990.926293] d_alloc_pseudo+0x19/0x70 [ 1990.927112] alloc_file_pseudo+0xce/0x250 [ 1990.927985] ? trace_hardirqs_on+0x5b/0x180 [ 1990.928897] ? alloc_file+0x5a0/0x5a0 [ 1990.929714] anon_inode_getfile+0xc8/0x1f0 [ 1990.930622] io_uring_setup+0x138b/0x2980 [ 1990.931515] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1990.932580] ? wait_for_completion_io+0x270/0x270 [ 1990.933622] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1990.934743] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1990.935829] do_syscall_64+0x33/0x40 [ 1990.936610] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1990.937696] RIP: 0033:0x7fbb28dd6b19 [ 1990.938486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1990.942415] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1990.944022] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 1990.945582] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1990.947186] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1990.948718] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1990.950231] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1990.963709] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11010 comm=syz-executor.5 13:11:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38190000190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:11:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:11:54 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x3, 0x6}, 0x10) r2 = accept4(r0, &(0x7f00000001c0)=@phonet, &(0x7f00000000c0)=0x80, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6}, 0x10) 13:11:54 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 22) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:11:54 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x15, 0x4, 0x1, 0x1, 0x54, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x22, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:11:54 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1991.221504] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11022 comm=syz-executor.5 [ 1991.240072] FAULT_INJECTION: forcing a failure. [ 1991.240072] name failslab, interval 1, probability 0, space 0, times 0 [ 1991.242479] CPU: 0 PID: 11024 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 1991.243909] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1991.245756] Call Trace: [ 1991.246327] dump_stack+0x107/0x167 [ 1991.247109] should_fail.cold+0x5/0xa [ 1991.247897] ? create_object.isra.0+0x3a/0xa30 [ 1991.248853] should_failslab+0x5/0x20 [ 1991.249665] kmem_cache_alloc+0x5b/0x310 [ 1991.250556] create_object.isra.0+0x3a/0xa30 [ 1991.251483] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1991.252567] kmem_cache_alloc+0x159/0x310 [ 1991.253468] __d_alloc+0x2a/0x990 [ 1991.254191] ? find_held_lock+0x2c/0x110 [ 1991.255090] d_alloc_pseudo+0x19/0x70 [ 1991.255912] alloc_file_pseudo+0xce/0x250 [ 1991.256812] ? trace_hardirqs_on+0x5b/0x180 [ 1991.257724] ? alloc_file+0x5a0/0x5a0 [ 1991.258574] anon_inode_getfile+0xc8/0x1f0 [ 1991.259490] io_uring_setup+0x138b/0x2980 [ 1991.260398] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1991.261487] ? wait_for_completion_io+0x270/0x270 [ 1991.262556] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1991.263692] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1991.264801] do_syscall_64+0x33/0x40 [ 1991.265609] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1991.266721] RIP: 0033:0x7fbb28dd6b19 [ 1991.267532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1991.271401] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1991.273008] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 1991.274518] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1991.276049] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1991.277576] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1991.279120] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:12:09 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:12:09 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x15, 0x4, 0x1, 0x1, 0x54, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x22, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:12:09 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 13:12:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x5000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:12:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38250000190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:12:09 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 23) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:12:09 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(r0, &(0x7f0000000000)={0x11, 0xf8, 0x0, 0x1, 0xeb, 0x6, @random="70703dc47e97"}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) sendmmsg(r2, &(0x7f0000000180), 0x0, 0x4880) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000003840)={{0x1, 0x1, 0x18, r4, {0x469e}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000003940)={'sit0\x00', &(0x7f00000038c0)={'ip6_vti0\x00', r3, 0x29, 0x86, 0x0, 0x5, 0x4f, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x40, 0x5, 0x70c764b4}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000003a00)={'tunl0\x00', &(0x7f0000003980)={'tunl0\x00', r6, 0x7, 0x8, 0x8000, 0x7, {{0x15, 0x4, 0x0, 0x10, 0x54, 0x65, 0x0, 0x6d, 0x2f, 0x0, @remote, @broadcast, {[@rr={0x7, 0xf, 0xf7, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x39, 0x1, 0x9, [{@local, 0x488df617}, {@local, 0x178}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@broadcast, 0x5}]}, @rr={0x7, 0x7, 0xf3, [@private=0xa010101]}, @noop, @noop]}}}}}) 13:12:09 executing program 3: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) timer_create(0x2, &(0x7f0000000000)={0x0, 0x1c, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2005.482236] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11047 comm=syz-executor.5 [ 2005.490576] FAULT_INJECTION: forcing a failure. [ 2005.490576] name failslab, interval 1, probability 0, space 0, times 0 [ 2005.491938] CPU: 0 PID: 11049 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2005.492807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2005.493749] Call Trace: [ 2005.494056] dump_stack+0x107/0x167 [ 2005.494469] should_fail.cold+0x5/0xa [ 2005.494911] ? __alloc_file+0x21/0x320 [ 2005.495353] should_failslab+0x5/0x20 [ 2005.495793] kmem_cache_alloc+0x5b/0x310 [ 2005.496257] __alloc_file+0x21/0x320 [ 2005.496682] alloc_empty_file+0x6d/0x170 [ 2005.497145] alloc_file+0x5e/0x5a0 [ 2005.497552] alloc_file_pseudo+0x16a/0x250 [ 2005.498034] ? alloc_file+0x5a0/0x5a0 [ 2005.498481] anon_inode_getfile+0xc8/0x1f0 [ 2005.498975] io_uring_setup+0x138b/0x2980 [ 2005.499455] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2005.500035] ? wait_for_completion_io+0x270/0x270 [ 2005.500600] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2005.501203] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2005.501791] do_syscall_64+0x33/0x40 [ 2005.502196] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2005.502786] RIP: 0033:0x7fbb28dd6b19 [ 2005.503211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2005.505308] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2005.506171] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2005.506994] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2005.507814] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2005.508630] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2005.509446] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2005.534506] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. 13:12:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38610000190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2005.588681] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. 13:12:09 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x24, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x0, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:12:09 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:12:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x6000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:12:09 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 24) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) [ 2005.648456] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2005.701297] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2005.790479] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11071 comm=syz-executor.5 [ 2005.820349] FAULT_INJECTION: forcing a failure. [ 2005.820349] name failslab, interval 1, probability 0, space 0, times 0 [ 2005.821662] CPU: 0 PID: 11075 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2005.822448] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2005.823419] Call Trace: [ 2005.823724] dump_stack+0x107/0x167 [ 2005.824138] should_fail.cold+0x5/0xa [ 2005.824576] ? create_object.isra.0+0x3a/0xa30 [ 2005.825101] should_failslab+0x5/0x20 [ 2005.825537] kmem_cache_alloc+0x5b/0x310 [ 2005.826004] create_object.isra.0+0x3a/0xa30 [ 2005.826506] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2005.827099] kmem_cache_alloc+0x159/0x310 [ 2005.827576] __alloc_file+0x21/0x320 [ 2005.828005] alloc_empty_file+0x6d/0x170 [ 2005.828469] alloc_file+0x5e/0x5a0 [ 2005.828881] alloc_file_pseudo+0x16a/0x250 [ 2005.829367] ? alloc_file+0x5a0/0x5a0 [ 2005.829813] anon_inode_getfile+0xc8/0x1f0 [ 2005.830306] io_uring_setup+0x138b/0x2980 [ 2005.830796] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2005.831377] ? wait_for_completion_io+0x270/0x270 [ 2005.831947] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2005.832552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2005.833142] do_syscall_64+0x33/0x40 [ 2005.833570] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2005.834162] RIP: 0033:0x7fbb28dd6b19 [ 2005.834600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2005.836714] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2005.837587] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2005.838407] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2005.839235] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2005.840049] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2005.840864] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:12:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38630000190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:12:24 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 13:12:24 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 25) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:12:24 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file3\x00', 0x802c2, 0x0) recvmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)=""/220, 0xdc}, {&(0x7f0000000300)=""/81, 0x51}], 0x2, &(0x7f0000000680)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x2000) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./file2\x00', &(0x7f0000000540)='nsfs\x00', 0x4000, &(0x7f0000000580)) fallocate(r0, 0x10, 0x0, 0x5) write$P9_RMKNOD(r0, &(0x7f0000000240)={0x14, 0x13, 0x2, {0x8, 0x3, 0x4}}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(r2, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001090000"], 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f00000003c0)='-\xfcx{\xe6\xac\xc8\xdf\x8e;\xb4Wy\xbea\xac2@\xa7\\\x98\x1f\x9d\x00\x00\x00', 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000400)) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000900)={0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x3, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000940)) unshare(0x48020200) 13:12:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x7000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:12:24 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x24, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x0, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:12:24 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:12:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6}, 0x10) [ 2020.876016] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11089 comm=syz-executor.5 [ 2020.883764] device syz_tun entered promiscuous mode [ 2020.887085] FAULT_INJECTION: forcing a failure. [ 2020.887085] name failslab, interval 1, probability 0, space 0, times 0 [ 2020.889525] CPU: 1 PID: 11091 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2020.891185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2020.892952] Call Trace: [ 2020.893511] dump_stack+0x107/0x167 [ 2020.894447] should_fail.cold+0x5/0xa [ 2020.895311] ? security_file_alloc+0x34/0x170 [ 2020.896425] should_failslab+0x5/0x20 [ 2020.897442] kmem_cache_alloc+0x5b/0x310 [ 2020.898465] security_file_alloc+0x34/0x170 [ 2020.899534] __alloc_file+0xb7/0x320 [ 2020.900570] alloc_empty_file+0x6d/0x170 [ 2020.901548] alloc_file+0x5e/0x5a0 [ 2020.902441] alloc_file_pseudo+0x16a/0x250 [ 2020.903518] ? alloc_file+0x5a0/0x5a0 [ 2020.904347] anon_inode_getfile+0xc8/0x1f0 [ 2020.905562] io_uring_setup+0x138b/0x2980 [ 2020.906462] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2020.907696] ? wait_for_completion_io+0x270/0x270 [ 2020.908915] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2020.910382] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2020.911655] do_syscall_64+0x33/0x40 [ 2020.912450] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2020.913856] RIP: 0033:0x7fbb28dd6b19 [ 2020.914821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2020.919227] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2020.921216] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2020.922720] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2020.924273] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2020.925889] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2020.927906] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2020.940211] device syz_tun left promiscuous mode 13:12:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38000300190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:12:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xa000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:12:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) dup3(r3, r4, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x800) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @multicast}, 0x10) 13:12:24 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x24, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x9, "c0026ae74042a2"}, {0x0, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:12:24 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 26) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) [ 2021.225370] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11107 comm=syz-executor.5 [ 2021.259471] device syz_tun entered promiscuous mode [ 2021.271735] device syz_tun left promiscuous mode [ 2021.286477] device syz_tun entered promiscuous mode 13:12:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010200190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2021.303507] device syz_tun left promiscuous mode 13:12:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xf000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) [ 2021.388631] FAULT_INJECTION: forcing a failure. [ 2021.388631] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.391196] CPU: 0 PID: 11115 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2021.392667] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.394317] Call Trace: [ 2021.394862] dump_stack+0x107/0x167 [ 2021.395592] should_fail.cold+0x5/0xa [ 2021.396352] ? create_object.isra.0+0x3a/0xa30 [ 2021.397249] should_failslab+0x5/0x20 [ 2021.398007] kmem_cache_alloc+0x5b/0x310 [ 2021.398833] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2021.399933] create_object.isra.0+0x3a/0xa30 [ 2021.400816] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2021.401833] kmem_cache_alloc+0x159/0x310 [ 2021.402665] security_file_alloc+0x34/0x170 [ 2021.403531] __alloc_file+0xb7/0x320 [ 2021.404271] alloc_empty_file+0x6d/0x170 [ 2021.405088] alloc_file+0x5e/0x5a0 [ 2021.405798] alloc_file_pseudo+0x16a/0x250 [ 2021.406638] ? alloc_file+0x5a0/0x5a0 [ 2021.407431] anon_inode_getfile+0xc8/0x1f0 [ 2021.408274] io_uring_setup+0x138b/0x2980 [ 2021.409108] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2021.410158] ? wait_for_completion_io+0x270/0x270 [ 2021.411309] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2021.412410] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2021.413442] do_syscall_64+0x33/0x40 [ 2021.414183] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2021.415225] RIP: 0033:0x7fbb28dd6b19 [ 2021.415962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.419600] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2021.421097] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2021.422505] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2021.423916] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2021.425311] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2021.426715] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:12:25 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2021.594629] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11122 comm=syz-executor.5 13:12:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) 13:12:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x4, 0x4, 0x40}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = socket$nl_route(0x10, 0x3, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsmount(r0, 0x0, 0x83) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) dup3(r2, r3, 0x0) r4 = accept$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="0000000000000000fef60104e9ea05a33e456946df00000000db71a6108f270b1b310c1be1096a08b98e231fd9287d27fbd6605c9af5783f82691f61112ed3baa46c8c1d3e2559d999f67982cc6f6c089e7ba9277a716852682ce4f98356514e22f894d2331022d5601378955f8c9f116df76d1c263bfd3fe4cf39"]) 13:12:39 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:12:39 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:12:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010300190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:12:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x10000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:12:39 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 27) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:12:39 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) [ 2035.629998] FAULT_INJECTION: forcing a failure. [ 2035.629998] name failslab, interval 1, probability 0, space 0, times 0 [ 2035.632428] CPU: 1 PID: 11141 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2035.633914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2035.635674] Call Trace: [ 2035.636247] dump_stack+0x107/0x167 [ 2035.637026] should_fail.cold+0x5/0xa [ 2035.637834] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2035.638917] should_failslab+0x5/0x20 [ 2035.639744] kmem_cache_alloc_trace+0x55/0x320 [ 2035.640722] io_uring_alloc_task_context+0x99/0x6a0 [ 2035.641798] ? io_import_iovec+0x1120/0x1120 [ 2035.642737] ? lock_downgrade+0x6d0/0x6d0 [ 2035.643625] ? do_raw_spin_lock+0x121/0x260 [ 2035.644546] ? rwlock_bug.part.0+0x90/0x90 [ 2035.645458] __io_uring_add_tctx_node+0x2c6/0x520 [ 2035.646476] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2035.647603] ? alloc_fd+0x2e7/0x670 [ 2035.648388] io_uring_setup+0x1fbb/0x2980 [ 2035.649279] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2035.650358] ? wait_for_completion_io+0x270/0x270 [ 2035.651405] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2035.652535] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2035.653631] do_syscall_64+0x33/0x40 [ 2035.654422] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2035.655522] RIP: 0033:0x7fbb28dd6b19 [ 2035.656311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2035.660237] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2035.661884] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2035.663412] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2035.664938] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2035.666446] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2035.667967] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2035.670934] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11142 comm=syz-executor.5 [ 2035.692055] device syz_tun entered promiscuous mode [ 2035.695533] device syz_tun left promiscuous mode 13:12:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010400190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:12:39 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_submit(0x0, 0x2, &(0x7f00000007c0)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xf2, 0xda, 0x0, 0x80, 0x0, 0x7, 0x20000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1ff, 0x10000}, 0x202, 0x4, 0x7fff, 0x8, 0x4, 0x7a, 0x582, 0x0, 0xaf56, 0x0, 0x800}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f0000000240)='./file0\x00', 0x40, 0x154) setsockopt$inet6_int(r4, 0x29, 0x18, &(0x7f0000000280)=0x4, 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042d000c0005000202aaaaaaaaaaaa05002000000000000500200000000000050020000100000000002000004ca9000a0001007770616e330000000c0005000201aaaaaaaaaaaa050020000004000050c277cc0d47efdc75da4784d5b2839abaff9b303cdbe3561f43d778ec073bc1a0bd7ce7a089e44d240501076416f8411d969d77adb0e0473a2ae0410973a03161c567e26aeed8c647e9c9c504ffcc7aaebdbad77a8735f913361243042c2aa99e87b29341b58160a95468657be272ae3c8409000000edbc913742dc5f3219c2e615da858ea732d589fd4e7815166695ab60c2c3519e8ae903d072dbd8acf938fab0315a54a537af1702e6e324cf42a8767b232c94e36c5f4772"], 0x60}, 0x1, 0x0, 0x0, 0x24000014}, 0x814) 13:12:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x11000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:12:39 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) 13:12:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) sendmsg$inet6(r2, &(0x7f0000000780)={&(0x7f0000000040)={0xa, 0x4e24, 0x9, @private2, 0x3a}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000180)="8a48e3e646693809204c1bad2782b8de4b26d162e30ac91b0292838a70a7cfd857e242ae5e9807919877e915df1daa778a77bb360dceeae4fb0dccc5c4bc9f83570cdff95a723bfd35d4366ddb95d2ca1c3ac5f994d7cf03a787bd16033cd782512b4d8cab96cdcb8e275b27ac140b651601209607502e533b44f5e8e171599edf3944df8d861339ea09ff91351fbd9b3bfd42842de8b5296d6c8e63a154a8f32824303b0713b38d123f800f3c1194e62aeab2e022b0ae399c59ac3b71ebc928e8452473c4f207d43f759cf5f07a6640c2d31276d62fa553da", 0xd9}, {&(0x7f0000000280)="c1727ffb8e71b48ea68f8796096bbc8aa6e93d519aa3d794388af07b5355d377109dda3734948c25ddbc6e3bf986f5aafff099d3add18e5c6f882f9c5e993c41c750952195f29b88e24ee5f3d2194585d67297aa0258e38c981cb9aebe32234521b1567c7a6a97dc90cf1f6ebb0107792278ac7dd7d528de421042882653c861ea952ec98474033e68d934ca731b7a2adb94e94fed2c9bdd42d83509bc03340f49531bed58f9889266035de925d1431b9efa6c43a39f559df9951f31d2eb0bb54aeb23fdc40f18159bba", 0xca}, {&(0x7f0000000380)="c47dc740e166089e054f5c94ddffa5a9d93fcb0d440be0c005ee73e9ad8976e648dff66131ef759b1311463271d7034bca0f4030b42d58df4ac0fa052d9f7bd3a757eb7b6703b9a9494ad0f79f03ce00e9dc9b7bd43d11c96e41bfc3883fadb8fa810414164739a7d62781ae706376ce8ae8b6a0fc66807078abfa08dc77fbd8c97ab54b606b63e1bb93bb777f80b7a95f607ff1e11319df6be52a7630995ad53ab39fcc0e29f65af22cfbf757660b7715e350eb", 0xb4}, {&(0x7f0000000080)="c6babc6f487b1963d54201efe3a27479f055d7e74832f5375df6a5ebd1aa6c40312fdbfa754a69cd80a619132df3cba564142f966051e8", 0x37}, {&(0x7f0000000440)="9708d73d7ec4508298af0f359254050959e74b1db640378a09adec6bbeb30a71da81031864b833ec91faf262a88dcc0501ebdf19a921e2e19bf6c31800c5bbdc30c168bacfceaedff29ecd46aac10c4a5b445fee4f695522ceeee2bb560ce8620af83f235a2bded98551e3aa2c160e81f918ad10bb68fc7c4e637072c1dc076536f2efdd3e2f7ecc49eb73b644a2eb6b7fd931063d295483ef8129ae3051aaf2943b27cb5bfad596493a4afe15892265ea07692f33aebcb7001eb467acecb0a9b2c33ca7465e8be6180ab7659260926cbfe24084d9000854162bf7781777fc1183c93f79c4096b8bddb9362e25c750a27b7c", 0xf2}, {&(0x7f0000000540)="6f9815bb73162ff82800a3ec3bc5846f460ffcf0c06580bfa45bfe6cba8184bb559a7860dbc051beb9a8ce6a447c79e63ab43bc97286203631cf859cb616ec6752e5cfc9d4d2276b659100144a3ffa06021b6a7301", 0x55}, {&(0x7f00000000c0)='&', 0x1}, {&(0x7f00000005c0)="cebbd5fe736d037dec34ec777dad1800a63083eb14796e376aa8ee3e0ad165294bdaa52bf9312d351a2ee250d6f04d4c075db8f17c6deaef3811f9e8a724e65b9724df52d94290127b5c4bb9906cfaabb08d5e5f1c73147df4aec92a04f902dd0fa32b8405441f6640d94ecd1673fe0065dca740fd1cfe77c4a6f41465e731adc7d983e0ee34b268c67a1bdb60ea7a2260dfa7054a78b34e1f076e73ef4176c7cf29abdda5c4ff465439b6e6ce27b1226d5e718234db7e4032a4b089ce63b342b849ef7aca383cf7e817cc8c37b93e4f57c0d3bb811056e8a856d9b593fbaabd4ee7f1f2d68f8c2212a47c58932774716e60832d9981c0", 0xf7}], 0x8, &(0x7f0000000740)=[@dstopts={{0x40, 0x29, 0x37, {0x2e, 0x4, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0xfd, 0xff, [0x4]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}], 0x40}, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6}, 0x10) 13:12:39 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:12:39 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 28) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) [ 2035.866675] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11157 comm=syz-executor.5 [ 2035.883626] device syz_tun entered promiscuous mode 13:12:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010500190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2035.888522] device syz_tun left promiscuous mode [ 2035.972547] FAULT_INJECTION: forcing a failure. [ 2035.972547] name failslab, interval 1, probability 0, space 0, times 0 [ 2035.975173] CPU: 1 PID: 11165 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2035.976745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2035.978535] Call Trace: [ 2035.979136] dump_stack+0x107/0x167 [ 2035.979991] should_fail.cold+0x5/0xa [ 2035.980831] ? create_object.isra.0+0x3a/0xa30 [ 2035.982007] should_failslab+0x5/0x20 [ 2035.983008] kmem_cache_alloc+0x5b/0x310 [ 2035.983985] create_object.isra.0+0x3a/0xa30 [ 2035.985114] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2035.986447] kmem_cache_alloc_trace+0x151/0x320 [ 2035.987673] io_uring_alloc_task_context+0x99/0x6a0 [ 2035.988901] ? io_import_iovec+0x1120/0x1120 [ 2035.990026] ? lock_downgrade+0x6d0/0x6d0 [ 2035.991097] ? do_raw_spin_lock+0x121/0x260 [ 2035.992203] ? rwlock_bug.part.0+0x90/0x90 [ 2035.993150] __io_uring_add_tctx_node+0x2c6/0x520 [ 2035.994200] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2035.995326] ? alloc_fd+0x2e7/0x670 [ 2035.996110] io_uring_setup+0x1fbb/0x2980 [ 2035.997173] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2035.998271] ? wait_for_completion_io+0x270/0x270 [ 2035.999447] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2036.000578] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2036.001701] do_syscall_64+0x33/0x40 [ 2036.002521] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2036.003804] RIP: 0033:0x7fbb28dd6b19 [ 2036.004618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2036.008537] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2036.010195] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2036.011737] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2036.013238] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2036.014776] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2036.016315] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:12:53 executing program 3: ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0xd5a6, 0x4e0000) r2 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f00000003c0)='-\xfcx{\xe6\xac\xc8\xdf\x8e;\xb4Wy\xbea\xac2@\xa7\\\x98\x1f\x9d\x00\x00\x00', 0x0) fsopen(&(0x7f0000000040)='ubifs\x00', 0x1) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000180)=0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766004508cd2cf99e6364", @ANYRESHEX=r2, @ANYBLOB=',cache=mmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,loose,fscache,access=', @ANYRESDEC=0xee01, @ANYBLOB=',euid<', @ANYRESDEC=0xee01, @ANYBLOB=',rootcontext=unconfined_u,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',smackfshat=netpci0\x00,appraise_type=imasig,\x00']) dup(r1) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000300)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x14, 0x1a, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 13:12:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x12000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:12:53 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:12:53 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 29) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:12:53 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) 13:12:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010600190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:12:53 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x24, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x0, 0x9, "c0026ae74042a2"}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:12:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) [ 2049.798157] FAULT_INJECTION: forcing a failure. [ 2049.798157] name failslab, interval 1, probability 0, space 0, times 0 [ 2049.800710] CPU: 1 PID: 11187 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2049.802212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2049.803959] Call Trace: [ 2049.804527] dump_stack+0x107/0x167 [ 2049.805311] should_fail.cold+0x5/0xa [ 2049.806131] ? create_object.isra.0+0x3a/0xa30 [ 2049.807112] should_failslab+0x5/0x20 [ 2049.807939] kmem_cache_alloc+0x5b/0x310 [ 2049.808817] create_object.isra.0+0x3a/0xa30 [ 2049.809777] kmemleak_alloc_percpu+0xa0/0x100 [ 2049.810748] pcpu_alloc+0x4e2/0x1240 [ 2049.811583] __percpu_counter_init+0x10d/0x2d0 [ 2049.812584] io_uring_alloc_task_context+0xcc/0x6a0 [ 2049.813653] ? io_import_iovec+0x1120/0x1120 [ 2049.814613] ? lock_downgrade+0x6d0/0x6d0 [ 2049.815512] ? do_raw_spin_lock+0x121/0x260 [ 2049.816450] ? rwlock_bug.part.0+0x90/0x90 [ 2049.817377] __io_uring_add_tctx_node+0x2c6/0x520 [ 2049.818422] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2049.819571] ? alloc_fd+0x2e7/0x670 [ 2049.820375] io_uring_setup+0x1fbb/0x2980 [ 2049.821284] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2049.822378] ? wait_for_completion_io+0x270/0x270 [ 2049.823462] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2049.824586] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2049.825691] do_syscall_64+0x33/0x40 [ 2049.826507] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2049.827627] RIP: 0033:0x7fbb28dd6b19 [ 2049.828441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2049.832432] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2049.834073] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2049.835624] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2049.837161] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2049.838705] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2049.840243] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2049.865381] device syz_tun entered promiscuous mode [ 2049.866715] device syz_tun left promiscuous mode [ 2049.871572] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11194 comm=syz-executor.5 13:12:53 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8000}, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB="180008005200080000004a0081de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f309583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b000008000c000000000008000b0000000000050019000000000008001f00", @ANYRES32=0x0, @ANYBLOB], 0x138}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6}, 0x10) 13:12:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x13000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:12:53 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 30) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:12:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010700190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2049.978400] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. 13:12:53 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 13:12:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfff}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}]}, 0x3c}}, 0x800) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x398a, &(0x7f0000000080)={0x0, 0xc762, 0x0, 0x1, 0x79}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) pwrite64(r5, &(0x7f0000000140)="afc9", 0x2, 0xffffff) ftruncate(r5, 0x91) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x18, 0x16, 0xc21, 0x0, 0x0, {0xa, 0x0, 0x300}, [@generic="9f"]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x2}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) syz_io_uring_submit(r2, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r5, &(0x7f0000000200)={0x484402, 0x4, 0x18}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r10}}, 0x200) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7d1c9af8cb496d42, 0x50, r5, 0x10000000) syz_io_uring_submit(r3, r11, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x1, &(0x7f0000000300)="072a5243639778bb6e9f877e6d8fdadb824d8fc6ac47529492390fb62d9b44ac439e5d31249a995dd7c13150f774adb37d4eec357628c996c2", 0xfffff800, 0x0, 0x1, {0x3, r10}}, 0x400) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) 13:12:53 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x24, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x0, 0x9, "c0026ae74042a2"}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2050.050281] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2050.053781] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11207 comm=syz-executor.5 13:12:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x14000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) [ 2050.213767] FAULT_INJECTION: forcing a failure. [ 2050.213767] name failslab, interval 1, probability 0, space 0, times 0 [ 2050.217040] CPU: 1 PID: 11220 Comm: syz-executor.7 Not tainted 5.10.242 #1 13:12:53 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) [ 2050.218717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2050.220661] Call Trace: [ 2050.221225] dump_stack+0x107/0x167 [ 2050.222164] should_fail.cold+0x5/0xa [ 2050.222981] ? create_object.isra.0+0x3a/0xa30 sendmmsg$inet6(r1, &(0x7f0000004340)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x2, @mcast2, 0x734}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000000180)="1d5537e4e07dcc7f3739ff21d597b30fb41c48c94cd83030a63b4617fd949b2e43ca34a45aed8209f40aafea5d2f090ea1ac80b803fb00cca3ea8c4f178dca42c4e5fa2937a2cc33dc631f6b8e763bf9b7c296070afa7d6046a5aeab45bd3cbe22509f302e796a2fb7aa803a51edc96fce7f69fda267ed28ffdc50d1309ab107d7155d3cb84750376b987e14b78785e71dd2af72ee806764fb94ef6f62635310c2412acfa124de7a", 0xa8}, {&(0x7f00000000c0)="807fbb944b2ccdc49028f1249ce3d3265737ca224e4528c5670fe87b2e56a95ba95a36b148fae1e73d", 0x29}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="ec2ea6329b26a2d15ee10ad6a14b468f5c50258030b5ef8010a88193f39f9ab356f00042579958333b4b0354724b5fd41c3759c5dc49967a78f4e11b203696ae0b31ac0fd06454895701c5afd267d1bb26ed761df475ed11c3b4790ead180d14af7034872f34237b16d6133cb48c76a765e77fd6af116a262f62a9564c37bf5e", 0x80}, {&(0x7f00000012c0)="55fceda15246572496f3abebe9591a7ce83e9f020386b47bfacd9db2ddca32765d6a3dc651bc5e908cb02b48f93a228046deb604ad2c95c6a04b54a3f9ce145dd7327c23a6cf8dd55a0ead0ae8633c41e70fdb8e66e243b3e130822c109d51239132cfb69448c36fc1bc8bd25ef0e422d1070952d711400a6603dac51b7a1ab8bcc52dd9f6a3b94bc7745ed96b9bfc25ee1841467df86f2a35b9eb6b96ab22509d6fd165fa25", 0xa6}, {&(0x7f0000001380)="6834c30ca9a4000070254783f0339c997399517dfa508e54d364b8d24463205360e11c6efb593093ad9ddfa6b3512917fc19513abcc72882dd22fe26c221a04e27c8347a0d492d582c59cc4946e1f451b6fa8850fcde8a5551e653ba3733ee359c7c48c1c1dd98cb746d05529dfd50eae65fd0ac77488dec31cdb9f010e120dc1d78dfa688b6cef149090f79639d1146d7ed29e96abef3", 0x97}, {&(0x7f0000001440)="7ad98c52624fcbaab1f8729901e43c2e47ea9683f9f69b48004d2cf5a0043929b1b668c28376a1c0dd34be71f1a3c43c2a4cad24ca17b1d27dd4fdbf7a5cc829bf3902232cce11770160f9ade10c99fe808760657fd66520b6677b35e53643e7aa523277672df5a6d2197df31e2949ebdb4d798b7616fc0c066438eeb11a6f010c8028d9a4796db9ba2f08d54c347d194d84c2a97122a40b61089da28bccb9506e3e87bd27ca6242a8ae8ae2475838cca30fcf44b593edc27b8b6b0d8c85f1", 0xbf}, {&(0x7f0000001500)="954935679d16cfa4", 0x8}, {&(0x7f0000001540)="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", 0x1000}], 0x9, &(0x7f0000002600)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x1d1, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x81}, @ra={0x5, 0x2, 0x5}]}}}], 0x58}}, {{&(0x7f0000002680)={0xa, 0x4e23, 0x8001, @remote, 0x2}, 0x1c, &(0x7f0000002a00)=[{&(0x7f00000026c0)="73b27c474a96d1f175b758451c28fc4e69b81426b09a6cd0391a164237ec5f28ec0cc805270a21f7e0f9f804a2f55b279dd4e6c69a9d5180afdec64d5c2626c927151e4a8d34cbce37035e075e57312cf6f92a71f0fe05a9cdfeba952e828769bfc3bc395d382558bed730868cf7d522d4e882", 0x73}, {&(0x7f0000002740)="f4d09f7b62b8f9a1482f740330bf00db2c57409e2b92479ef2663821d46107b8fac6364d30ffcaa4adac8adae905bdaf121c6cb847d6ef65", 0x38}, {&(0x7f0000002780)="4963910048ef3601fa9990ef0023833f6b768e276e06f7942996b6c9eef7a1efc87cf593bb5c7660b10703510ccd5178c44365716e38fb854e39b3766cbf19bc102cab102ea9cd4fab8db24799d0daf12acff45b3144132cf8b12c5a105a07a8b77a578726dd9ea016654f23cb56d12f2f7d9d01d05c7d1ea9ae8fbfe6094806b878", 0x82}, {&(0x7f0000002840)="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", 0xfe}, {&(0x7f0000002940)="06f7367dad481af2879381dadf56a90cdd25c14486ddef3f9c062185ffc0074b1c69a492d9b513c8b1c19da555cb6d0643589480d9646b5518b8ea49fb4f749c17bc273873065fda727c96b50b437ef8a4e876b1956706d83b53", 0x5a}, {&(0x7f00000029c0)="d4ca26e599e3bd77eb7bc87b0de337b7327d75a233e0a429a6f24e1e7b23a45bc8b30b7d730107e8eeffffea0bc9419c2f5b2746409e77d859b33e28eb05", 0x3e}], 0x6, &(0x7f0000002a80)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x2b, 0x2, 0x2, 0x40, 0x0, [@local]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x40}}, {{&(0x7f0000002ac0)={0xa, 0x4e20, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xeae}, 0x1c, &(0x7f0000003140)=[{&(0x7f0000002b00)="804f2261f2a1daa815ece4c0f024b509763f5834f29363a61fff079dc9e662663bc9808df5e0a4f07bbe03bd178bd7d01bae7b737aa00cb32f149e8b8268b9e05530e9f3190734af97bf2cea0dff765c89b2748b20adca", 0x57}, {&(0x7f0000002b80)="16e031041a77141bd1ece9101a71693bf52d7ba80ca659bee3a3a4ba3c854836874bcbacf2bbc06bb7f75a0fa7e02af477a00af2d3c5abebe30b723f6a1086e8be2c4d1659a768509459cc2989eada1818d4cc001fb1ddef1c133154f22441c6d8ad27a5551c73af1a079a746fcd99ef029e9ef34aa6f333112389f73242088f3c1b4413c8442be6459c22393687078984fa65a3b9f68b6ef6be511eda24eeac08e58a3d1325e992bb552dba36616cf4e7d736348b6f48cdb1007d46a45d861591fe160d74d399a2824ec798efb92edc5b64ba77ec", 0xd5}, {&(0x7f0000002c80)="21e65277000fc79d94a7d65815f6ade99abc1b547b134fd912ad716d30c12cc7bdea", 0x22}, {&(0x7f0000002cc0)="be0257686168157c1b23cea4e46b876153a93b30f64a02164d41d721baefeac35c7e9398248deb12b31e7c2bb65fdf250ebd624ab70825b3e9f13e1800124c973a6105d4cd4916d0f987ef72c1fab1db70320ce87e339832c34cfa294a6c94db4a88806de442d24478455ec8807e876cab0f8bc12822c4bc1244ac23216674e6eb644efb461c9698321ca5c8792a6132852daece10e66bf86227e95e3018eab4436b3f40b778db46edd630989cb09f3c56489308d09896ba8627f17baa542ca4422aae9117335d7acb0dc0a60bb3bb6f906229", 0xd3}, {&(0x7f0000002dc0)="3dc93f54e1c6668d89b34e", 0xb}, {&(0x7f0000002e00)="93ee2f658f86d050183e7d32414dffc62145b4cfec468a802aab70b93004f141bfcf72c5b1104e29af8b85e7e9abe61859861d1ef35b7c029678cf2d8152b1d8f9ddac695217c165179b94da3f1b8251afb064bb2e619af0a5566c9354235beecc20c206081adb32320747fb2ffa8eefe2cdc07359abfb7b926ec5e3a24648ec1a834e1046de1ee7125b870544867dade98c4e799d3629026d3a", 0x9a}, {&(0x7f0000002ec0)="e297d68cd5147f7d7efca47d300e5511dfdbee0638f05c441e00b03ab89472b96eebdb1b26401361b2bc422a5aa1d48f5c84130db7988c24dcf344c9f1a3c47e1c20402f76eeb32e3642f8151ec4fa3d312d4c2f0b7e036eff1fe32f02e5fe77209f45f881d481f526997ee89fc310bbd7c470ff37a825f1fe7d8fa13619a120ee55e4515f58dab97f02dfaee4e2d22625ecc977f45be20d7fc24ea6f630e26efe3ce52e66faf1b795ddcaca2f67895c5eae1593", 0xb4}, {&(0x7f0000002f80)="3b7439a8b78e9ba4a1ddaf292708c55b6917fb570cf9d280e22d35085f39518332d0d7c6dc71db05fe8663f058f749dc972850dfe61ad0198ddd763e371d9a9b511effd8d7fc1ee484d81ea23bd59f01981a62e0614c60c9c9172c4fdfb289fe71bc96fcb7cac849b616b4a9381d08e9e33390c1abec9405a4c5576a0fb45903605cdc07afbf35ec5c0fca", 0x8b}, {&(0x7f0000003040)="fb10d282a573c2505d4ed409de4962f43300f7db5a635f8a04af5e8c2d7369c6a4b12014c7980e91356b2c25efaf2c647a36a9de84ca96d354077cfa187be9da7d96fc21971a3f417270e9b4f6267de819df01aafaac34da8924fdd4b604fcd56f26f0ce25cd026265c14598b2abf06c303a45985b435853e2b6c9d2f84204c2d659120cc551e734c1ddf1a0a3d16fdcd7b2a2f49826027cb30284d36ff5d8d2fe039481f987526259c5b0e59fbc7676153d37132be657b647516b3eb6701ce486ecb3138316736bd75eff0629ce52a091ce63320a0736cddfb4ec2405f86fa1", 0xe0}], 0x9, &(0x7f0000003200)=[@dontfrag={{0x14, 0x29, 0x3e, 0x40}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x34}, r2}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x625f}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @rthdr={{0x58, 0x29, 0x39, {0x21, 0x8, 0x1, 0x9, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x7c, 0x0}]}}}, @rthdrdstopts={{0x80, 0x29, 0x37, {0x84, 0xc, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @pad1, @ra={0x5, 0x2, 0xffff}, @generic={0x1f, 0x48, "1643a30fcbf9d4c7562a21e60f7bd9de250fb255d0e861dce2e4deab2cc4ee2561df1744e31c649d8d8d43f779ade7c7578f9b678701d5e2cb4785f530c8b79131a5d4460ae54fd9"}]}}}], 0x188}}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f00000033c0)="b40c8256d0a07d8344c7c4edcace237167ccd215def516bf40a3b01a5449e1e570c260ecbb3aa50f0f793baf3050d618fbfae6", 0x33}], 0x1}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003440)="e2212d6532c024eb62ef14cb3ae003c47ea6355f8dc0d5278be5be953d008a5d14c22bea8e87f816bee1561aeb811a4951907cf88895a5f1b4a9dce65f0e4626295cbbbf1da875e56c16f037a25cb6972d43e3b350b443071b5fe371efe5a8a8b431820fbf2f6fd837c46dd06e5a2405f32e6863052e913924186228b16831dbfa6b54571acf6c932370a6029ad0a83353849d8aadb32cf9f2eda7c0e706548d01d2940a0fa6fb9704e6aaad183724e098a6092cd2f743e4e8efaadaa9fa71bf96c2", 0xc2}, {&(0x7f0000003540)="4aa8b83c2b520921930a4cadde7599bc585aa4dba824d203e2458a607798bb3a53abad652e583649f8750976a85c580bb73e82ce263da36f66ec0119df809f2daeca9eef7f848c93b40cd3965116063731c3b86d5c77672d93a5b4a91d63acd5a2fd0c3ab7cc164c8452f69bca3347ce1574ac2941f8ca86c3df1a507b5fcf9819630824beb113b43ec3324a2e552a60d73a8d335bdff4356953fadc33d95aace017d8e6ca8213e2bf1cf39467a3706c83cf50567bb3cf0633d397dfb0e15d085fc8d936a92b11a50e7b6247dad673ce8e80eb87a3483b707be6386dce", 0xdd}, {&(0x7f0000003640)="d09cfb1bb7f0f863ebf52ea502dd6b768782e4fd2595cee6c01b88e0a6cb3cae3999b6d44e4fb5bdafebffc98ae80a6d7992befce03b1d02f65a6077cec48414953780b48dfef5bb64bf286e3e22c47f28790d8d7c733c52ad960397b9a0d606f37f9612698dc5a44448b8499fd4b168e43ffc44c3c68f71e28d34443338003aec3d460f3dfcf4ea725b69a174eb861d3d6fd02118ace2d68c280210ef13142d3ed7d598e57c9dd9963c1ac981cc35e794144a67add5b21c0201a654789487eb85c29d7d482619d4392dd1a01192671a8108a3bda560c0146d1c30b5c05132f8659a8d31ad", 0xe5}, {&(0x7f0000003740)="207d25285ca86af3ad517c83128f8b1feb34a4be0299f41b4374ec0177dbeb972612147c518109fe28d7b85bfe29e0de0b93aa6027119c9be660baa96af504290ac60eb64909d16b4073becf3776001e", 0x50}, {&(0x7f00000037c0)="6a1de103dada0cb52ea3e3d6eeab29aee515597138408e296e5b4de5fb0ff2c1fa0249326b7bc07ef337298b74768d2ea9a0e672ce4ad76885bc4436c01504de7bb7a1b2fb109d7c2896cce7237c2f3b12b9ccf459959018ee331000d730fcbbe03a2f26dac9ebd4ff7a4ff5db4c969eab6d471fcc6cc1a5fbd688eb04c69855fa4a21f9e3b23203c9ec39696728d597f86b7ecbb8af3d2ff9f4af54ad79eed7ef04be680a188e425a89bcad456763b7fbe90820476c11c3cf29771c622f3acea0872c408456b5753b342644cae31e7ed3142cf9cb56d1a848e06b1054eb20ee4756ab2eea", 0xe5}, {&(0x7f00000038c0)="83dd120ba0faff271103987e206a36b6355c3afc38fca2a5bf98a711313419a967fb481c0e9951d2c04191b0925bc5945977de5351d4e3977c9d5f3e42d53caae15f54b1d0f13e97c3d76ebfbaed5fbea488060f4c8ffe6ed475dd94ac6800abb6d57202e6ab15cd6963c20f2c8dce995c63b4cede7edca609d73ee189901545a6ed28cb6497586bfa03ffaf4f54d6785072b7a2a371502d584b444e124b03d40f899c2d304d7fe1f5cffb89dd23af77c68f7bab4cf55c1aca316cb9b7f6", 0xbe}, {&(0x7f0000003980)="f6e999c609e38f4bdb8bdba579e8b05b076c92396d6a74a60ffd355e1e41aaa94cc751b39e4a044f6dbc14d498a11d2211e74246cb8a72f7679b177f8ef34ff06efa404a82bdc100dabdc5b0f2b9be63e39e2679bd2bb5e8633590e4baf86863cbfc8a1db522ca0267029abf82", 0x6d}, {&(0x7f0000003a00)="f7866807433d10d45936adf40748c70b3462767963e960e8fea65d671a8d97a80a3f32bd649b9ebfd57409a51aa708299a8c2f1a129eb5b7de4749d41f26d0e22dd690f1719180eb4b669dea3943fd3d3f3aa27a072cc2bb6349772218ba84a0f4d224db5758526e43356a2a0fd2c9b07afe2b1931a0face3ebe1298eab3889153c05c43342cfa999681f6997a9fd70d93779f277b306fd39726c54e480fe4807df6c0c9c3c4c4ca7a0165a4914de82baafd48ded00c15e2ee2ecaa1", 0xbc}], 0x8, &(0x7f0000003b40)=[@hopopts={{0x220, 0x29, 0x36, {0x8, 0x40, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x3, 0x9, [0x401, 0x5, 0x5, 0x8, 0x1]}}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x25, 0xf0, "837dfcf57ec891dbe75eba5884c3512ea887f175f7ecd1e23b504b26c2112400530203c5af90a87745b7619a5230b6932c907467d81075ba16e02cbd8cada257549574dcd0dc656396c52cbdb85e4d5ef0787deec98dcb2b4ae529424352c17dfbf9f8afcd9c751c928c775e9ea95f1aa28c4c5fc39be3f4a5a31519ee1c2adc03f05889ce7752b78a4bbb189f746facd36a7a99966a5e0355a6085802965e5ca6ad836814fb3bc262551d04223a471279b056638db5d1a9485b57212ebfc7c92a50ba7b099e5be24da0b92efd6561263d4116a4f5d2c61d5f6819972de9144afa44c3767e63fa8508c644c8362db34a"}, @hao={0xc9, 0x10, @private0}, @pad1, @generic={0xd, 0xc6, "ef8f1bb5b2ca51f8511c369c26e29b3ea02815592c9afc055cd3300e437c20929219fdb824821cd699b979c018d391f615a0ffa2b890391e5c520b7359dd822e263bf313e18f9d57727410d8e838506d4434a861eeb37b4e87bbc550f9affa2e8a858452935128675318abf82aef004077d9d1d8920cef60be87a7067809a6d9f66ba623266307b0b7aef19ee5a80aff92f711dfe6a55d59cd5753b7f5a78aa16979983494471899d8eee1c5f990e7c766523b7565dc5d4ac7dd9e91899cc910e82ea9a4cd23"}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x84, 0x10, 0x3, 0x40, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @local, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x89}}}], 0x2d0}}, {{&(0x7f0000003e40)={0xa, 0x4e23, 0x8, @local, 0x8001}, 0x1c, &(0x7f0000003fc0)=[{&(0x7f0000003e80)="3fc24972c993cb22114e3b371cb7426f5a84f7706c127e11659355e42ece35d61090bfa90cff11d9ea6dd7ea25f11a5b67c0a2df78ea797818fffb2db5afd01f51178ff4a74191741bd496ed717eea6b26bc045320935d5a06", 0x59}, {&(0x7f0000003f00)="85dbdcf75ba7a4136216b71ab644307295532e35a4e21abe8a5ceb9a6bddbef240b464dc6ecd01dc3afcf326f8401dd6fb8cabcb234f48e23da1cc9e7905ed8bde2e049771a4a5c97e71cf9878778bb46ec2358c8a7c2d82fba0", 0x5a}, {&(0x7f0000003f80)="2643c4fcd35e894e59c7423564af7f1c3e8a66e0c20e7234f13446247c34295c4bda", 0x22}], 0x3, &(0x7f0000004000)=[@hoplimit={{0x14, 0x29, 0x34, 0x93d2}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x6, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x80000000}}, @hopopts={{0x20, 0x29, 0x36, {0x8, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x81}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x48000000}}], 0x88}}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f00000040c0)="91395373ab377cfd0b475d240d4f4968", 0x10}], 0x1, &(0x7f0000004140)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x473ceacf}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x605}}, @rthdrdstopts={{0xb0, 0x29, 0x37, {0x29, 0x12, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x3f}, @ra={0x5, 0x2, 0xfff7}, @generic={0x9, 0x74, "b1191b97b9de7f084ca1ab92086e32ee7e84c7c9108458495b1f61e9d17d6aaff32aa120d9b38737344226dd74979395cdbe32b78d35b400daf13df9839b2c7149c3b0f1f751ef4ab25093f44fbe3d5faef88b70261576584902224cc822506d1f1555d83bcdc11fc3451cd38ebeb51cb72a8b63"}, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x7f, [0x9]}}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x84, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}}}, @rthdrdstopts={{0xc8, 0x29, 0x37, {0xc, 0x15, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x9a, "7f58c7b95d53856ed95bf436d299d5ce8e166945af80c18fdf72e6d2dbcbb73d25239f757b997072245add2aeab10bac268275219deaa776f13919145378509df05198558211aef91416d896376eb47954828f1c1de13d0e89d39e4b1162db07248f920b7b715cde26a5eb24abced05d0714627678b8b429a36d0187d3ac52fda0201518f2671e73c3bbeb4299191cbb7c41742a16ac2d9f558d"}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x6392}]}}}], 0x1e0}}], 0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) [ 2050.224036] should_failslab+0x5/0x20 [ 2050.224905] kmem_cache_alloc+0x5b/0x310 [ 2050.225775] create_object.isra.0+0x3a/0xa30 [ 2050.226710] kmemleak_alloc_percpu+0xa0/0x100 [ 2050.227679] pcpu_alloc+0x4e2/0x1240 [ 2050.228478] __percpu_counter_init+0x10d/0x2d0 [ 2050.229455] io_uring_alloc_task_context+0xcc/0x6a0 [ 2050.230510] ? io_import_iovec+0x1120/0x1120 [ 2050.231447] ? lock_downgrade+0x6d0/0x6d0 [ 2050.232323] ? do_raw_spin_lock+0x121/0x260 [ 2050.233228] ? rwlock_bug.part.0+0x90/0x90 [ 2050.234129] __io_uring_add_tctx_node+0x2c6/0x520 [ 2050.235134] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2050.236257] ? alloc_fd+0x2e7/0x670 [ 2050.237052] io_uring_setup+0x1fbb/0x2980 [ 2050.237954] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2050.239058] ? wait_for_completion_io+0x270/0x270 [ 2050.240146] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2050.241252] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2050.242379] do_syscall_64+0x33/0x40 [ 2050.243196] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2050.244283] RIP: 0033:0x7fbb28dd6b19 [ 2050.245090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2050.249098] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2050.250676] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2050.252182] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2050.253671] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2050.255228] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2050.256763] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:12:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010800190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2050.355218] device syz_tun entered promiscuous mode [ 2050.367947] device syz_tun left promiscuous mode [ 2050.387741] device syz_tun entered promiscuous mode [ 2050.394554] device syz_tun left promiscuous mode [ 2050.398763] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11231 comm=syz-executor.5 13:13:07 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 31) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:13:07 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:13:07 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 13:13:07 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x101000, 0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x30}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x6}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4689441eb64275405f0a06b0ff90ace9ccfe9e5dd5d17d23"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d68a4b04350fb108f9573749bfc68c2c53aeda2d60e5ba81"}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x40) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x60, 0x64, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local, {[@timestamp_addr={0x44, 0x4, 0xda}, @lsrr={0x83, 0x7, 0xf6, [@multicast2]}, @timestamp={0x44, 0x4, 0xbe, 0x0, 0x7}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, {[@nop, @exp_fastopen={0xfe, 0x12, 0xf989, "28cae2a833af0dbd97c54219ac6f"}, @exp_smc={0xfe, 0x6}, @eol, @mptcp=@mp_join={0x1e, 0x3, 0x7}, @exp_fastopen={0xfe, 0x6, 0xf989, "f2d3"}, @eol, @eol]}}}}}}}, 0x0) 13:13:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x15000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:13:07 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x24, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x0, 0x9, "c0026ae74042a2"}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:13:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010900190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:13:07 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r1, 0x3, 0x6, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000100)=0x3f, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x18, 0x16, 0xc21, 0x0, 0x0, {0xa, 0x0, 0x300}, [@generic="9f"]}, 0x18}}, 0x0) r4 = getuid() sendmsg$nl_generic(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x134, 0x3c, 0x0, 0x70bd27, 0x25dfdbfe, {0x13}, [@generic="d0900d4e11b6863beb29c9572530ca3b9579ee3e539e7598414d26c5e3a4581f9c03a9881a564bb52eb897720fc9ca90ec64ed89c027a583d2ea23bdc793758d3d632ee99e4ebf8ef52a9618a3fc519655017b", @typed={0xc2, 0x1e, 0x0, 0x0, @binary="bc291fcff6804e53ea79bc247555f18e93bb07ab5a90544f2c20bbf05ab9820d905cfff2dba8d906607cb8986c71f02d85da9aaa4dd624116893c0abcedf42d7dd6e9f76a58fdd876e928d116364f5f280dd2093b9a73498b79366b6a4bdda5d910f99bfd2e576af0c02a5e8bae0db25ab06251fffce5b0d99af60e0b6d51c6804fd6c2411a2d395568d2bef127835ee51174af0717f5225ad3aab7a1c073126065edd523c5211f9008034aa091fa5f8d195013cb36eb3d22f88c9ed0c2c"}, @typed={0x8, 0x7b, 0x0, 0x0, @uid=r4}]}, 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) [ 2063.633662] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11245 comm=syz-executor.5 [ 2063.644189] FAULT_INJECTION: forcing a failure. [ 2063.644189] name failslab, interval 1, probability 0, space 0, times 0 [ 2063.647084] CPU: 0 PID: 11246 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2063.648637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2063.650413] Call Trace: [ 2063.651030] dump_stack+0x107/0x167 [ 2063.651892] should_fail.cold+0x5/0xa [ 2063.652783] ? io_uring_alloc_task_context+0x4a3/0x6a0 13:13:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x16000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) [ 2063.653903] should_failslab+0x5/0x20 [ 2063.654866] kmem_cache_alloc_trace+0x55/0x320 [ 2063.655947] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2063.657127] ? io_import_iovec+0x1120/0x1120 [ 2063.658149] ? lock_downgrade+0x6d0/0x6d0 [ 2063.659113] ? do_raw_spin_lock+0x121/0x260 [ 2063.660121] ? rwlock_bug.part.0+0x90/0x90 [ 2063.661113] __io_uring_add_tctx_node+0x2c6/0x520 [ 2063.662231] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2063.663456] ? alloc_fd+0x2e7/0x670 [ 2063.664315] io_uring_setup+0x1fbb/0x2980 [ 2063.665292] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2063.666464] ? wait_for_completion_io+0x270/0x270 [ 2063.667621] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2063.668841] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2063.670039] do_syscall_64+0x33/0x40 [ 2063.670905] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2063.672104] RIP: 0033:0x7fbb28dd6b19 [ 2063.672968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2063.677233] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2063.679001] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2063.680665] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2063.682321] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2063.683987] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2063.685639] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2063.692932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=11248 comm=syz-executor.0 [ 2063.713287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=11253 comm=syz-executor.0 13:13:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010f00190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:13:07 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 32) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:13:07 executing program 0: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x24508) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000070000000000080000002607b8ed5f850000", @ANYRES32=r3, @ANYBLOB], 0x20}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6, @multicast}, 0x10) 13:13:07 executing program 3: syz_emit_ethernet(0x96, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "040565", 0x60, 0x6, 0x0, @loopback, @mcast2, {[], {{0x4e21, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xf, 0xf989, "666207f5c42b3e5ebbb712"}, @nop, @generic={0x0, 0x7, "3df75f8c35"}, @timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x13, 0xf989, "f99f2afdb19f646aa36a8370f68de8"}, @window={0x3, 0x3}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x7, 0x0, [0x0]}]}}}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x4) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000400170280008000046b0bff07000186dd0610000affffffffffffff0200000000000000000000000000010180c2000000ff010000000000000000000000000001"], 0x42) 13:13:07 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x14, 0x4, 0x1, 0x1, 0x50, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2063.881392] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11261 comm=syz-executor.5 [ 2063.933625] FAULT_INJECTION: forcing a failure. [ 2063.933625] name failslab, interval 1, probability 0, space 0, times 0 [ 2063.934972] CPU: 1 PID: 11267 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2063.935776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2063.936718] Call Trace: [ 2063.937025] dump_stack+0x107/0x167 [ 2063.937439] should_fail.cold+0x5/0xa [ 2063.937880] ? create_object.isra.0+0x3a/0xa30 [ 2063.938400] should_failslab+0x5/0x20 [ 2063.938833] kmem_cache_alloc+0x5b/0x310 [ 2063.939300] create_object.isra.0+0x3a/0xa30 [ 2063.939813] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2063.940405] kmem_cache_alloc_trace+0x151/0x320 [ 2063.940938] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2063.941517] ? io_import_iovec+0x1120/0x1120 [ 2063.942021] ? lock_downgrade+0x6d0/0x6d0 [ 2063.942492] ? do_raw_spin_lock+0x121/0x260 [ 2063.942984] ? rwlock_bug.part.0+0x90/0x90 [ 2063.943487] __io_uring_add_tctx_node+0x2c6/0x520 [ 2063.944037] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2063.944630] ? alloc_fd+0x2e7/0x670 [ 2063.945057] io_uring_setup+0x1fbb/0x2980 [ 2063.945532] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2063.946112] ? wait_for_completion_io+0x270/0x270 [ 2063.946679] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2063.947282] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2063.947898] do_syscall_64+0x33/0x40 [ 2063.948335] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2063.948932] RIP: 0033:0x7fbb28dd6b19 [ 2063.949367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2063.951506] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2063.952392] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2063.953231] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2063.954066] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2063.954898] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2063.955747] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:13:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x17000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:13:21 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:13:21 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 13:13:21 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 33) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:13:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38012f00190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:13:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_io_uring_complete(0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) execveat(r0, 0x0, &(0x7f0000000280)=[&(0x7f0000000900)='\x00\xdfn\x04\x02oA\x13\xe0\xac\xb6\xee\xa1\x0e\xb0&0\xfc.iOw\xe3\xbb\x01\xb7D \x05\xf9\x05\x8c\xed\x16D\v\xa8c|)\xea\x1b%\xbd1D\xb6\x8e9\xa6|\x06B-\x905\x111!5\xaf\xddf\xf8\xd2b\x16\xec\xf8<\xd9\xbc\xf7-F\x80\x8a\xe9D|n*\x9fM\x1e\x80\xf02\x89^\x92\x1fY\xcbcN\xf1\x06\xe9\xdfy&\xbaX\x03\xbeD\xb6\xe2\xa4\x12v\xc4=?f\xf1g@l17\xbb\xc9\xc51\x83@M\x13\xa6\xe84\xb2\xe74*+\xc1\xab\x15G\xef<\a\x8d\x00zf\x88\xe5\x9d\\\xc8\xf9\xb3', &(0x7f00000009c0)='\x00\x1d\xb2O\x8b\x1b\x83\x1e\n\x13\x00\x00\xd9\xd0\x1c\x1cY\x8d\xca\xc6\f\x95\xdej_\x95_\xfc>;\x1fh\xb3\x91{9[\xc0\xc66\x9e\xb9\a\xcb\x06\xa0\xd7\xefvR\x85/\x05$\xecx\x8a\x9b\xc29\x8fc\\\xab8!\xe2\x03$z-U\xbcx\xea \xcb\x16\\\x1b\xe7U\xde\x88\xda\xad\xcfZ9`\x86\x18\xb8\xb7\xd2\xa2\xf0\xc0\x93L\xac7\x85\xc2jg^\xfe>eA<\xac\xe1\xd34Df\x02L:\x14WI\x10\xffe}J\xe3Y\xe5\xaf\xde\x9f\xcf\xfb\xa2'], &(0x7f0000000380)=[0x0, &(0x7f00000006c0)='\xa5\x19\xa3\x15\xe4fB|\x8e\xa6V\x8d[(\xb7\xa4\x06~\x01-Wl\xb2\x84Ax\xfb7W\x89\xd3[I\xc8\x8c%0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) 13:13:21 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x14, 0x4, 0x1, 0x1, 0x50, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2077.904813] FAULT_INJECTION: forcing a failure. [ 2077.904813] name failslab, interval 1, probability 0, space 0, times 0 [ 2077.907560] CPU: 0 PID: 11287 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2077.909112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2077.910864] Call Trace: [ 2077.911426] dump_stack+0x107/0x167 [ 2077.912216] should_fail.cold+0x5/0xa [ 2077.913021] ? io_wq_create+0xeb/0xc00 [ 2077.913843] should_failslab+0x5/0x20 [ 2077.914646] __kmalloc+0x72/0x390 [ 2077.915391] io_wq_create+0xeb/0xc00 [ 2077.916198] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2077.917274] ? io_import_iovec+0x1120/0x1120 [ 2077.918206] ? io_apoll_task_func+0x2d0/0x2d0 [ 2077.919151] ? __io_req_find_next+0x300/0x300 [ 2077.920107] ? do_raw_spin_lock+0x121/0x260 [ 2077.921019] ? rwlock_bug.part.0+0x90/0x90 [ 2077.921920] __io_uring_add_tctx_node+0x2c6/0x520 [ 2077.922946] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2077.924061] ? alloc_fd+0x2e7/0x670 [ 2077.924848] io_uring_setup+0x1fbb/0x2980 [ 2077.925734] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2077.926806] ? wait_for_completion_io+0x270/0x270 [ 2077.927865] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2077.928990] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2077.930084] do_syscall_64+0x33/0x40 [ 2077.930866] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2077.931948] RIP: 0033:0x7fbb28dd6b19 [ 2077.932730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2077.936618] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2077.938216] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2077.939734] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2077.941238] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2077.942741] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2077.944268] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:13:21 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 34) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) [ 2077.980760] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11292 comm=syz-executor.5 [ 2077.987564] device syz_tun entered promiscuous mode [ 2077.988978] device syz_tun left promiscuous mode [ 2077.998070] device syz_tun entered promiscuous mode [ 2077.999495] device syz_tun left promiscuous mode 13:13:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38014100190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:13:21 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x14, 0x4, 0x1, 0x1, 0x50, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x5, 0x4, "4aba"}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:13:21 executing program 0: sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80005000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_EXPECT_NAT={0x90, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40890}, 0x804) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) 13:13:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x18000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) [ 2078.153402] FAULT_INJECTION: forcing a failure. [ 2078.153402] name failslab, interval 1, probability 0, space 0, times 0 [ 2078.156090] CPU: 0 PID: 11299 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2078.157541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2078.159288] Call Trace: [ 2078.159872] dump_stack+0x107/0x167 [ 2078.160650] should_fail.cold+0x5/0xa [ 2078.161459] ? create_object.isra.0+0x3a/0xa30 [ 2078.162425] should_failslab+0x5/0x20 [ 2078.163229] kmem_cache_alloc+0x5b/0x310 [ 2078.164114] create_object.isra.0+0x3a/0xa30 [ 2078.165044] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2078.166119] __kmalloc+0x16e/0x390 [ 2078.166878] io_wq_create+0xeb/0xc00 [ 2078.167689] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2078.168765] ? io_import_iovec+0x1120/0x1120 [ 2078.169702] ? io_apoll_task_func+0x2d0/0x2d0 [ 2078.170656] ? __io_req_find_next+0x300/0x300 [ 2078.171617] ? do_raw_spin_lock+0x121/0x260 [ 2078.172532] ? rwlock_bug.part.0+0x90/0x90 [ 2078.173438] __io_uring_add_tctx_node+0x2c6/0x520 [ 2078.174461] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2078.175591] ? alloc_fd+0x2e7/0x670 [ 2078.176373] io_uring_setup+0x1fbb/0x2980 [ 2078.177261] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2078.178343] ? wait_for_completion_io+0x270/0x270 [ 2078.179393] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2078.180518] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2078.181611] do_syscall_64+0x33/0x40 [ 2078.182402] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2078.183489] RIP: 0033:0x7fbb28dd6b19 [ 2078.184290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2078.188186] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2078.189802] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2078.191310] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2078.192837] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2078.194356] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2078.195879] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:13:22 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 35) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) [ 2078.369538] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11309 comm=syz-executor.5 [ 2078.376184] device syz_tun entered promiscuous mode [ 2078.378466] device syz_tun left promiscuous mode [ 2078.402765] device syz_tun entered promiscuous mode 13:13:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38014800190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2078.423585] device syz_tun left promiscuous mode 13:13:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) [ 2078.474944] FAULT_INJECTION: forcing a failure. [ 2078.474944] name failslab, interval 1, probability 0, space 0, times 0 [ 2078.478292] CPU: 0 PID: 11314 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2078.479808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2078.481562] Call Trace: [ 2078.482133] dump_stack+0x107/0x167 [ 2078.482908] should_fail.cold+0x5/0xa [ 2078.483733] ? io_wq_create+0x6ef/0xc00 [ 2078.484581] should_failslab+0x5/0x20 [ 2078.485378] kmem_cache_alloc_node_trace+0x59/0x340 [ 2078.486450] io_wq_create+0x6ef/0xc00 [ 2078.487256] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2078.488343] ? io_import_iovec+0x1120/0x1120 [ 2078.489287] ? io_apoll_task_func+0x2d0/0x2d0 [ 2078.490241] ? __io_req_find_next+0x300/0x300 [ 2078.491188] ? do_raw_spin_lock+0x121/0x260 [ 2078.492103] ? rwlock_bug.part.0+0x90/0x90 [ 2078.493008] __io_uring_add_tctx_node+0x2c6/0x520 [ 2078.494027] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2078.495136] ? alloc_fd+0x2e7/0x670 [ 2078.495928] io_uring_setup+0x1fbb/0x2980 [ 2078.496815] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2078.497886] ? wait_for_completion_io+0x270/0x270 [ 2078.498937] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2078.500062] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2078.501168] do_syscall_64+0x33/0x40 [ 2078.501968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2078.503058] RIP: 0033:0x7fbb28dd6b19 [ 2078.503858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2078.507772] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2078.509388] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2078.510901] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2078.512426] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2078.513945] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2078.515462] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:13:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x105400, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f00000001c0)) sendmsg$nl_xfrm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="38010000190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB="180008005200080000004a0081de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bb5962b000008000c140000000008000b0000000000050019000000000008001f00ea99aebdbec94b9315d413f901abc8c00c9727048ad07f8cafb6d3d47902506de2f46b57eec8e6cbecaa9d04ca4f108b30d5f060ed3ab97b7f779920d616e64aac", @ANYRES32=0x0, @ANYBLOB], 0x138}}, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) [ 2078.708801] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2078.717197] device syz_tun entered promiscuous mode [ 2078.721345] device syz_tun left promiscuous mode [ 2078.745541] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. 13:13:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38014c00190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:13:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x19000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:13:38 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x20000003) clock_gettime(0x6, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) semtimedop(0xffffffffffffffff, &(0x7f0000000100)=[{0x1, 0x2, 0x800}, {0x4, 0x400, 0x1000}, {0x1, 0x800, 0x1800}, {0x4, 0x101, 0x1800}, {0x0, 0x7ff, 0x1000}, {0x2, 0x3, 0x1000}, {0x0, 0x6}], 0x7, &(0x7f0000000140)={0x0, 0x989680}) syz_io_uring_submit(r4, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r5}}, 0x6) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000140)=ANY=[]}, @devid=r8}) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x9, 0x2, 0x9, 0x3, 0x0, 0x1, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x6, 0x200, 0x7, 0x7, 0x9, 0xd73, 0x0, 0x0, 0x0, 0x1}, r6, 0x0, r7, 0x8) unshare(0x48020200) syz_io_uring_setup(0x3faa, &(0x7f0000003380)={0x0, 0x0, 0x2, 0x1, 0x174}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000003400)) 13:13:38 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 13:13:38 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 36) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:13:38 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) 13:13:38 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:13:38 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2094.848498] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11335 comm=syz-executor.5 [ 2094.877270] FAULT_INJECTION: forcing a failure. [ 2094.877270] name failslab, interval 1, probability 0, space 0, times 0 [ 2094.879799] CPU: 0 PID: 11337 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2094.881377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2094.883133] Call Trace: [ 2094.883708] dump_stack+0x107/0x167 [ 2094.884488] should_fail.cold+0x5/0xa [ 2094.885297] ? create_object.isra.0+0x3a/0xa30 [ 2094.886255] should_failslab+0x5/0x20 [ 2094.887054] kmem_cache_alloc+0x5b/0x310 [ 2094.887922] ? io_wq_create+0x114/0xc00 [ 2094.888766] create_object.isra.0+0x3a/0xa30 [ 2094.889695] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2094.890777] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2094.891884] io_wq_create+0x6ef/0xc00 [ 2094.892707] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2094.893781] ? io_import_iovec+0x1120/0x1120 [ 2094.894713] ? io_apoll_task_func+0x2d0/0x2d0 [ 2094.895655] ? __io_req_find_next+0x300/0x300 [ 2094.896612] ? do_raw_spin_lock+0x121/0x260 [ 2094.897525] ? rwlock_bug.part.0+0x90/0x90 [ 2094.898431] __io_uring_add_tctx_node+0x2c6/0x520 [ 2094.899452] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2094.900568] ? alloc_fd+0x2e7/0x670 [ 2094.901359] io_uring_setup+0x1fbb/0x2980 [ 2094.902262] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2094.903332] ? wait_for_completion_io+0x270/0x270 [ 2094.904391] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2094.905508] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2094.906601] do_syscall_64+0x33/0x40 [ 2094.907389] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2094.908486] RIP: 0033:0x7fbb28dd6b19 [ 2094.909277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2094.913188] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2094.914798] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2094.916319] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2094.917843] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2094.919348] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2094.920877] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:13:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x1a000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:13:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38016800190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:13:38 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 13:13:38 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x0, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2095.154672] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11355 comm=syz-executor.5 13:13:38 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 13:13:38 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x10) sendmmsg$sock(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="a4f600564adf873033c018750943a6eddebc012abbec216f89e5a00f0285c0196d9ec7ac3f01c1514c6130748554adfe5bc79a3fdeca44d8e649f9754016dd90bf22207c237a757890c0e63ef8fd453b8bcf7de83323a490940f3fab56379158a19b39e986b7dc2b0a1f2b8163d16bfa607399f6aa0cca5e7bf5c83b46253dc0d70c10f93025535522d0a19f10376fa6c02fc500031b5ff0744ba7110277733a83b0c61555aa06e5ddf65042a73631c87049485c78970913c6", 0xb9}, {&(0x7f0000000180)="5ea48d5bf24d5b863bdcdc8e68d36c6a44f37e0590a6e06a8ae27cefd62d3c183bf9dc812323a191eb37193ffa8cc6e68a781673d96d1c3cfb01a349b0b3ab3d58b83505df9bd2b92f4a2f1e79fb9e5068c8c6de871313486a7eba83d7ac7259044d24717b63dc86a38d74a1a45184ac48b5c9e01e4de4534dc274ec0b35e56064b35d9a025c2a7a0a7a4696", 0x8c}, {&(0x7f00000000c0)="ac7289d7dd12dfa119ed89f4b2244ca8f4aa39b83a87da4ec2cf54a353", 0x1d}, {&(0x7f0000000240)="e47156ce7dfc79bacb1805d306ae6f65c075e7c9740acc6fafbb98b162cdc725bc41521088af3399d63f237efe30de80914a2aa3b7cdba62b6c03f0c9e30c93ac0710dfa140ae052d70044ba1408367bfcd1cb49e1f0f456b7ff1cc3312954", 0x5f}, {&(0x7f00000002c0)="9230d628be8c9dd97be4297801812a280d3f121a64b9d96c35aa3d", 0x1b}, {&(0x7f0000000300)="41a20c786830d9f6750aee888721eef81dd5535fe15f830a20074a112f7985a30b2b9371b0855635f390453179cbb371cecd08cf7127ccabb375c80cd27b8bfb2b7c5b6d22e368e98e21f8e63014dababace53a7", 0x54}, {&(0x7f0000000380)="6b19489e530defe971f2a85d8b957c210a8692e10e32b94871aebf26427cd31235ecf975b928723cc1b237502697f7890409aff0c42d393499616932703b1cc325facdda561f67dfe4eb1423e6243ba50c4e79007098abc73d65d21fe2d0abcfb0bc50b49c0fbe161d788f", 0x6b}, {&(0x7f0000000400)="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", 0x1000}], 0x8, &(0x7f0000001480)=[@mark={{0x14, 0x1, 0x24, 0x800}}], 0x18}}, {{&(0x7f00000014c0)=@l2tp6={0xa, 0x0, 0x5, @private2, 0x705, 0x2}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)="01f05b9d8fdd51addd968e3b92628ef9298168e5074a74144e946a9535ffdbdfc23d94", 0x23}, {&(0x7f0000001580)="4163cdece55478c06528b192e498dbc29c60ca11fe5e0eb29b9e61fb581382a827f63befa7c43874569d43ef5e2072a5fd9661b4a642ab9b4322b34052afe008eeab49b29003d1a90af519064fe40d7457b0a956615a69524cde148f1e056e2e", 0x60}], 0x2}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000001640)="4c2a7d37618d989e2c565fc0b358a896bd671cb3e2bb61915afbed926054bd4b652400605b5723389cf9b1dd2c6689d0d4ee78d09c87564cdf4d3f4ab33e9e0317628b06b5d2b128484ebd8c5f07b77297bdb902ff23fa61edf57e63667f07127529e48935fdb5a9ef9170aec4b17850de17772bd27cc1047c55c3de9ba22a463c67ca443d7dcf75897e6621e3f6100240255e9d0d1cfd9e52a9788de486cc8463cd0636e8f5847da479b759005809d5166252845b805de5b49f1a6a29f58f5abee74954d666c8b1ef0af10b", 0xcc}, {&(0x7f0000001740)="c578b829e68c0e3e85a2610bc7b0355c186e5568618b9d2a4492eeabf54a67ec80a7f7fc1fbdc4f4ac4e74cc30f9e49ae8438d8cde31a14b8c75501eb078e49a62b540983650a866ab57eaeb284196204193f7c603a1882cf7ec4fb524b5cf0a07fd77cec2f90c6e7ca5ccd95e613c1e01f86b5f8cafdee30b3ec91309d869111d7951f35119e4390d5595b9020621cf9a1958d23353b95fbc67c5700d32f9d99f6e4663a7a0de54ed2d5f03e035169716b941845fb5f01babd5b441f58ac74b0791", 0xc2}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="16105c0e630a1b6aea9ece89e6e3583012398b93465ca64b928c30583dab456268f82ee1f86982a983cb011661491d105f35642b76df56bb9602c198ff0a748a1425fe2d4e35e00df3217097a39625e4526471daea0fbea5a062fdcec63ef019dfa1e1562516deba8c624c21a6eb7cd161ab2019d0779e16a95a5f7b32650a0caf9c19234c6aa42fac20fb92c97c2cd6549cf68c4a34", 0x96}, {&(0x7f0000002900)="fa882b09a62436e491db3b6196de5b766c3131a9cdb78242ec1491bf02d56fe660a9821f7e80e1f9e3", 0x29}, {&(0x7f0000002940)="fa163fc0c82795999640ab4fc4c8f7537dde67dc957806854708d5f0a744bca1df92c9a93609431b317192627778fc1f5364950fd9780b6e6ac7a587baf0f3b784bf7d29738ec5101107fb306753ca10bcf8f898177a3ffab790dd0f4469351ad3dc69a005079fca8b08d38d3c53a092d3e87fc10d9007363a747cd3578b9c3b41a106f7ccbe52a5ed6612885c3f760c7509444074f7970ded8aa6a0253d9e6b9c16d9f5bd70fa8a", 0xa8}], 0x6, &(0x7f0000002a80)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x18}}], 0x3, 0x4000800) 13:13:38 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 37) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:13:38 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10084, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = creat(0x0, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000040)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x81, 0x40, 0x1, 0x8, 0x0, 0x3c7bcee4, 0x40020, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x190, 0x1ff, 0x3f, 0x5, 0x1ff, 0x7fff, 0x4, 0x0, 0x9, 0x0, 0x6388cc53}, r4, 0x7, r2, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xef, 0x5, 0x8, 0x1, 0x0, 0x1, 0x10180, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xae, 0x1, @perf_bp={&(0x7f0000000040)}, 0x8202, 0x9, 0x5, 0x1, 0x9, 0x7, 0x7, 0x0, 0x3, 0x0, 0x7ff}, r4, 0xb, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x1, 0x6, 0x0, 0x0, 0xae, 0x802c2, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1000b, 0x4, 0x7, 0x7, 0x7f, 0x7, 0x906, 0x0, 0x2, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r1, 0xce4fa371d26b379f) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000016c0)) r5 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=r1, @ANYBLOB="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"]) getdents(r6, &(0x7f0000000380)=""/215, 0xd7) 13:13:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x1b000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) [ 2095.421216] FAULT_INJECTION: forcing a failure. [ 2095.421216] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.423681] CPU: 0 PID: 11372 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2095.425121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2095.426832] Call Trace: [ 2095.427385] dump_stack+0x107/0x167 [ 2095.428158] should_fail.cold+0x5/0xa [ 2095.428947] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2095.429975] should_failslab+0x5/0x20 [ 2095.430765] kmem_cache_alloc_trace+0x55/0x320 [ 2095.431725] __io_uring_add_tctx_node+0x15c/0x520 [ 2095.432742] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2095.433822] ? alloc_fd+0x2e7/0x670 [ 2095.434596] io_uring_setup+0x1fbb/0x2980 [ 2095.435470] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2095.436518] ? wait_for_completion_io+0x270/0x270 [ 2095.437547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2095.438638] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2095.439708] do_syscall_64+0x33/0x40 [ 2095.440497] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2095.441559] RIP: 0033:0x7fbb28dd6b19 [ 2095.442339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2095.446141] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2095.447717] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2095.449212] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2095.450684] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2095.452176] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2095.453649] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2095.466550] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11375 comm=syz-executor.5 13:13:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38016c00190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:13:55 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:13:55 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x0, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:13:55 executing program 3: pread64(0xffffffffffffffff, &(0x7f0000000200)=""/155, 0x9b, 0x200) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='\x87', 0x5) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000180)='./file1\x00', 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r4, 0x0) r5 = openat(0xffffffffffffffff, 0x0, 0x36400, 0xe375d1901a7fcc3b) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x8}}, './file1/file0\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) signalfd(r2, &(0x7f0000000040)={[0x7ff]}, 0x8) syz_io_uring_setup(0x21e6, &(0x7f0000000080)={0x0, 0xa91f, 0xc, 0x0, 0xfd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2004, @fd_index=0x6, 0x7, 0x0, 0x0, 0x13, 0x1}, 0x99a2) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) stat(&(0x7f0000000400)='mnt/encrypted_dir\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r9, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1/file0\x00', &(0x7f0000000380), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@uname={'uname', 0x3d, './P[]!\\,,\':$^&$&\\#'}}, {@mmap}, {@mmap}], [{@dont_hash}, {@dont_hash}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, '):&$\''}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x100000000}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@euid_eq={'euid', 0x3d, r9}}, {@fowner_eq}]}}) 13:13:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x1c000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:13:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 13:13:55 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 38) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:13:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) [ 2112.196445] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11390 comm=syz-executor.5 [ 2112.213270] FAULT_INJECTION: forcing a failure. [ 2112.213270] name failslab, interval 1, probability 0, space 0, times 0 [ 2112.215674] CPU: 0 PID: 11394 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2112.217082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2112.218765] Call Trace: [ 2112.219298] dump_stack+0x107/0x167 [ 2112.220060] should_fail.cold+0x5/0xa [ 2112.220825] ? create_object.isra.0+0x3a/0xa30 [ 2112.221752] should_failslab+0x5/0x20 [ 2112.222521] kmem_cache_alloc+0x5b/0x310 [ 2112.223336] create_object.isra.0+0x3a/0xa30 [ 2112.224220] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2112.225258] kmem_cache_alloc_trace+0x151/0x320 [ 2112.226202] __io_uring_add_tctx_node+0x15c/0x520 [ 2112.227164] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2112.228219] ? alloc_fd+0x2e7/0x670 [ 2112.228954] io_uring_setup+0x1fbb/0x2980 [ 2112.229788] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2112.230799] ? wait_for_completion_io+0x270/0x270 [ 2112.231785] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2112.232843] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2112.233869] do_syscall_64+0x33/0x40 [ 2112.234610] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2112.235630] RIP: 0033:0x7fbb28dd6b19 [ 2112.236376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2112.240047] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2112.241551] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2112.242982] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2112.244396] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2112.245790] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2112.247195] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:13:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38017400190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:13:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x1d000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) [ 2112.262053] device syz_tun entered promiscuous mode [ 2112.286499] device syz_tun left promiscuous mode [ 2112.298617] device syz_tun entered promiscuous mode 13:13:56 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 39) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) [ 2112.328454] device syz_tun left promiscuous mode 13:13:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xd, 0x10, 0xffffffffffffffff, 0xbdfe1000) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x5}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x911802, 0x140) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)) r3 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) flistxattr(r3, &(0x7f0000001140)=""/76, 0x4c) mq_timedsend(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001e00)={{0x0, 0x36f000000000000, 0xfffffffffffffff8, 0x8000, 0x5, 0x97, 0x42, 0xfffffff7, 0x7, 0x43, 0x0, 0x3, 0x3ff, 0x10000, 0x9}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x7f, "9656c75f04ba4d"}) lseek(r1, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(r2, 0x0, 0x480c1, 0x186) copy_file_range(r5, 0x0, r1, 0x0, 0x200f5ef, 0x0) 13:13:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 13:13:56 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2112.400677] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11400 comm=syz-executor.5 13:13:56 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x0, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r6, &(0x7f0000000380)=0x1ff, r5, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2112.462373] FAULT_INJECTION: forcing a failure. [ 2112.462373] name failslab, interval 1, probability 0, space 0, times 0 [ 2112.464946] CPU: 0 PID: 11403 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2112.466201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2112.467664] Call Trace: [ 2112.468154] dump_stack+0x107/0x167 [ 2112.468800] should_fail.cold+0x5/0xa [ 2112.469471] ? xas_alloc+0x336/0x440 [ 2112.470126] should_failslab+0x5/0x20 [ 2112.470796] kmem_cache_alloc+0x5b/0x310 [ 2112.471521] ? stack_trace_consume_entry+0x160/0x160 [ 2112.472423] xas_alloc+0x336/0x440 [ 2112.473052] xas_create+0x34a/0x10d0 [ 2112.473710] ? kernel_text_address+0xf2/0x120 [ 2112.474504] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2112.475421] xas_store+0x8c/0x1c40 [ 2112.476067] __xa_store+0x164/0x2d0 [ 2112.476712] ? xa_delete_node+0x280/0x280 [ 2112.477445] ? trace_hardirqs_on+0x5b/0x180 [ 2112.478203] xa_store+0x31/0x50 [ 2112.478783] __io_uring_add_tctx_node+0x1cf/0x520 [ 2112.479623] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2112.480544] ? alloc_fd+0x2e7/0x670 [ 2112.481189] io_uring_setup+0x1fbb/0x2980 [ 2112.481914] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2112.482787] ? wait_for_completion_io+0x270/0x270 [ 2112.483636] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2112.484562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2112.485459] do_syscall_64+0x33/0x40 [ 2112.486101] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2112.486990] RIP: 0033:0x7fbb28dd6b19 [ 2112.487647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2112.490845] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2112.492172] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2112.493395] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2112.494627] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2112.495852] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2112.497101] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:14:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38017a00190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:14:09 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:14:09 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:14:09 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000002200)="bb11b9e7d41bd1d3e6a93acf4d7a2d00f1c5ef49adebb79516571b1ce3c2f4622455e778f4ccbd8418648d3ff29bdb8e50832e52f9b7803acf36ab83a0707fdd91fea96c81f8b6f4009059097811297cdcb331f863434f9710559d2853963e2befb13a90a324c63b7a31880b01cabfa1c35cf91c14d7b0d28021ea55b6111cea97abdb839eb0cd1033774f4d2243bde722ab8bf3ff787804880669b9275028be82b6465102b32a63a86869757f30", 0xae, 0x20080002, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '.\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@getspdinfo={0x14, 0x25, 0x100, 0x70bd2c, 0x25dfdbfc, 0x35, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000070000000000080000002607b8ed5f850000", @ANYRES32=r6, @ANYBLOB], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000070000000000080000002607b8ed5f850000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) sendmmsg$inet(r5, &(0x7f0000001e80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001840)=[{&(0x7f00000002c0)="b4459baf82c5d6ff576fb271c2301c24a40983b90264caadf669c50d9c5330daf715cb186269ec257608b4032f940d6b9319cc6dbd04d47c0a1d880cabf61c15693c004ed515b33e8a1a2cc96243483f29f7460a9f38f945785ccac02fbdfdef83e6a6e363aff0db441449ca1aabf87c0a70ed96556a4df89a8afeabaf3bbdb7a45a2d5b6bff6c0e692ce58c0967ed0cd39f", 0x92}, {&(0x7f0000000380)="9b12d5cb7473137c768e9c9f3dfd9642b6cdcada7c3b808e47a328c9b853ca436e4ed0be4d518ce5c7a5ca3b9d4a27be1cd96e4bf8d6c6dd5058cc1add90b5efb18292fff4de05355c4d70523471b9a21c0bbdb49133c1b693914320a49e6400fbd4cf0c20548e7b741b7d34efe8d4ba8c18ea898aea089e8384774b64511289599f91390d6ffd968c45c967ce46543e6b5d3ddb4c00e7db2fff1cd80614dce51292d0cc86f9c5f9c3c313ff24082bb554", 0xb1}, {&(0x7f0000000480)}, {&(0x7f0000000680)="1db7164a8e38d7304dde01644880e0f3fa23d64b309e6c057879d218f42d6ad9e74d0335acc0185da0175c963b0b245648cff5f2fbc655b74f4bf823acd0a8f36fc087d4adae47302ef1c56e9b79c5694bf2ff6445bd18b7e7040fe2", 0x5c}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="fb26600fcd9ce6a3eddeb273f4c2f0ae99371a3f70d1327d6354ab253cead400d5bba4e3f28e66088a7c3ecfb8fd99c69a4fcf3eeea887f938f0e10f10d72beb4479c5ddd5d8cfafe289f5d2806720f14f2ed8221e1947e338949fc2d5c2ab251586895c9b4e819ecd054b953e2063f27212b4b58d26202ceda69b318d33afcc0dfc5c96f7a026b6d9c7564ae24c2afc40f3738bfb828ae2af098eccbddd2f3e7c", 0xa1}, {&(0x7f00000017c0)="0d30f25cc7adf3816e58c4a3abb20ab4458c23ae3b53160f50b9baa4c4aa164f27322d5ccab2bb1a75b3345a7861a4aad04fac32ca0c84b1567835d93547b1a2525b5aa4c1b0ed96b6a6ab219659ec8e47877de99793b05c18b1be83d0", 0x5d}, {&(0x7f00000004c0)="77db5d2710c5a0ab6ef8d08386246115ecb730d3bd", 0x15}], 0x8, &(0x7f00000018c0)=[@ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0xa1, 0x1, 0xd, [{@broadcast, 0xef3}, {@local, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}, {@broadcast, 0x180}]}, @timestamp_prespec={0x44, 0x3c, 0xc3, 0x3, 0x9, [{@remote, 0x8001}, {@empty, 0x18072e45}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010102, 0x80}, {@local}, {@loopback}, {@empty, 0x2}]}, @noop, @timestamp={0x44, 0x18, 0x8f, 0x0, 0x3, [0x5, 0x1ff, 0x10000, 0x6, 0x10001]}]}}}], 0x90}}, {{&(0x7f0000001980)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001cc0)=[{&(0x7f00000019c0)="dd4d8b25026cc85a00178d761743c5fe2abc33bdd42770bc3a7ba1a60dcd88021b7adf316d6f114bd94a72dbe4b852e1867c7ea7b5322028769e86f29bd65279dd1be61346bcfe5990fe7e36100e43bfdd07621f79fde8fd5bdc9d21424248fe123b1d7ff324fc209345b1ee5316352964f89b169af678383509c7f2c185d205de2168c00b51782a9bbdfe0fe613c148e1cb7176608814ce", 0x98}, {&(0x7f0000001a80)="8740da33a23c119778616fdb4d3852111785d73829f990b12b1e3b6bafc13ff144e09ee8b26624db7192ed44133d1c76412dbade9856c5822beb9528869887581f68a9f7fdf1", 0x46}, {&(0x7f0000001b00)="b6ddbfb43b336cd1700426b513e37fb81d29b56caef1cddb8691dc784b883e5d8ae6678105c9f3eb596acd3de2c099b521425f3ce6fb9a1859c64d53cbe89a63fc5024251948ab9402d47a7c8389d2a3d519211c001fd79689200c69f0d736384b7adc36789ed1b44e65890d9453cf1b6dbf1da303614e2a69da1bc871347f98f8ae459aa0", 0x85}, {&(0x7f0000001bc0)="c504f33595c9e2c8a0897ee9afdacc2fd8eba9e6857caa5a996b4bff4eace5241ad14a72b14d1938439275da3f88752ee2a3117c4025e3ecad779e2799ab5e281395d6eb62c931bf7554a7347cb7a1486d60b449506661425645fe9d5761858344a15cbb51828d31c35c7a3475655e9c24c227b546dc7772089fa1a9fcec49cffd5ec0cdaa95a47ea45f311f37ecb1b88e5b2dfe68a43c21d4fdac06b46cd834d257e7ef7d912fe728d846ae1f7747cb3ffbee1259edbadfafcfb8c87bbd800b7bb6f5b975a579629b262fbd42691ae2b56c511fdcd8b489468d1285c4ba787bcc673a06759f950fa471e9ae8a3d4162ba35fe675a2078d1", 0xf8}], 0x4, &(0x7f0000001d00)=ANY=[@ANYBLOB="1400000000000000000000000200000003000000000000001400000000000000000000000100000008000000000000001400000000000000000000000200000001000000000000001400000000000000000000000200000006000000000000001400000000000000000000000200000081000000000000001c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="0a010120063274ed2227fb0014000000000000000000000002000000c92e0000000000003bb100000000000000000000070000004408e25000000007442cc3c3ac1414aa000000027f00000100000081e000000200000007ac1414bb00000001ac1414bb0000000107132e7f000001e000000100000000ac14ffff442ceb93ffffffff80000000ffffffff00000002ffffffff00000040ac1414240000007f64010100000000058307f40a01010189133effffffffac1414bb000000000000000040a2a5fa27d2091738252343c20000001c0000", @ANYRES32=r7, @ANYBLOB="ac1414bb6401010200000000"], 0x170}}], 0x2, 0x80000) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000040)=0x4, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="00080007000000034d453e324a9f0028006800000429000001640101020707690a010102830b1aac1e0001e000000200009a8f4a286c2dbf2ac32b6d36685804d10a35e24b2f5ddcd7a3a6a282a50213aa7f2f046025a048be11f5793edfa6a16273258347c2a231781ccbcf5d47f536ab2919f60d29636f820b5e3951c267a019fd0f3b7e995a43225944ab2c5cb9d2cd722a3800dd4c9fd545a2873d69dfd5488e395cbb08245a5605c513e5e18a717ca92ccdee1444338648427b"]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000002000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) r10 = openat$incfs(r3, &(0x7f0000002180)='.pending_reads\x00', 0x20080, 0x1e1) write$cgroup_int(r10, &(0x7f00000021c0)=0x5, 0x12) syz_mount_image$nfs4(&(0x7f0000000480), &(0x7f0000001f00)='./file0\x00', 0x2, 0x1, &(0x7f0000001fc0)=[{&(0x7f0000001f40)="e7f1b691d496023a22f5a6b2f1f8ec33cb786be0aaf8997f46ea087d51cd7fd312b4d81c296ac6f3790581094162d0e6a0c7c6eb572e52d9de016de73fe2e65b88194ff2a2b8d802f465216a5e476b", 0x4f, 0x1}], 0x208004, &(0x7f0000002040)={[{'syz_tun\x00'}, {'\x00'}, {'syz_tun\x00'}, {'^'}, {':'}, {}, {'syz_tun\x00'}, {'syztnl1\x00'}, {'(/^$'}, {}], [{@uid_lt={'uid<', 0xee01}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, 'syztnl1\x00'}}, {@fowner_gt={'fowner>', r9}}, {@smackfsdef={'smackfsdef', 0x3d, 'syz_tun\x00'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@uid_lt={'uid<', 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x37, 0x35, 0x61, 0x34, 0x38, 0x32, 0x3c], 0x2d, [0x39, 0x65, 0x63, 0x33], 0x2d, [0x33, 0x63, 0x31, 0x63], 0x2d, [0x56, 0x63, 0x37, 0x31], 0x2d, [0x30, 0x63, 0x64, 0x65, 0x66, 0x66, 0x62, 0x33]}}}, {@audit}]}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r8, 0x3, 0x6, @random="1600"}, 0x10) 13:14:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x1e000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:14:09 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 40) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:14:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 13:14:09 executing program 3: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000480)=""/4096) r0 = getpgrp(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x1002, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000014c0)=0x7ff) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/37) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c01}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) clone3(&(0x7f0000001980)={0x210000, &(0x7f00000001c0), &(0x7f00000002c0)=0x0, &(0x7f0000001480), {0x14}, &(0x7f0000001680)=""/185, 0xb9, &(0x7f0000001740)=""/157, &(0x7f0000001940)=[r0, r0, r0], 0x3}, 0x58) pidfd_open(r1, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000001c00)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001600)) setresuid(0x0, 0x0, 0x0) msgget(0x1, 0x5a) r2 = msgget(0x0, 0x56) msgctl$IPC_INFO(r2, 0x3, &(0x7f00000000c0)=""/8) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) getresuid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000001500)) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1000400, &(0x7f0000001800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61637a6473364dadd138c134721b5931cbbd85bad286b524ee2dc27783efad3b8dbe6c0664df8d6d1a43119f6fbb15e44f2c92bee164d56e3b6f8a0ac00283e973d357fdea7d51e8b9d958d1d17e10ede70ea345ef8028aea96b340ec84d25a3c88e78dbe037b3b17d4069c7e844463676bf0500c98774951edf0de632d89b28cc5660828254c06a", @ANYRESDEC=0x0, @ANYBLOB=',cache=mmap,uname=ext4\x00,dont_appraise,uid<', @ANYRESDEC=r3, @ANYBLOB=',smackfsdef=@-,\x00']) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000001540)=""/167) [ 2125.583196] FAULT_INJECTION: forcing a failure. [ 2125.583196] name failslab, interval 1, probability 0, space 0, times 0 [ 2125.585956] CPU: 1 PID: 11428 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2125.587428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2125.589190] Call Trace: [ 2125.589753] dump_stack+0x107/0x167 [ 2125.590530] should_fail.cold+0x5/0xa [ 2125.591344] ? create_object.isra.0+0x3a/0xa30 [ 2125.592318] should_failslab+0x5/0x20 [ 2125.593124] kmem_cache_alloc+0x5b/0x310 [ 2125.593986] create_object.isra.0+0x3a/0xa30 [ 2125.594927] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2125.596001] kmem_cache_alloc+0x159/0x310 [ 2125.596897] xas_alloc+0x336/0x440 [ 2125.597652] xas_create+0x34a/0x10d0 [ 2125.598450] ? kernel_text_address+0xf2/0x120 [ 2125.599401] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2125.600525] xas_store+0x8c/0x1c40 13:14:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="3801f000190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2125.601295] __xa_store+0x164/0x2d0 [ 2125.602218] ? xa_delete_node+0x280/0x280 [ 2125.603111] ? trace_hardirqs_on+0x5b/0x180 [ 2125.604039] xa_store+0x31/0x50 13:14:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) [ 2125.604763] __io_uring_add_tctx_node+0x1cf/0x520 [ 2125.605897] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2125.607006] ? alloc_fd+0x2e7/0x670 [ 2125.607790] io_uring_setup+0x1fbb/0x2980 [ 2125.608675] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2125.609730] ? wait_for_completion_io+0x270/0x270 [ 2125.610762] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2125.612127] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2125.613288] do_syscall_64+0x33/0x40 [ 2125.614220] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2125.615361] RIP: 0033:0x7fbb28dd6b19 [ 2125.616336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2125.619955] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11429 comm=syz-executor.5 [ 2125.620224] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2125.624309] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2125.625821] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2125.627471] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2125.628997] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2125.630518] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:14:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x1f000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:14:09 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 41) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:14:09 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:14:09 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) pwritev2(r0, &(0x7f0000000840)=[{&(0x7f0000000600)="0f2e77dcfaab8a62c4483508b3378a348a6533e8e4cf677681aa6a01b7c76bff55d684c48837fe381411d14d2c546d56d3753ddda27fe33935ba97eef5c9b406492916e33fa94cb2d918e680487246a58053ffee77dca0fdda3cdd0460bb049291f1d648", 0x64}, {&(0x7f0000000680)="4c9e128147dc4f52d917e30c23204ccd68a8d5148594237abd7672dc1069a69e7dd2a4ebe2b4197eb0ac98c78c4421beaa29c002d75ae9e3420577abd63565e4f2260cf68a4663a2c7b650b86d595dc5630a008a520b48ab8f630350d740b97b13575d0a97fae32b33fb000ac83d4fb3cfbbbdc30c88f0cfe65757654809", 0x7e}, {&(0x7f0000000700)="07ade260a1737ec7d3e20350520e04b822c52746fb88b4f5a947b585272a9a0fb3988475c72dd225", 0x28}, {&(0x7f0000000740)="202b35583c36823dfe03096aa06c597752dbe6a1055dc7f0d0b06fce6884bae6fa6ce8dd8493e2af5b5b032317ed75512f4bdf65944d20090f0fcb6d18630a1ed9e7c2e535e2e0995aee1210581edadf10ccecac33892f382f10450eb90e20ebf9c4f079b123fd023530a95f9197ac4248338796bb2e91545cd79c59d819b078189e293840b8e97cde70afdec7f7fd1f3b19f7f593fca240c1384ac4e286d62aec786b4794db6981f59d96a3a259cdfdabb1c94025bd3091ffd5ca376cac7b0454b8ae376569422a434277b194f0b1e0840d9f704c72", 0xd6}], 0x4, 0x4, 0x4, 0x14) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000080)=0xc0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {&(0x7f0000000440)="ffdd14b2d545b969616d54fa413948ca8c884e05a5e0b29fda45678de5b6ea9b32040cfbe28f87c93cf898c2624a360384a71f96dc79194b8c9cf744da855ca0b5aaf22f51db7f7c1cf4850f245977421e5f993e2c5e97146ac61139caedb63455f06e0ac29e00f522a151c2774de3ac62b0621adbe8f1cfca71952a01bd410dbd0731eb96367acfaef362026b898c9311a95951a302f26d1b3d3c6fb59470b3ce9e99d98277d23940f8e92a64207f20951d9407895b748c482f265db1", 0xbd, 0x5}], 0x1, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) r7 = dup3(0xffffffffffffffff, r6, 0x80000) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x3f7, 0x200, 0x70bd2d, 0x25dfdbfe, {0x16, 0x10, './file0/../file0/file0', './file0/../file0'}, ["", ""]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000100)) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r4, &(0x7f00000005c0)='./file0\x00', 0x50) close_range(r6, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 13:14:09 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:14:09 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x4010, 0xffffffffffffffff, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1d64675bc21ae801, 0x11, 0xffffffffffffffff, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002e00)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0xde, @mcast2, 0x200}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000340)="6d6e93237ebcacbb033b6eb0473f1f47a1a958e8aa6d3df1b2b2bcbe8509fd54ea9aa0f86bc0c2d2df1cbd80e4b9f28c579975f07eeabf516c7d6854a160059093deed284fbd33b25cd62b0e233499025fcc125240bdb9c1515af04a0ec7932ba1ace96251c2917ab551f59a1f4e542f9553f47c79e563ac593b2980379a72609ae72693fe10d53a95e34258f84ea44c5d9648cb9b4391f89b3fac8ff30bf71351b481549717f24ffbf070d0b89ac70edc70aa2a146d9b87f4231f6bb0e6c4a728414d5b099a27078169e80ad15a9435629ea9a542f76e60377e8e", 0xdb}, {&(0x7f00000000c0)="cf822370b84a4b1f7413d7fa303289a5d368d46b6a92a0dc608708342e5f8cdded193f865be50888f7", 0x29}, {&(0x7f0000000440)="7bd069ce9517c5a34eb3dd02bf6343456cd57f64acd28885c13c9a4527fc6f5985b4f5080e59cae51bf6dd87de69bf216c55b5729af402a6ff2d9b17583f7a73fd4df789448d0d6b595b3644a5fe6f7188a545a45d86fb3166548af25d5d4be4e7775621225a933c4cd7aeb019f3feff280f365116875fa9de12e5267f923a3aa9", 0x81}], 0x3, &(0x7f0000000500)=[@dstopts={{0x150, 0x29, 0x37, {0xff, 0x26, '\x00', [@generic={0xc3, 0x91, "3cdba04b3764ec26b45e757658027c2fa3abd63ce222e942acf4b1b39bc34ae72cac6eaf632d9c34461a7a488009b0c0c8f11befb4a749b1652aa5d3710e54f673af278c1debc685097d5422fe3b7eb42626aeed86f38cae13674315ba28d67aa80d5604d302a8bd3096392715f8d549549140d1eb4e37c01a0cfdf298bde0a43c0c844d51a1515d3cd1e67082dcd8e0a5"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x40, 0x47, "1924c593854e5c6e8b4bcab66d4e03d7d57bc2fd532e4c8ca4958f5146a3247d01e11df364b2fba18ed718e200a839dd22d0e465ebfe2f541a10c1c8e3101007a36c8053760df4"}, @ra={0x5, 0x2, 0x20}, @generic={0x56, 0x20, "d59a5dfda578eb10a28f4bac7df2589cf37199c3e53308ab29ee0b9f43939ca8"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x2b, 0xf, "5b4457bf9e34e57bbc6245a64dbb12"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}], 0x150}}, {{&(0x7f0000000280)={0xa, 0x4e21, 0xc40, @remote, 0x9}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000680)="b82e587da5bc00b2f24776c878db30421e0b7ffd0e58b4e673c39d88857e012fe770444524b95892c5de9af07cd28d2cf5e85fc79c75e6fd6a1774da9eab2ef39398c0bd744f748ed805a863c9c253aa71d77dce3e4f1e", 0x57}, {&(0x7f0000000800)="98fc59bac6012b282a3e768331366158b01693b5a772ad1e87348e25a04e6aafb20b2a5549556cdad84644eea6b2a13491377483f190b455e9c4526996bc98758ead41f21029123f76da421a7c11357f631de0152003357555e5f25f0df087d4f10affc3f54ea7dd68e4a27933cf33affdc98ecd0e06286a7f0232eaa0dd1688ed69ee80a3964de5ff6fbb616db5840c2926766bdf74110392921adbffef3f1a68df26ab2247353363f3eadaf652d5fb99d4e31c7ed443dee2b6f31b15032e22ea219eb4bd522c60b873", 0xca}, {&(0x7f0000000900)="77305bef4af735e22ecc1bb75ec06c3a624385a78b0c6c873475a64e8a6d6fe7f451618b24022ac819ba18a23d11964eb00c8d2ccf11b749473720eae511540a46501d73a6525e8dc9a9e858c1779e982a0cabad425664a0f6a96d38933281be5d2f0febbf9078a7eba6c917a92db470828b82dae3d2d4aaa9986fbc3eb29a82ba812cfadd09b07d5cf4c9adc5de1af0f8d432d391696db9b59287bbf90a6f60ef0d7a39a306a152cc678ade111d809c04b4989bfbf9e3e81ec8f14d8f133a8e0c5e6afefa5e22b55c2dbf68f87f77e07a7eaeea97474b063d72b77b7ea3bd6b4a9bbc0dc17b191dbc0a1b676b9e14c801f2188e", 0xf4}, {&(0x7f0000000a00)="baf6f6e8c5e86f59dc7bcd3e7d2f785d53f138a81c1ab95610af8acf72b14a5960bf41ccfc58b46335f30665a70a644eef3aed94934998549b50514aa45c6b72828047129648fa124841f78356a4aa42f96752b71ef93dc63a7d0aeea6f824548e743aee2d7d7ad0305e09a69c2915e49195df0935d509197e2875a4e98a6bbe6b3a8467878bf9a243498733e5a3a6257f1c80163dfb", 0x96}], 0x4, &(0x7f0000000b00)=[@hopopts_2292={{0x28, 0x29, 0x36, {0xc, 0x1, '\x00', [@pad1, @pad1, @jumbo={0xc2, 0x4, 0x1f}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x2f, 0x12, 0x2, 0x3f, 0x0, [@empty, @private2, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @mcast2, @mcast2]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x100}}, @rthdr={{0x58, 0x29, 0x39, {0x62, 0x8, 0x1, 0x20, 0x0, [@loopback, @local, @loopback, @remote]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0x170}}, {{&(0x7f0000000c80)={0xa, 0x4e23, 0x7, @mcast2, 0x8}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000cc0)="3717d87b270c94bbb3f5e81d2ace72c3d45e1733b353740d6f45cdb68796246e51887d248fa6704cea1e8879e947c55f2ac889630f167763e1a4f559679426c70b2acebb313d6ad8f9389d2d06825a8ff14deee9b53273e4b132a8959d18073c2d93a245f00ecf8a00c8ebb533d7255327a4982148524fd7b402f75aef6cb73d6afb4f5098176543f8c07bb224995b92dde07ec1e03b5cfdfec7a0cae70789d40caeefcbdc08edda8a8016dca03b9d88bdeafed77046bec01329a2e42a940b0c31f0683a7c6378537cca21f06bcc4091486979c503f4", 0xd6}, {&(0x7f0000000dc0)="733538661de1c36ec1a6dd3ea0bc6d5830cdaed73dd04f78831d8981d697954ceadb00ebaa65d4ae05fe32611c955d02b5078e657822613f2f97505ca18a42a64b3c34236840293e5202d59ffdef311a30c0e6d343a040d5bc2692ec909888da209b1e33e03dae241338e3408be4b5e1111c53ac59cdcee425e424cbe0c8394aab83f68ec6c4268c4a01511ea839d98bbb96f784d7069bcf762cf6e04160192f5d345e37b41f37e96f9fab698949d22e58ac395456bf6e5c6438158a152154e9f1e5cf4098d449c05a5a4ef23e", 0xcd}, {&(0x7f0000000ec0)="28dd845b7de6930ae2b7084a057d91c414ebd448dbbf040f48e3a01abacef1a6b6cfc864471421492c7f384fa2e9927bd061f1a114505f986bb189155546e49233ba4718cef0fb80b8e0519b0a3e7df3bb291ea496e310209a83e2bcc00fdd655c69c673891e178a4efea829879e827443a277db2d13c6fbea4393d9729b6c0e71f7a4835f1a08c6ac30b383911c7cf927b5314f98dd1340dfa2", 0x9a}, {&(0x7f0000000f80)="42876af72427bb1640b39a1ce6481a328f9f5e4dc038474e3004e6bca10b31609c7c2f33c9adc501899985a37db4a593b5a81e58721d8da94557244d9abb9d518d4b38b7d61ea5fd134a0073d3afc1e0ed2b7723b114ce7a1ecb992a1f6a53f5ee1b8c861fec529b28c596ae4410816623f63542be7a9d63b91427ac27a8171a8f7d5ab0ca1eac6d2ee7a9a86a2cf26a9182f49d11bf351b847f1d987c1750b5e5e252f782858bfca62e40162d92c5725344ac32fda24fa2a3fdaa7084bc5989e5c9fd0a98ca59411ea1fa1e72f3297b8023070741935a7f954f08f2887b0ca1db1a4c96330d431bbe", 0xe9}, {&(0x7f0000001080)="af468838bb68e044aa5ec1642388ca6d8a6e5340ff74acc7d58d6e1fe755965d6824d00e7e8f7246f810d121eaeeb8994f4764af90915465dc26b069af6f347d0cfeacbca343c76b67ec16062ac8ec88781cb294c5cfd9df3f45602dea1b144bdf874c36da686bd4d60afee3ab375d3956133aa6", 0x74}, {&(0x7f0000001100)="93765e6d9b4802f17d4feb4b1b2f38c6107daeb217c1b40f980062b8ba3faeb2cc3a4351a3fe888b53a308ea7734bedb8f0f02d3cca518564853d3b5", 0x3c}, {&(0x7f0000001140)="dba1d66516f58ae0e355ad072d7109ced338c6c31e5f4666899b641fd10a76ed6d89b7591f3535addf6179cfc2d71ba9dee8dfe0a519452deadebe8cadf76d27dad7d0a5da6fa1de7c872bd81df53356ebad87d522947b56c8e1fec59cce1c4d9b9b8bc22cb260a341aabe267892bdf330d5e57923522f07f0193f25e4e0ebe3ecdc0c6c99ef38743db74178cf023205d4f7dcb753c42fab5a7711e6714828b1b4be0fea4b300ff0741c3bfcaece10bef78f108ede3e402afab64455708fbe", 0xbf}], 0x7, &(0x7f0000001280)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x33, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x20}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfff}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x32, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x80}, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0xffff}, @jumbo={0xc2, 0x4, 0xfff}, @hao={0xc9, 0x10, @mcast2}, @pad1]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x9}]}}}, @dstopts={{0x28, 0x29, 0x37, {0xff, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x6}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x89, 0x6, 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}], 0x108}}, {{&(0x7f00000013c0)={0xa, 0x4e20, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000001400)="5feebe77f99f7b8e02d7864e6d3312d2c8c2bc6cf574c338f013c880993dda65cfaf0a13c66718af5d5cbafdc8a03eba42f42926620c69a16503f3eb2d7067eb2e3f4167c6324d1aaa1d7e9b08051fd311215f1f0abe991e2cb109f55f1dd04f6fb9d95eff8b8f3cad42bc85cc1c7faec593d78863db1563ee1e318b589fcdb30b2e4fdea38be620d65b9959f7237d265c0dd4accb91353cee2b5fc9d37cd449da039ccfd0aaff39bb3e3c3d466a4af5d6b30f6eb5ad5c7834df2e414dbbac98ab", 0xc1}], 0x1, &(0x7f0000001540)=[@hopopts_2292={{0x58, 0x29, 0x36, {0x3b, 0x7, '\x00', [@enc_lim, @pad1, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @pad1, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0xa03a, [0x3, 0xffff]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0x589}}, @dstopts={{0x20, 0x29, 0x37, {0x84, 0x0, '\x00', [@ra={0x5, 0x2, 0x5}]}}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x4988902f23efa02e, 0x7, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x4, 0x619, [0xcd65, 0x8000, 0x4bb8, 0x1, 0x8001, 0xb5]}}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x6f, 0xa, 0x0, 0xcd, 0x0, [@private1, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xd}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x0, 0x2, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @loopback}]}}}], 0x1b0}}, {{&(0x7f0000001700)={0xa, 0x4e23, 0x6ec, @loopback, 0x7fff}, 0x1c, &(0x7f0000002940)=[{&(0x7f0000001740)="1eeb367940bd3ddfdcec2f", 0xb}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000002780)="b47da56098be4e5f9c5f0ed72f23aeb36177fee12eaf9be717c183bf5735bfee3a49b92c4d47823c9550f82633bd7a22b427e1cef6249fa10ab96c1dae772b78e467975554c1e1861a3fe383216b7f18fbe302f4b50a5fb2bbd111f9a44c4a03f274c002fe1cca17b94dd2e8d9b6fee583b72790d141d958de07f8462f1f430009fcba9a88549aca091d9f61b919109e20fc1d513f1a758cac6a1f6850e6dac67d31", 0xa2}, {&(0x7f0000002840)="a1724e54c90dcae4f79c24695c4ed6a62f8f9b24cba146e6606850eb3e18413e51793d93d5fbc817ba6b5dafd9b91d1f41d0f0694654f68b23c9a22fe20941b72183955e2a876984537487b69433e06ba4af58193c446613fc4d6530cded1c0c08982696c985a7542fbb97fb3e1cac8098697ef257673e584b2f18f5723a7b48c7789fd717584ed9af40d96add46a8b5f7ec056e251755b8f7e1da15d06fb91254bfd584e69d8f7d5591899927ed7d1b29de44a483173fd16ff56a96e511b292ef274db7fb279bc0d7b1194493f8d59c795e546a004182d06199b5fde3f1d4234fe146244a38cd974bebfa9900a4bf0a66978a392d5e", 0xf6}], 0x4, &(0x7f0000003100)=ANY=[@ANYBLOB="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"], 0xd8}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002980)="66b46ff61b08c89f260e92274ab0dcdf7cd5fe88ad066c6d15451675e24005c66d9c0581375b9e4501b048af54e5ea484a921681bd8d1bfd64f745063f87863b69897aa3b35a4762802256e194c740622dd63f0e3aba7fd17fc5eb62fdc0461d1eb6f3a56326743f4b844ddddfb2e7f9c3f0ec009067e745c3c4cf623155f880ebecb1c91db18048626769d06e2e2ea93c7724b9c19bfd22a2696163bad390d6b693641f4b263fdf0e", 0xa9}, {&(0x7f0000002b80)="c891135f200b25fd01cafb18ef991beba15dc03c212443cd7acdfdca12939df1f4715dd05238152eb89bfe1b4a665a4284c96baea3bc3602e0f5dcbdd7abb64343340cc371bf10dc7ed619af9425dee7fe25100646d9f534142ebb0361a0d87ee592d52f7a561eb54b1293ec69c83e75308c68fd621234290f168abfe29cfbaba9c2acaa76c6b541c69e6f9b9266e1169d70f2f2e07128e006", 0x99}, {&(0x7f0000002c40)="b9fcf38423eb071ea5e87bd20bf1b392929818c91b0f0f07dacdae566689942e125830c8a8a6763d0a242419bcb8de6b2126991d4c98c53cb89975d29e20e53cd64c5df64fae71225e30", 0x4a}, {&(0x7f0000002cc0)="5d82f03dcdfd4fe121c01dd08a2e1fe15d5bd4d3bbadf55c906f0a340bfe6460cdf6a178c3c2958b9db46240672f7035cf624704ea321c8f616827d3ac5e712c57b04c38ffffd76a934f223a3ae9b7878ef2648a3a602ad43eb5e658753573680905bbebb94cb784617bbe0a67c893a87782b1c1830da11fe6ac6a3ff6b36177c530b0815677f99c9b6f82973df05164808234c8793314ea3dbcd6e09be55f21d551110dc8915a103da4d09586a2467314ca448d3c4cc5e8523d8e543f8a8f844f5b24745d28683a10956dd314df96dad491d9a125c06279f8ee8cddd8555b5dd2", 0xe1}], 0x4}}], 0x6, 0x24044080) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r0, 0xffffffffffff8000, 0x0, 0x6, 0x0, 0x1, {0x0, r5}}, 0x1) syz_io_uring_setup(0x945, &(0x7f00000002c0)={0x0, 0x632a}, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r8 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r12 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r12, 0x12, 0x0, r13) syz_io_uring_submit(r6, r10, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2004, @fd=r1, 0x10001, 0x4, 0x2, 0x6, 0x1, {0x1, r13}}, 0x9) 13:14:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="3801e901190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2125.890615] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11445 comm=syz-executor.5 [ 2125.920104] device syz_tun entered promiscuous mode [ 2125.945211] device syz_tun left promiscuous mode [ 2125.955633] FAULT_INJECTION: forcing a failure. [ 2125.955633] name failslab, interval 1, probability 0, space 0, times 0 [ 2125.958339] CPU: 1 PID: 11451 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2125.959925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2125.961829] Call Trace: [ 2125.962445] dump_stack+0x107/0x167 [ 2125.963287] should_fail.cold+0x5/0xa [ 2125.964179] ? xas_alloc+0x336/0x440 [ 2125.965040] should_failslab+0x5/0x20 [ 2125.965923] kmem_cache_alloc+0x5b/0x310 [ 2125.966870] xas_alloc+0x336/0x440 [ 2125.967700] xas_create+0x34a/0x10d0 [ 2125.968582] ? kernel_text_address+0xf2/0x120 [ 2125.969616] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2125.970822] xas_store+0x8c/0x1c40 [ 2125.971657] __xa_store+0x164/0x2d0 [ 2125.972515] ? xa_delete_node+0x280/0x280 [ 2125.973473] ? trace_hardirqs_on+0x5b/0x180 [ 2125.974482] xa_store+0x31/0x50 [ 2125.975247] __io_uring_add_tctx_node+0x1cf/0x520 [ 2125.976357] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2125.977553] ? alloc_fd+0x2e7/0x670 [ 2125.978405] io_uring_setup+0x1fbb/0x2980 [ 2125.979364] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2125.980532] ? wait_for_completion_io+0x270/0x270 [ 2125.981670] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2125.982869] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2125.984053] do_syscall_64+0x33/0x40 [ 2125.984914] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2125.986081] RIP: 0033:0x7fbb28dd6b19 [ 2125.986935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2125.991102] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2125.992852] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2125.994487] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2125.996136] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2125.997771] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2125.999400] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2126.007157] device syz_tun entered promiscuous mode [ 2126.049138] device syz_tun left promiscuous mode 13:14:24 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:14:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x20000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:14:24 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r4, &(0x7f0000000380)=0x1ff, r3, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:14:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010003190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:14:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) 13:14:24 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 42) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:14:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) socket$inet(0x2, 0xa, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) r2 = dup(r0) setns(r2, 0x2020000) syz_mount_image$ext4(&(0x7f0000000f40)='ext3\x00', &(0x7f0000000f80)='./file1/file0\x00', 0xffffffffffff0000, 0x7, &(0x7f0000001480)=[{&(0x7f0000000fc0)="d3b62a44265e1d26979b3c1b468d898b777617cde4c6f65b9d9efc2e4ed5c94873cc0895c4b0038f0b631b89706e3b18b2a4d2208aec1a9c0bc48b4ad2d1072ed6518c5c7078863ea04d66b21e83f47f0da926f405", 0x55, 0x2}, {&(0x7f0000001040)="76b5bbe1b56e7b9d237ce77a5cce7c4e29007cf8c86de780cdc8ded8ad8a7a12053fcade95f723384dd63c79bcf573ce4a1014a6a1ee6d4f998b36ee39dba839721c1cf92646f8e5039b401686bb717588f85d8f5f582b44f1208e30dafb2b5065153810111115fcab34e2388b8811daab82375b1bba25aeb5f0beab36256fadc662ede60520b1b5", 0x88, 0x9}, {&(0x7f0000001100)="0c4cb93f67ec1fc43ac83a6d242a7b542a", 0x11, 0xbf48}, {&(0x7f0000001240)="7b0d820169cb6f26fe45d10aad456bf24c7d80445bf061e276b56a45ee05e4eb9c3fa4b11c7546a1624c5396ecc3f292413d846c05068f37c330345c8e4cd48fe57bd875bd432107a7b8d6787b41b96b6111e98edfaddb720ac4abba10e0288a333ed8ed1bf96981fb7129b49b376ae04f771ed0a860a17b352225c5d877667306f9ace39d4e6a13b299b9c94d9f31769e295d014e18259e6560c58418982894fdf2598f259ca1", 0xa7, 0x1cf}, {&(0x7f0000001140)="35b8d59bfd637f95fa145aea0bad8c8a4c44f76cff2e838fe24c9d760a9cceffe4cf1c98cfdaf2d24ca484cf002891c5ccb579bd232ce9a1b59472ffdc48a767f27748b277c2f46bd2667c8e61df90a84d80fe488cf03b7faaf881ef5567", 0x5e, 0x3}, {&(0x7f0000001300)="2552c4bee32d3827c78ac358768bdc2abac12ae436b493258c6b9ef9f94cd4562edce52af7aef02a844b7ebbb883a686d589e73ebabde49f9c61e8d72d193bf3c976da5de21a9fd95fdf02fc4e05d56d3767ea81dc799fd7d78428d23a063cf1c2b2f5c779be784b3bfaebb392a740169cba2edaf54650c491027eca84f7", 0x7e, 0x80e}, {&(0x7f0000001380)="267017ec8f101fd10ca4ac0e87ba895cdd0bd0215ae205db578392e6458872c344b30c2db106ff9c795c4703e19527b3ea853a15c756fdacc90d18860684ea4c47168bf4579e67a8e38193c0b9f41e5a3616caa075eeecd940260fe7ad79759b1d5e2d2364ecd1abd45254c3feab6daff00f6aa479d0645dc5014d90bff42d24379fc3f19b4a719cb6816e7fe392e328e673c0e8c724523f17a1c64b96ecd79cf223f2f90b06988d9696c904ee31762a98a875fa0fe3793a3149c2783b78799046186e6ad896", 0xc6, 0x2}], 0x8, &(0x7f0000001680)=ANY=[@ANYBLOB='debug_want_extra_isize=0x0000000000000100,nobarrier,journal_ioprio=0x0000000000000002,i_version,max_dir_size_kb=0x0000000000000bc2,quota,stripe=0x0000000000000009,commit=0xffffffffffffff81,subj_type=,defcontext=user_u,subj_user=&,context=user_u,dont_measure,fowner<', @ANYRESDEC=0x0, @ANYBLOB="2c68ca326173682c736d61636b6673666c6f6f723d2f3a5d2f2f232d2c00"]) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000011c0)={0x0, 0xfffffffffffffffd, 0x0, 0x0, @scatter={0x9, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000140)=""/102, 0x66}, {&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000200)=""/127, 0x7f}, {&(0x7f0000000280)=""/188, 0xbc}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f0000000c80)=""/203, 0xcb}, {&(0x7f0000000d80)=""/222, 0xde}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DVD_READ_STRUCT(r3, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "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"}) r4 = timerfd_create(0x9, 0x800) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0x10000000}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x200) pipe(&(0x7f00000003c0)) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x2001c0, 0x10) 13:14:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) [ 2140.840780] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2140.843729] device syz_tun entered promiscuous mode [ 2140.846486] device syz_tun left promiscuous mode [ 2140.856687] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2140.870404] FAULT_INJECTION: forcing a failure. [ 2140.870404] name failslab, interval 1, probability 0, space 0, times 0 [ 2140.872845] CPU: 0 PID: 11476 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2140.874316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2140.876080] Call Trace: [ 2140.876653] dump_stack+0x107/0x167 [ 2140.877438] should_fail.cold+0x5/0xa [ 2140.878251] ? create_object.isra.0+0x3a/0xa30 [ 2140.879225] should_failslab+0x5/0x20 [ 2140.880037] kmem_cache_alloc+0x5b/0x310 [ 2140.880916] ? mark_held_locks+0x9e/0xe0 [ 2140.881787] create_object.isra.0+0x3a/0xa30 13:14:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wg1\x00'}) [ 2140.882728] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2140.883974] kmem_cache_alloc+0x159/0x310 [ 2140.884865] xas_alloc+0x336/0x440 [ 2140.884990] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11474 comm=syz-executor.5 [ 2140.885613] xas_create+0x34a/0x10d0 [ 2140.885643] ? kernel_text_address+0xf2/0x120 [ 2140.885672] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2140.890939] xas_store+0x8c/0x1c40 [ 2140.891706] __xa_store+0x164/0x2d0 [ 2140.892482] ? xa_delete_node+0x280/0x280 [ 2140.893364] ? trace_hardirqs_on+0x5b/0x180 [ 2140.894295] xa_store+0x31/0x50 [ 2140.894998] __io_uring_add_tctx_node+0x1cf/0x520 [ 2140.896074] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2140.897362] ? alloc_fd+0x2e7/0x670 [ 2140.898273] io_uring_setup+0x1fbb/0x2980 [ 2140.899296] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2140.900538] ? wait_for_completion_io+0x270/0x270 [ 2140.901743] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2140.903023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2140.904284] do_syscall_64+0x33/0x40 [ 2140.905203] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2140.906457] RIP: 0033:0x7fbb28dd6b19 [ 2140.907368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2140.911828] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2140.913688] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2140.915417] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2140.917164] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2140.918897] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2140.920633] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:14:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x21000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:14:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 13:14:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010005190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:14:24 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r4, &(0x7f0000000380)=0x1ff, r3, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:14:24 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 43) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:14:24 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2141.099139] device syz_tun entered promiscuous mode [ 2141.103650] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. 13:14:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x4000040, 0x100, 0x8000003}) write$P9_RREADLINK(r0, &(0x7f00000002c0)=ANY=[], 0x10) fallocate(r0, 0x3, 0x0, 0x30000000000) pwrite64(r0, &(0x7f0000000440)="83", 0x1, 0x0) [ 2141.110248] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11487 comm=syz-executor.5 13:14:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x22000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) [ 2141.180777] FAULT_INJECTION: forcing a failure. [ 2141.180777] name failslab, interval 1, probability 0, space 0, times 0 [ 2141.183636] CPU: 0 PID: 11493 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2141.185275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2141.187250] Call Trace: [ 2141.187817] dump_stack+0x107/0x167 [ 2141.188651] should_fail.cold+0x5/0xa [ 2141.189560] ? xas_alloc+0x336/0x440 [ 2141.190455] should_failslab+0x5/0x20 [ 2141.191358] kmem_cache_alloc+0x5b/0x310 [ 2141.192340] xas_alloc+0x336/0x440 [ 2141.193189] xas_create+0x34a/0x10d0 [ 2141.194087] ? kernel_text_address+0xf2/0x120 [ 2141.195161] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2141.196406] xas_store+0x8c/0x1c40 [ 2141.197177] __xa_store+0x164/0x2d0 [ 2141.198051] ? xa_delete_node+0x280/0x280 [ 2141.199062] ? trace_hardirqs_on+0x5b/0x180 [ 2141.200118] xa_store+0x31/0x50 [ 2141.200921] __io_uring_add_tctx_node+0x1cf/0x520 [ 2141.202088] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2141.203223] ? alloc_fd+0x2e7/0x670 [ 2141.204114] io_uring_setup+0x1fbb/0x2980 [ 2141.205144] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2141.206371] ? wait_for_completion_io+0x270/0x270 [ 2141.207572] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2141.208856] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2141.210109] do_syscall_64+0x33/0x40 [ 2141.210928] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2141.212124] RIP: 0033:0x7fbb28dd6b19 [ 2141.213049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2141.217411] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2141.219277] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2141.220810] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2141.222326] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2141.223845] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2141.225369] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:14:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) [ 2141.335981] device syz_tun left promiscuous mode [ 2141.340647] device syz_tun entered promiscuous mode [ 2141.343433] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. 13:14:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010006190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2141.365340] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11507 comm=syz-executor.5 [ 2141.393338] device syz_tun left promiscuous mode 13:14:25 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:14:39 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:14:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', r2, 0x29, 0x61, 0x0, 0x1, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @empty}, 0xc95e3831fd1f6e9a, 0x1, 0x0, 0x1}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6}, 0x10) 13:14:39 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 44) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:14:39 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) 13:14:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x23000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:14:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010007190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:14:39 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r4, &(0x7f0000000380)=0x1ff, r3, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:14:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xf3e842e79ef00914, 0x0) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f00000003c0)='-\xfcx{\xe6\xac\xc8\xdf\x8e;\xb4Wy\xbea\xac2@\xa7\\\x98\x1f\x9d\x00\x00\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x1010, r2, 0x0) accept(r2, &(0x7f0000000040)=@nfc, &(0x7f00000000c0)=0x80) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000180)={@private=0xa010100, @multicast1}, 0x8) r5 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f00000003c0)='-\xfcx{\xe6\xac\xc8\xdf\x8e;\xb4Wy\xbea\xac2@\xa7\\\x98\x1f\x9d\x00\x00\x00', 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f00000001c0)) dup3(r3, r4, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) r6 = gettid() process_vm_readv(r6, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x200018df}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 2155.431702] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11530 comm=syz-executor.5 [ 2155.440156] FAULT_INJECTION: forcing a failure. [ 2155.440156] name failslab, interval 1, probability 0, space 0, times 0 [ 2155.442860] CPU: 1 PID: 11535 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2155.444490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2155.446454] Call Trace: [ 2155.447078] dump_stack+0x107/0x167 [ 2155.447935] should_fail.cold+0x5/0xa [ 2155.448835] ? ___slab_alloc+0x155/0x700 [ 2155.449787] ? create_object.isra.0+0x3a/0xa30 [ 2155.450854] should_failslab+0x5/0x20 [ 2155.451749] kmem_cache_alloc+0x5b/0x310 [ 2155.452725] create_object.isra.0+0x3a/0xa30 [ 2155.453739] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2155.454929] kmem_cache_alloc+0x159/0x310 [ 2155.455909] xas_alloc+0x336/0x440 [ 2155.456751] xas_create+0x34a/0x10d0 [ 2155.457638] ? kernel_text_address+0xf2/0x120 [ 2155.458687] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2155.459919] xas_store+0x8c/0x1c40 [ 2155.460781] __xa_store+0x164/0x2d0 [ 2155.461627] ? xa_delete_node+0x280/0x280 [ 2155.462598] ? trace_hardirqs_on+0x5b/0x180 [ 2155.463605] xa_store+0x31/0x50 [ 2155.464394] __io_uring_add_tctx_node+0x1cf/0x520 [ 2155.465526] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2155.466741] ? alloc_fd+0x2e7/0x670 [ 2155.467598] io_uring_setup+0x1fbb/0x2980 [ 2155.468592] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2155.469772] ? wait_for_completion_io+0x270/0x270 [ 2155.470928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2155.472168] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2155.473591] do_syscall_64+0x33/0x40 [ 2155.474608] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2155.475852] RIP: 0033:0x7fbb28dd6b19 [ 2155.476760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2155.481146] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2155.483041] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2155.484879] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2155.486557] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2155.488324] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2155.490080] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:14:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x24000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:14:53 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x7, 0x6, 0x4, 0x0, 0x0, 0x5, 0x5, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_bp={&(0x7f00000001c0), 0x5}, 0x2, 0x7ff, 0x6, 0x6, 0x1, 0x6, 0x4, 0x0, 0x200, 0x0, 0x22}, 0xffffffffffffffff, 0x10, r0, 0x2) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r2) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, 0x0) r5 = accept4$packet(r4, 0x0, &(0x7f0000000180), 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000200)={0x3, 0x1}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 13:14:53 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 45) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:14:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010009190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:14:53 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:14:53 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) 13:14:53 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = accept4(r0, &(0x7f0000000040)=@phonet, &(0x7f00000000c0)=0x80, 0x800) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r2, 0x3, 0x6}, 0x10) socket$packet(0x11, 0x0, 0x300) 13:14:53 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2169.877174] FAULT_INJECTION: forcing a failure. [ 2169.877174] name failslab, interval 1, probability 0, space 0, times 0 [ 2169.878404] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11553 comm=syz-executor.5 [ 2169.878870] CPU: 1 PID: 11552 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2169.882316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2169.883534] Call Trace: [ 2169.883906] dump_stack+0x107/0x167 [ 2169.884439] should_fail.cold+0x5/0xa [ 2169.885004] ? xas_alloc+0x336/0x440 [ 2169.885545] should_failslab+0x5/0x20 [ 2169.886098] kmem_cache_alloc+0x5b/0x310 [ 2169.886693] xas_alloc+0x336/0x440 [ 2169.887214] xas_create+0x34a/0x10d0 [ 2169.887761] ? kernel_text_address+0xf2/0x120 [ 2169.888418] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2169.889192] xas_store+0x8c/0x1c40 [ 2169.889735] __xa_store+0x164/0x2d0 [ 2169.890266] ? xa_delete_node+0x280/0x280 [ 2169.890874] ? trace_hardirqs_on+0x5b/0x180 [ 2169.891507] xa_store+0x31/0x50 [ 2169.891987] __io_uring_add_tctx_node+0x1cf/0x520 [ 2169.892731] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2169.893497] ? alloc_fd+0x2e7/0x670 [ 2169.894040] io_uring_setup+0x1fbb/0x2980 [ 2169.894653] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2169.895393] ? wait_for_completion_io+0x270/0x270 [ 2169.896241] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2169.897039] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2169.897908] do_syscall_64+0x33/0x40 [ 2169.898448] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2169.899191] RIP: 0033:0x7fbb28dd6b19 [ 2169.899727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2169.902394] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2169.903492] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2169.904518] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2169.905558] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2169.906585] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2169.907562] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:14:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="3801000f190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:14:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) 13:14:53 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x3, 0x6}, 0x10) 13:14:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x25000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:14:53 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:14:53 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 46) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:14:53 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2170.128187] device syz_tun entered promiscuous mode [ 2170.129010] device syz_tun left promiscuous mode 13:14:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38013e1e190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2170.130781] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11571 comm=syz-executor.5 13:14:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x26000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) [ 2170.257301] FAULT_INJECTION: forcing a failure. [ 2170.257301] name failslab, interval 1, probability 0, space 0, times 0 [ 2170.258825] CPU: 1 PID: 11580 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2170.259662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2170.260677] Call Trace: [ 2170.261011] dump_stack+0x107/0x167 [ 2170.261462] should_fail.cold+0x5/0xa [ 2170.261930] ? ___slab_alloc+0x155/0x700 [ 2170.262432] ? create_object.isra.0+0x3a/0xa30 [ 2170.262995] should_failslab+0x5/0x20 [ 2170.263462] kmem_cache_alloc+0x5b/0x310 [ 2170.263947] create_object.isra.0+0x3a/0xa30 [ 2170.264487] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2170.265099] kmem_cache_alloc+0x159/0x310 [ 2170.265611] xas_alloc+0x336/0x440 [ 2170.266048] xas_create+0x34a/0x10d0 [ 2170.266512] ? kernel_text_address+0xf2/0x120 [ 2170.267059] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2170.267703] xas_store+0x8c/0x1c40 [ 2170.268144] __xa_store+0x164/0x2d0 [ 2170.268590] ? xa_delete_node+0x280/0x280 [ 2170.269106] ? trace_hardirqs_on+0x5b/0x180 [ 2170.269638] xa_store+0x31/0x50 [ 2170.270046] __io_uring_add_tctx_node+0x1cf/0x520 [ 2170.270630] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2170.271262] ? alloc_fd+0x2e7/0x670 [ 2170.271710] io_uring_setup+0x1fbb/0x2980 [ 2170.272223] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2170.272844] ? wait_for_completion_io+0x270/0x270 [ 2170.273444] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2170.274075] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2170.274705] do_syscall_64+0x33/0x40 [ 2170.275160] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2170.275786] RIP: 0033:0x7fbb28dd6b19 [ 2170.276226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2170.278474] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2170.279374] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2170.280241] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2170.281094] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2170.281955] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2170.282820] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2170.332674] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11584 comm=syz-executor.5 13:15:12 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x2000}, 0x4) 13:15:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) 13:15:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="3801002f190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:15:12 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:15:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x27000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:15:12 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 47) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:15:12 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:15:12 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r4, &(0x7f0000000380)=0x1ff, r3, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2188.584319] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11600 comm=syz-executor.5 [ 2188.587227] device syz_tun entered promiscuous mode [ 2188.588876] FAULT_INJECTION: forcing a failure. [ 2188.588876] name failslab, interval 1, probability 0, space 0, times 0 [ 2188.591070] CPU: 0 PID: 11602 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2188.592441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2188.594162] Call Trace: [ 2188.594679] dump_stack+0x107/0x167 [ 2188.594924] device syz_tun left promiscuous mode [ 2188.595383] should_fail.cold+0x5/0xa [ 2188.595404] ? xas_alloc+0x336/0x440 [ 2188.595430] should_failslab+0x5/0x20 [ 2188.598639] kmem_cache_alloc+0x5b/0x310 [ 2188.599426] xas_alloc+0x336/0x440 [ 2188.600121] xas_create+0x34a/0x10d0 [ 2188.600842] ? kernel_text_address+0xf2/0x120 [ 2188.601716] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2188.602726] xas_store+0x8c/0x1c40 [ 2188.603426] __xa_store+0x164/0x2d0 [ 2188.604133] ? xa_delete_node+0x280/0x280 [ 2188.604947] ? trace_hardirqs_on+0x5b/0x180 [ 2188.605781] xa_store+0x31/0x50 [ 2188.606415] __io_uring_add_tctx_node+0x1cf/0x520 [ 2188.607338] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2188.608341] ? alloc_fd+0x2e7/0x670 [ 2188.609075] io_uring_setup+0x1fbb/0x2980 [ 2188.609883] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2188.610853] ? wait_for_completion_io+0x270/0x270 [ 2188.611800] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2188.612804] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2188.613807] do_syscall_64+0x33/0x40 [ 2188.614521] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2188.615502] RIP: 0033:0x7fbb28dd6b19 [ 2188.616211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2188.619716] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2188.621172] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2188.622527] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f 13:15:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38011e3e190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2188.623877] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2188.625521] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2188.627077] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2188.639653] device syz_tun entered promiscuous mode [ 2188.641352] device syz_tun left promiscuous mode 13:15:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x28000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:15:12 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r4, &(0x7f0000000380)=0x1ff, r3, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:15:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) 13:15:12 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80020014) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_vlan\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000180)) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000080)={0xb14, 0x1}) 13:15:12 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 48) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) [ 2188.825299] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11614 comm=syz-executor.5 13:15:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010041190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:15:12 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:15:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x411e0000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:15:12 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f00000003c0)='-\xfcx{\xe6\xac\xc8\xdf\x8e;\xb4Wy\xbea\xac2@\xa7\\\x98\x1f\x9d\x00\x00\x00', 0x0) fcntl$setpipe(r1, 0x407, 0x1875) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x3fb, 0x4) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 2188.977411] FAULT_INJECTION: forcing a failure. [ 2188.977411] name failslab, interval 1, probability 0, space 0, times 0 [ 2188.979241] CPU: 0 PID: 11624 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2188.980339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2188.981605] Call Trace: [ 2188.982030] dump_stack+0x107/0x167 [ 2188.982612] should_fail.cold+0x5/0xa [ 2188.983214] ? create_object.isra.0+0x3a/0xa30 [ 2188.983931] should_failslab+0x5/0x20 [ 2188.984533] kmem_cache_alloc+0x5b/0x310 [ 2188.985180] ? mark_held_locks+0x9e/0xe0 [ 2188.985822] create_object.isra.0+0x3a/0xa30 [ 2188.986511] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2188.987314] kmem_cache_alloc+0x159/0x310 [ 2188.987969] xas_alloc+0x336/0x440 [ 2188.988536] xas_create+0x34a/0x10d0 [ 2188.989131] ? kernel_text_address+0xf2/0x120 [ 2188.989837] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2188.990666] xas_store+0x8c/0x1c40 [ 2188.991236] __xa_store+0x164/0x2d0 [ 2188.991812] ? xa_delete_node+0x280/0x280 [ 2188.992468] ? trace_hardirqs_on+0x5b/0x180 [ 2188.993163] xa_store+0x31/0x50 [ 2188.993686] __io_uring_add_tctx_node+0x1cf/0x520 [ 2188.994447] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2188.995267] ? alloc_fd+0x2e7/0x670 [ 2188.995845] io_uring_setup+0x1fbb/0x2980 [ 2188.996501] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2188.997294] ? wait_for_completion_io+0x270/0x270 [ 2188.998071] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2188.998888] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2188.999696] do_syscall_64+0x33/0x40 [ 2189.000272] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2189.001080] RIP: 0033:0x7fbb28dd6b19 [ 2189.001664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2189.004529] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2189.005732] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2189.006799] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2189.007915] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2189.008990] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2189.010106] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2189.152373] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11634 comm=syz-executor.5 13:15:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000ed5f850000", @ANYRES32=r3, @ANYBLOB="0897c0a04879b924642910469625f0d42604b8a70d8220dc8411a98cc7c43fd3f7b957ca903ee4d3ac40870ec888453d55f045821564a2128608616caf21e12c53097b9c20ab9e4a2cc4b5ba78647c1565ebc64d997689b059ef347d9896364eede2ce4581fa5fd3161858c52712441d147275151166ab21b788a2044e26de4ad1f28ed407884ffa842aa0f0d0f0c23ee5705ccc4ececa607703123bceb06b9acadbe34f0da72377009f853f83ede570752ca40ff7db65471120e2ab5b731bbe953542d40ccc8d17112f47bbd7c77b0a472c9cd07ea7475b4624a40f6b97caae917275be4011854af9bab49f331d8d842da3bd206ed7afe2b6"], 0x20}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@local, 0x33, r3}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 13:15:27 executing program 3: semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r0 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r0, 0x0, 0xb) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000100)=[{0x3, 0x52e5, 0x1000}, {0x4, 0x40, 0x1800}, {0x4, 0xffd1}], 0x3, &(0x7f0000000180)={r1, r2+60000000}) r3 = semget$private(0x0, 0x4000, 0x0) semtimedop(r3, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(r3, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = semget$private(0x0, 0x6, 0x0) semop(r4, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) r5 = semget$private(0x0, 0x2, 0x0) semtimedop(r5, &(0x7f0000000140)=[{}], 0x1, 0x0) semctl$IPC_RMID(r5, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x4, 0x1, 0x800}, {0x1, 0x4}, {0x4, 0x6}], 0x3, &(0x7f0000000080)={0x77359400}) r6 = semget(0x3, 0x0, 0x0) semctl$SEM_INFO(r6, 0x2, 0x13, &(0x7f0000000240)=""/85) unshare(0x48020200) 13:15:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x48000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:15:27 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 49) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:15:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 13:15:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010048190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:15:27 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:15:27 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r4, &(0x7f0000000380)=0x1ff, r3, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2203.763361] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11649 comm=syz-executor.5 [ 2203.774565] device syz_tun entered promiscuous mode [ 2203.779498] FAULT_INJECTION: forcing a failure. [ 2203.779498] name failslab, interval 1, probability 0, space 0, times 0 [ 2203.782960] CPU: 1 PID: 11646 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2203.785073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2203.787562] Call Trace: [ 2203.788250] dump_stack+0x107/0x167 [ 2203.789207] should_fail.cold+0x5/0xa [ 2203.790185] ? create_object.isra.0+0x3a/0xa30 [ 2203.791348] should_failslab+0x5/0x20 [ 2203.792324] kmem_cache_alloc+0x5b/0x310 [ 2203.793379] ? mark_held_locks+0x9e/0xe0 [ 2203.794388] create_object.isra.0+0x3a/0xa30 [ 2203.795320] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2203.796407] kmem_cache_alloc+0x159/0x310 [ 2203.797309] xas_alloc+0x336/0x440 [ 2203.798077] xas_create+0x34a/0x10d0 [ 2203.798882] ? kernel_text_address+0xf2/0x120 [ 2203.799833] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2203.800947] xas_store+0x8c/0x1c40 [ 2203.801736] __xa_store+0x164/0x2d0 [ 2203.802509] ? xa_delete_node+0x280/0x280 [ 2203.803411] ? trace_hardirqs_on+0x5b/0x180 [ 2203.804335] xa_store+0x31/0x50 [ 2203.805038] __io_uring_add_tctx_node+0x1cf/0x520 [ 2203.806076] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2203.807185] ? alloc_fd+0x2e7/0x670 [ 2203.807975] io_uring_setup+0x1fbb/0x2980 [ 2203.808870] ? __do_sys_io_uring_enter+0x1890/0x1890 13:15:27 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2203.809948] ? wait_for_completion_io+0x270/0x270 [ 2203.811165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2203.812277] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2203.813387] do_syscall_64+0x33/0x40 [ 2203.814289] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2203.815379] RIP: 0033:0x7fbb28dd6b19 13:15:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 2203.816424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2203.820764] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2203.822495] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2203.824323] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2203.826128] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2203.827643] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2203.829400] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2203.844211] device syz_tun left promiscuous mode [ 2203.865028] device syz_tun entered promiscuous mode [ 2203.876338] device syz_tun left promiscuous mode 13:15:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="3801004c190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:15:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x4c000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) [ 2204.061341] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11667 comm=syz-executor.5 13:15:41 executing program 3: r0 = syz_io_uring_setup(0x1d33, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0xb, 0x13, r0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) io_uring_enter(r0, 0x24f6, 0x488, 0x0, &(0x7f0000000100)={[0x3ff]}, 0x8) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r4}}, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 13:15:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 13:15:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x68000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:15:41 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:15:41 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 50) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:15:41 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000180)=0x10, 0x800) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) r5 = dup3(r3, r4, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) signalfd(r6, &(0x7f0000000080)={[0x5]}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r7, 0x3, 0x6}, 0x10) 13:15:41 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r4, &(0x7f0000000380)=0x1ff, r3, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:15:41 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010068190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2217.360802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2217.368500] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11686 comm=syz-executor.5 [ 2217.373276] FAULT_INJECTION: forcing a failure. [ 2217.373276] name failslab, interval 1, probability 0, space 0, times 0 [ 2217.376116] CPU: 1 PID: 11684 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2217.377885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2217.379705] Call Trace: [ 2217.380281] dump_stack+0x107/0x167 [ 2217.381063] should_fail.cold+0x5/0xa [ 2217.381895] ? create_object.isra.0+0x3a/0xa30 [ 2217.382875] should_failslab+0x5/0x20 [ 2217.383896] kmem_cache_alloc+0x5b/0x310 [ 2217.384882] ? mark_held_locks+0x9e/0xe0 [ 2217.385755] create_object.isra.0+0x3a/0xa30 [ 2217.386684] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2217.387760] kmem_cache_alloc+0x159/0x310 [ 2217.388639] xas_alloc+0x336/0x440 [ 2217.389398] xas_create+0x34a/0x10d0 [ 2217.390201] ? kernel_text_address+0xf2/0x120 [ 2217.391149] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2217.392255] xas_store+0x8c/0x1c40 [ 2217.393028] __xa_store+0x164/0x2d0 [ 2217.393802] ? xa_delete_node+0x280/0x280 [ 2217.394686] ? trace_hardirqs_on+0x5b/0x180 [ 2217.395601] xa_store+0x31/0x50 [ 2217.396304] __io_uring_add_tctx_node+0x1cf/0x520 [ 2217.397328] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2217.398427] ? alloc_fd+0x2e7/0x670 [ 2217.399211] io_uring_setup+0x1fbb/0x2980 [ 2217.400097] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2217.401168] ? wait_for_completion_io+0x270/0x270 [ 2217.402223] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2217.403329] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2217.404541] do_syscall_64+0x33/0x40 [ 2217.405345] entry_SYSCALL_64_after_hwframe+0x67/0xd1 13:15:41 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r4, &(0x7f0000000380)=0x1ff, r3, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2217.406438] RIP: 0033:0x7fbb28dd6b19 [ 2217.407436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2217.411806] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2217.413649] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2217.415450] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2217.417180] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2217.419046] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2217.420908] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:15:41 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2217.451120] device syz_tun entered promiscuous mode [ 2217.452486] device syz_tun left promiscuous mode 13:15:41 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="3801006c190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2217.464172] device syz_tun entered promiscuous mode [ 2217.465395] device syz_tun left promiscuous mode [ 2217.512744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2217.514387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2217.610180] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2217.684521] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11705 comm=syz-executor.5 13:15:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x6c000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:15:41 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x30) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000180)={0x0, 0x7, @status={[0x10001, 0x8, 0x221c, 0x6aa, 0xffffffff, 0x8]}, [0x2, 0x7, 0xfffffffffffffffd, 0x0, 0x80, 0x1, 0xbd, 0xb6, 0x7, 0x100, 0x4, 0x7, 0x80000001, 0x923f, 0x7, 0x6, 0x4, 0x2, 0x5, 0x800, 0xf62, 0x6, 0x9, 0x1, 0x0, 0x0, 0x2, 0x0, 0x3ff, 0x3, 0x0, 0x100, 0xbb, 0x3ff, 0x4c, 0x629, 0x6, 0x3f800, 0x7fff, 0x9, 0x3f, 0x5, 0x3, 0xbd, 0x3, 0x7fffffff, 0x100000000, 0xdb, 0x1, 0x5, 0x3, 0xcb, 0x8, 0x2, 0x10000, 0x6, 0x5, 0x3, 0xffff, 0xfff, 0x7fffffff, 0x60000000, 0xb, 0x7fffffff]}) 13:15:41 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010074190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:15:41 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r4, &(0x7f0000000380)=0x1ff, r3, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:15:41 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 51) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:15:41 executing program 3: getsockname(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr, &(0x7f00000001c0)=0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="be468b75a0e2e5ef32732e48e16800b9", 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x34) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="140000e500ece3ffffffffffff000000"], 0x10}}], 0x2, 0x0) 13:15:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x74000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:15:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 1) [ 2217.770453] FAULT_INJECTION: forcing a failure. [ 2217.770453] name failslab, interval 1, probability 0, space 0, times 0 [ 2217.772032] CPU: 0 PID: 11711 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2217.772967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2217.774103] Call Trace: [ 2217.774465] dump_stack+0x107/0x167 [ 2217.774961] should_fail.cold+0x5/0xa [ 2217.775487] ? alloc_pipe_info+0x10a/0x590 [ 2217.776060] should_failslab+0x5/0x20 [ 2217.776575] kmem_cache_alloc_trace+0x55/0x320 [ 2217.777213] alloc_pipe_info+0x10a/0x590 [ 2217.777778] splice_direct_to_actor+0x774/0x980 [ 2217.778412] ? _cond_resched+0x10/0x30 [ 2217.778942] ? inode_security+0x107/0x140 [ 2217.779500] ? pipe_to_sendpage+0x380/0x380 [ 2217.780086] ? avc_policy_seqno+0x9/0x70 [ 2217.780642] ? selinux_file_permission+0x92/0x520 [ 2217.781306] ? do_splice_to+0x160/0x160 [ 2217.781851] ? security_file_permission+0xb1/0xe0 [ 2217.782508] do_splice_direct+0x1c4/0x290 [ 2217.783070] ? splice_direct_to_actor+0x980/0x980 [ 2217.783720] ? avc_policy_seqno+0x9/0x70 [ 2217.784273] ? security_file_permission+0xb1/0xe0 [ 2217.784932] do_sendfile+0x553/0x11e0 [ 2217.785464] ? do_pwritev+0x270/0x270 [ 2217.785976] ? wait_for_completion_io+0x270/0x270 [ 2217.786626] ? rcu_read_lock_any_held+0x75/0xa0 [ 2217.787248] ? vfs_write+0x354/0xb10 [ 2217.787751] __x64_sys_sendfile64+0x1d1/0x210 [ 2217.788351] ? __ia32_sys_sendfile+0x220/0x220 [ 2217.788969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2217.789677] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2217.790378] do_syscall_64+0x33/0x40 [ 2217.790879] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2217.791567] RIP: 0033:0x7f4ef9c71b19 [ 2217.792067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2217.794542] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2217.795562] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2217.796517] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2217.797478] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2217.798450] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 2217.799404] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 [ 2217.840665] FAULT_INJECTION: forcing a failure. [ 2217.840665] name failslab, interval 1, probability 0, space 0, times 0 [ 2217.843794] CPU: 1 PID: 11717 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2217.845254] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2217.846992] Call Trace: [ 2217.847548] dump_stack+0x107/0x167 [ 2217.848310] should_fail.cold+0x5/0xa [ 2217.849111] ? xas_alloc+0x336/0x440 [ 2217.849907] should_failslab+0x5/0x20 [ 2217.850698] kmem_cache_alloc+0x5b/0x310 [ 2217.851557] xas_alloc+0x336/0x440 [ 2217.852297] xas_create+0x34a/0x10d0 [ 2217.853099] ? kernel_text_address+0xf2/0x120 [ 2217.854048] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2217.855156] xas_store+0x8c/0x1c40 [ 2217.855926] __xa_store+0x164/0x2d0 [ 2217.856704] ? xa_delete_node+0x280/0x280 [ 2217.857597] ? trace_hardirqs_on+0x5b/0x180 [ 2217.858516] xa_store+0x31/0x50 [ 2217.859219] __io_uring_add_tctx_node+0x1cf/0x520 [ 2217.860236] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2217.861348] ? alloc_fd+0x2e7/0x670 [ 2217.862128] io_uring_setup+0x1fbb/0x2980 [ 2217.863018] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2217.864091] ? wait_for_completion_io+0x270/0x270 [ 2217.865131] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2217.866344] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2217.867432] do_syscall_64+0x33/0x40 [ 2217.868212] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2217.869307] RIP: 0033:0x7fbb28dd6b19 [ 2217.870097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2217.873994] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2217.875594] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2217.877103] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2217.878618] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2217.880116] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2217.881642] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2217.911903] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11727 comm=syz-executor.5 13:15:41 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:15:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="3801007a190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:15:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 2) 13:15:55 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:15:55 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 52) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:15:55 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6erspan0\x00'}) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) dup3(r3, r4, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) 13:15:55 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r4, &(0x7f0000000380)=0x1ff, r3, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:15:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x7a000000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:15:55 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x5, 0x4, 0x4, 0x20080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000006}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8dc50, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x10000, 0x40, 0x0, 0x0, 0x7}, 0x0, 0xbffffffffffbffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) quotactl(0x1, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000180)="d60a2419ac31ed55215da2d0a9c41bb285f83e1edf44de09757f2a868e24d6afe9551035cb81bb774c61c66e223939413660ae94b6e45829f0b59826") r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x80000000) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x0, 0x4, 0xfff, 0x57a, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) r6 = open(&(0x7f0000000240)='./file0\x00', 0x442940, 0x150) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r6) [ 2232.107016] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11746 comm=syz-executor.5 [ 2232.130622] device syz_tun entered promiscuous mode [ 2232.134312] FAULT_INJECTION: forcing a failure. [ 2232.134312] name failslab, interval 1, probability 0, space 0, times 0 [ 2232.136594] CPU: 1 PID: 11747 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2232.137945] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2232.139607] Call Trace: [ 2232.140136] dump_stack+0x107/0x167 [ 2232.140866] should_fail.cold+0x5/0xa [ 2232.141636] ? create_object.isra.0+0x3a/0xa30 [ 2232.142553] should_failslab+0x5/0x20 [ 2232.143313] kmem_cache_alloc+0x5b/0x310 [ 2232.144130] create_object.isra.0+0x3a/0xa30 [ 2232.145003] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2232.146139] kmem_cache_alloc_trace+0x151/0x320 [ 2232.147128] alloc_pipe_info+0x10a/0x590 [ 2232.148087] splice_direct_to_actor+0x774/0x980 [ 2232.149018] ? _cond_resched+0x10/0x30 [ 2232.149801] ? inode_security+0x107/0x140 [ 2232.150621] ? pipe_to_sendpage+0x380/0x380 [ 2232.151478] ? avc_policy_seqno+0x9/0x70 [ 2232.152287] ? selinux_file_permission+0x92/0x520 [ 2232.153244] ? do_splice_to+0x160/0x160 [ 2232.154039] ? security_file_permission+0xb1/0xe0 [ 2232.154998] do_splice_direct+0x1c4/0x290 [ 2232.155817] ? splice_direct_to_actor+0x980/0x980 [ 2232.156765] ? avc_policy_seqno+0x9/0x70 [ 2232.157585] ? security_file_permission+0xb1/0xe0 [ 2232.158551] do_sendfile+0x553/0x11e0 [ 2232.159322] ? do_pwritev+0x270/0x270 [ 2232.160082] ? wait_for_completion_io+0x270/0x270 [ 2232.161045] ? rcu_read_lock_any_held+0x75/0xa0 [ 2232.161968] ? vfs_write+0x354/0xb10 [ 2232.162708] __x64_sys_sendfile64+0x1d1/0x210 [ 2232.163589] ? __ia32_sys_sendfile+0x220/0x220 [ 2232.164495] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2232.165538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2232.166634] do_syscall_64+0x33/0x40 [ 2232.167409] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2232.168408] RIP: 0033:0x7f4ef9c71b19 [ 2232.169134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2232.172887] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2232.174600] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2232.176130] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2232.177739] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2232.179306] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 2232.180698] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 [ 2232.187125] FAULT_INJECTION: forcing a failure. [ 2232.187125] name failslab, interval 1, probability 0, space 0, times 0 [ 2232.189410] CPU: 1 PID: 11750 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2232.190760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2232.192525] Call Trace: [ 2232.193087] dump_stack+0x107/0x167 [ 2232.193958] should_fail.cold+0x5/0xa [ 2232.194743] ? create_object.isra.0+0x3a/0xa30 [ 2232.195639] should_failslab+0x5/0x20 [ 2232.196382] kmem_cache_alloc+0x5b/0x310 [ 2232.197174] ? mark_held_locks+0x9e/0xe0 [ 2232.197975] create_object.isra.0+0x3a/0xa30 [ 2232.198826] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2232.199945] kmem_cache_alloc+0x159/0x310 [ 2232.200884] xas_alloc+0x336/0x440 [ 2232.201638] xas_create+0x34a/0x10d0 [ 2232.202423] ? kernel_text_address+0xf2/0x120 [ 2232.203428] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2232.204570] xas_store+0x8c/0x1c40 [ 2232.205278] __xa_store+0x164/0x2d0 [ 2232.205995] ? xa_delete_node+0x280/0x280 [ 2232.206810] ? trace_hardirqs_on+0x5b/0x180 [ 2232.207690] xa_store+0x31/0x50 [ 2232.208377] __io_uring_add_tctx_node+0x1cf/0x520 [ 2232.209539] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2232.210575] ? alloc_fd+0x2e7/0x670 [ 2232.211362] io_uring_setup+0x1fbb/0x2980 [ 2232.212311] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2232.213363] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2232.214480] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2232.215637] do_syscall_64+0x33/0x40 [ 2232.216389] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2232.217376] RIP: 0033:0x7fbb28dd6b19 [ 2232.218168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2232.221853] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2232.223525] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2232.224996] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2232.226424] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2232.227927] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2232.229407] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:15:55 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r4, &(0x7f0000000380)=0x1ff, r3, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:15:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="380101e9190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:15:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x9effffff, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:15:56 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 53) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) [ 2232.385343] device syz_tun left promiscuous mode [ 2232.397808] device syz_tun entered promiscuous mode [ 2232.441083] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11766 comm=syz-executor.5 13:15:56 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2232.470651] device syz_tun left promiscuous mode 13:15:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x6}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)={'syz1', "bdee96135bd79722bc94f0296f875b3f337562460597a192093928045c6a98bc81b7d3fad43b8b59776842803e86010236e535d46a87b203e6539b7f678cdd625f03299680923b66bd40d8a0dd66fb9d17c88f0783744f3152e92e5255c13a1ecb27a94426aaae1488747d660c4bd56e294ac1b182ff4a25b1813c6124b05e31b1d0f19a2ac6130990c72c6edb3fe932eb5278030811245782a164b5c54f1e88488e9f3b6c634f"}, 0xab) 13:15:56 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200000000000005e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xe}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/2090], 0x74a) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x1, &(0x7f00000000c0)={{0x77359400}}, &(0x7f0000000440)) timer_delete(r1) timer_gettime(r1, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(r1, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000240)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x29, 0x0, @tid=r3}, &(0x7f0000000200)) 13:15:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xe8010000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) [ 2232.582711] FAULT_INJECTION: forcing a failure. [ 2232.582711] name failslab, interval 1, probability 0, space 0, times 0 [ 2232.585666] CPU: 0 PID: 11770 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2232.587285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2232.589108] Call Trace: [ 2232.589705] dump_stack+0x107/0x167 [ 2232.590514] should_fail.cold+0x5/0xa [ 2232.591355] ? xas_alloc+0x336/0x440 [ 2232.592169] should_failslab+0x5/0x20 [ 2232.593013] kmem_cache_alloc+0x5b/0x310 [ 2232.593923] xas_alloc+0x336/0x440 [ 2232.594713] xas_create+0x34a/0x10d0 [ 2232.595542] ? kernel_text_address+0xf2/0x120 [ 2232.596531] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2232.597703] xas_store+0x8c/0x1c40 [ 2232.598507] __xa_store+0x164/0x2d0 [ 2232.599303] ? xa_delete_node+0x280/0x280 [ 2232.600212] ? trace_hardirqs_on+0x5b/0x180 [ 2232.601159] xa_store+0x31/0x50 [ 2232.601893] __io_uring_add_tctx_node+0x1cf/0x520 [ 2232.602939] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2232.604077] ? alloc_fd+0x2e7/0x670 [ 2232.604882] io_uring_setup+0x1fbb/0x2980 [ 2232.605799] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2232.606742] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2232.607850] ? tick_program_event+0xa8/0x140 [ 2232.608831] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2232.609984] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2232.611110] do_syscall_64+0x33/0x40 [ 2232.611921] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2232.613021] RIP: 0033:0x7fbb28dd6b19 [ 2232.613834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2232.617809] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2232.619450] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2232.620986] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2232.622531] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2232.624062] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2232.625595] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2232.838348] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11784 comm=syz-executor.5 13:16:10 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:16:10 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="380100f0190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:16:10 executing program 3: fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='mand\x00', &(0x7f0000000000)='-\xfcx{\xe6\xac\xc8\xdf\x8e;\xb4Wy\xbea\xac2@\xa7\\\x98\x1f\x9d\x00\x00\x00', 0x0) r1 = fsmount(r0, 0x23f7366ab008d90e, 0x9) fremovexattr(r1, &(0x7f00000002c0)=@random={'user.', '-+:^\x00'}) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d53, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2c726602f96fbd", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,cache=none,\x00']) r5 = creat(0x0, 0x0) r6 = syz_io_uring_setup(0x4d4f, &(0x7f0000000040)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) fcntl$getownex(r6, 0x10, &(0x7f0000000180)={0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x81, 0x40, 0x1, 0x8, 0x0, 0x3c7bcee4, 0x40020, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x190, 0x1ff, 0x3f, 0x5, 0x1ff, 0x7fff, 0x4, 0x0, 0x9, 0x0, 0x6388cc53}, r7, 0x7, r5, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x9, 0x9, 0x50, 0x3, 0x0, 0x100000001, 0x80, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x8, 0x9}, 0x10004, 0x5, 0x4, 0x8, 0x81, 0x8, 0xda, 0x0, 0x82a4, 0x0, 0x251}, r7, 0x5, 0xffffffffffffffff, 0x0) 13:16:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 3) 13:16:10 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r4, &(0x7f0000000380)=0x1ff, r3, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:16:10 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 54) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:16:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x4, 0x1, 0x2, 0xffffffff, 0xb, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8, 0x8000, 0x7c6d, 0x7}}) 13:16:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xf0ffffff, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) [ 2247.316541] FAULT_INJECTION: forcing a failure. [ 2247.316541] name failslab, interval 1, probability 0, space 0, times 0 [ 2247.318894] CPU: 1 PID: 11795 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2247.320362] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2247.322111] Call Trace: [ 2247.322671] dump_stack+0x107/0x167 [ 2247.323444] should_fail.cold+0x5/0xa [ 2247.324252] ? alloc_pipe_info+0x1e5/0x590 [ 2247.325139] should_failslab+0x5/0x20 [ 2247.325951] __kmalloc+0x72/0x390 [ 2247.326691] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2247.327772] alloc_pipe_info+0x1e5/0x590 [ 2247.328640] splice_direct_to_actor+0x774/0x980 [ 2247.329592] ? _cond_resched+0x10/0x30 [ 2247.330429] ? inode_security+0x107/0x140 [ 2247.331318] ? pipe_to_sendpage+0x380/0x380 [ 2247.332235] ? avc_policy_seqno+0x9/0x70 [ 2247.333105] ? selinux_file_permission+0x92/0x520 [ 2247.334140] ? do_splice_to+0x160/0x160 [ 2247.334960] ? security_file_permission+0xb1/0xe0 [ 2247.335955] do_splice_direct+0x1c4/0x290 [ 2247.336840] ? splice_direct_to_actor+0x980/0x980 [ 2247.338099] ? avc_policy_seqno+0x9/0x70 [ 2247.339257] ? security_file_permission+0xb1/0xe0 [ 2247.340369] do_sendfile+0x553/0x11e0 [ 2247.341171] ? do_pwritev+0x270/0x270 [ 2247.342150] ? wait_for_completion_io+0x270/0x270 [ 2247.343490] ? rcu_read_lock_any_held+0x75/0xa0 [ 2247.344508] ? vfs_write+0x354/0xb10 [ 2247.345505] __x64_sys_sendfile64+0x1d1/0x210 [ 2247.346711] ? __ia32_sys_sendfile+0x220/0x220 [ 2247.347848] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2247.349266] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2247.350349] do_syscall_64+0x33/0x40 [ 2247.351142] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2247.352369] RIP: 0033:0x7f4ef9c71b19 [ 2247.353416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2247.357721] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2247.359756] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2247.361432] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2247.363250] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2247.364813] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 2247.366619] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 [ 2247.371143] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11804 comm=syz-executor.5 13:16:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="380100000f0001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2247.380961] FAULT_INJECTION: forcing a failure. [ 2247.380961] name failslab, interval 1, probability 0, space 0, times 0 [ 2247.383261] CPU: 1 PID: 11799 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2247.384679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2247.386372] Call Trace: [ 2247.386910] dump_stack+0x107/0x167 [ 2247.387652] should_fail.cold+0x5/0xa [ 2247.388424] ? create_object.isra.0+0x3a/0xa30 [ 2247.389348] should_failslab+0x5/0x20 [ 2247.390126] kmem_cache_alloc+0x5b/0x310 [ 2247.390962] ? mark_held_locks+0x9e/0xe0 [ 2247.391787] create_object.isra.0+0x3a/0xa30 [ 2247.392677] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2247.393719] kmem_cache_alloc+0x159/0x310 [ 2247.394578] xas_alloc+0x336/0x440 [ 2247.395301] xas_create+0x34a/0x10d0 [ 2247.396073] ? kernel_text_address+0xf2/0x120 [ 2247.396978] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2247.398065] xas_store+0x8c/0x1c40 [ 2247.398819] __xa_store+0x164/0x2d0 [ 2247.399564] ? xa_delete_node+0x280/0x280 [ 2247.400421] ? trace_hardirqs_on+0x5b/0x180 [ 2247.401302] xa_store+0x31/0x50 [ 2247.401993] __io_uring_add_tctx_node+0x1cf/0x520 [ 2247.402985] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2247.404052] ? alloc_fd+0x2e7/0x670 [ 2247.404813] io_uring_setup+0x1fbb/0x2980 [ 2247.405675] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2247.406712] ? wait_for_completion_io+0x270/0x270 [ 2247.407740] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2247.408810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2247.409880] do_syscall_64+0x33/0x40 [ 2247.410641] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2247.411681] RIP: 0033:0x7fbb28dd6b19 [ 2247.412433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2247.416158] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2247.417735] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2247.419195] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2247.420657] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2247.422114] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2247.423565] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2247.524739] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=11810 comm=syz-executor.1 13:16:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xffffe000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:16:11 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 55) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:16:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 4) 13:16:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @local, 0xffffffff}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="e726d74be4c25bd8ea5a30ae3c873c9802eba1dc866deae6c60680ac55ddb032b38152bfa58a6c0a2bf4113cb65ed16688d7669cff592855cedd46e8581b56634fa7027ab25bdd893ed66477e658fcaa11de17c439fcca", 0x57}, {&(0x7f00000000c0)="6fd66feb4c2e9ccf21fbac4e15224c29c780035c703ee652b1b5168d6bb15f1f74f9", 0x22}, {&(0x7f0000000180)="9a8c8b2673cf4c1a863ae50d4079e1369f3f506e0d11660893f3643f5f308c353434547f395ad9bdd673a758d1145fe39bb4d1375b668d1396abd87ac71d7061132e06622103cef94b5bc0b105c6989aaf2d70108f0277fb744032a883f401c16a455ffcc266c7d1ee1c73445ae62c21b93e46728be8944e5bb745b3f108435d2144f9", 0x83}, {&(0x7f0000000240)="c59beb8d204d0e27a9504c77c4d2220717b2c57040", 0x15}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="aad74d6bb3a0a9acc9bc3f77e3e253de45e527825000ab042a1ead9ba6afab1239b99f6d8b2f3a521661cfe22f7ff8931186a22a2157a1b7a21c373e6f21d34e25783d9f8eef330bb86413dad60af28f377aa1e9ea3dbc5ccf7dca5b9d64c892580830", 0x63}], 0x6, &(0x7f0000001380)=[@dstopts={{0x118, 0x29, 0x37, {0x3b, 0x1f, '\x00', [@pad1, @ra={0x5, 0x2, 0x8}, @generic={0x81, 0x9b, "712d8b394dba1adbbbc363b1a30dcebe7b278a15e1f3c9e716d454e653bbca06bf28796a66e237986600bf761f74acca9376c90a0cdc6633fa663f2d3097098a753110b7e2bf8677e533501be4c33509d7c14d51a436895f5060b23a92afea6efe73621ea1b9bdd65caa510182f72eeb40624f87db4951957be70b1c4df823491d0ceeb56da42002494ae4400ee0f432d027d81774c2b0d32e1822"}, @calipso={0x7, 0x58, {0x3, 0x14, 0x1f, 0x101, [0x6, 0x800, 0x1f, 0x924, 0x3, 0x1, 0x0, 0x1ff, 0x1ff, 0x9]}}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x0, 0x8, 0x1, 0x45, 0x0, [@mcast2, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @dstopts={{0x190, 0x29, 0x37, {0x0, 0x2e, '\x00', [@ra={0x5, 0x2, 0xffff}, @calipso={0x7, 0x50, {0x3, 0x12, 0x5, 0x7ff, [0x1, 0x6345, 0x62b, 0x10000, 0xee, 0x0, 0x6, 0x3, 0x0]}}, @pad1, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @generic={0x8, 0xfd, "93a86888a4fbca8b5defc543d001188a38df329f7e5bdc7cf50b8470f7d37970a1a045406158b5bfb4927851f9efddcf4b14d9a0ad3267f05c07849edbaeee78f829ce30f320bd4daeab16119b96a465eebb905e1047a1764035985993651674e2425e1a150f11f61e25ad754cb76e915d3b89d96db5164d5b0fb81f9309bded87cfe0988222d05db18aad7c689c2c510fdc9d02badddfaebefece668dd7fe16d148aa998f24b6d804b057a861dad0f7b583db73974eb8bb390126704030ae5f8b78d31eaf823542c4b08919b0efdd6de9f498469c91319fa74430082bb581104fedada492125acf7c1d7c5112d3385d9f6cf667a5b81b3a4adf285389"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts={{0xc0, 0x29, 0x36, {0x29, 0x15, '\x00', [@generic={0x2, 0x56, "fe943b910a7173958061fd86c32ef374680aa3ff6af0e9823de25361285ca054ba08834763ee97e498e214101445b3e4a9d94ccdbe77f74267f03d4d07598621d3dcdab85b78560c3d7252c896b7325e93b9ed83faaa"}, @calipso={0x7, 0x10, {0x0, 0x2, 0x53, 0x7, [0xfffffffffffffffb]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3f, 0x401, [0x4]}}, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0x0, [0x6, 0x5]}}, @ra={0x5, 0x2, 0xf72}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x6c, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @pad1, @jumbo={0xc2, 0x4, 0x4}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}], 0x418}, 0x80000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = dup(r1) sendmsg$inet6(r3, &(0x7f0000001f00)={&(0x7f0000001800)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x39}, 0x401}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001840)="190709ae1004ac8adfd104a8caf4b32b15b6de5481d6e946cbc46baf482977fd3c6c0198230af3de4df09926b3e936ccede87d4acc5875586b2dce6c96104347a0eed73fe46e92d06f8221e41d52d6c8d0428dda8834771df1cdb69a28a1a7315db043fb10abe1e4fbea8a4a7ccf449674769e8841715d5c1826b42eb551d59ed30c52dbd687d67b1c82e1d2393acdd82f91edb290f86e574882d72cc4de091b68168ab05844e52c206264a2c8f16e12ae6189437e09450cb064b789186279afb5d68173fc1b3e80999d74a9425d1ffd591b63696a60a171df16b05c58cc63ceedd69abc", 0xe4}, {&(0x7f0000001940)="1ae9f09134e67ed5a38dcb4bc029ccdf27673423f86519373241dfcace900ce6ecbcfb7618c156a51ca8ca90225e00e21a74d46a4b455c2653d259e6e67f3657f995b8720f425a83477a5ae853aaf642517ebae601cb6b047117cc11d1d30ec80dc724883a809760dd8d505fd996e303ce6279f394799db3d44e9470804ef03f1b1c5bbda01d6684fb93860ce450cbb4652b5ed8212e15b259a688bb516cea4ba92ad79eab711d4113ebdb66d9fcaa63b13477fb37de76ad20a1c649201124b15bdb422c1df77946aedaf32f62", 0xcd}, {&(0x7f0000001a40)="2e712a7ddb31a0b15237e4a90bc20bd557e83f6cd5f7c6d97f7df1d05b5c003e97923ae38ebacdde05d4fa10c6335cba68b8aeca48c4fef543c0449b7a8a7401ee1f72a47491010d117f5afd9d97a520095517dfcf5bc873fefc9649db4e221db480cdbbb16760fe36d296cd55987ed01c2dcd725ace658bfe1f2889d2b6824e00e12f10cb2e0de39e3b9222da62daa9f3980287b1804272e315761ced08", 0x9e}, {&(0x7f0000001b00)="b0c1365caa5a7b7ae596ff6fdd436de3a06622be882dc8c88a2de8f15738360ae0870b06c99464c067951e2fee43a90255c5848b0a65e29f4124d387aae242b6d7f84334bcb564e102c31a4a", 0x4c}, {&(0x7f0000001b80)="d333555b1889b53f7d622fa0d1558941a32991dd55be9faba45e1eef400efaaf9918fc74f9aa763625c9d66cea7d1f67ee7e9c6d2226cc65ac8cd0cda7e2327b5a19730d1dc987a60e97c2ada0bea1b402ea8fdb8e27ce195e5a4af5f3bf70a1225184156d65ff13bb72089d7ca6ddb2d16d0ca0f731d57728d47d", 0x7b}], 0x5, &(0x7f0000001c80)=[@hopopts={{0x100, 0x29, 0x36, {0x2f, 0x1c, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @generic={0x6, 0xdd, "2aca27323378d5bae44696849d37f17263f64903b0716987524ba741011027bbfaeccbb775b4c3df44adf9ef4dfc4826daf7b35077244476b95d70bf5de1b70bb2671bae809b2271146828ae32ccc352974d614cdbde1b50e8c926309527bc3cc64ff60fd6f96c53f5a69673ef0adb5f33c3cc1c93f132619db12e4b5ddd4c27e9d5b63d898e11d2b0efc294a55effe631fabb429a3f2a6a033f0bc35fdbf7f11ea30f5ccfddae8527d9d4c9c992c51d48df3f68df5188f2a9c95145e4b0d215abeb9476a747d4e0e3bfc46ffd8f4517acd3086d7cf45289ad0dbf5d9f"}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x33, 0x4, 0x0, 0x0, 0x0, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@pad1]}}}, @rthdr={{0x78, 0x29, 0x39, {0x2c, 0xc, 0x1, 0x8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @loopback, @empty, @mcast2]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7a6e}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0xedb3}}], 0x258}, 0x80) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) 13:16:11 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2247.663388] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11812 comm=syz-executor.5 13:16:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010000110001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2247.724285] FAULT_INJECTION: forcing a failure. [ 2247.724285] name failslab, interval 1, probability 0, space 0, times 0 [ 2247.726939] CPU: 0 PID: 11815 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2247.728469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2247.730228] Call Trace: [ 2247.730792] dump_stack+0x107/0x167 [ 2247.731562] should_fail.cold+0x5/0xa [ 2247.732365] ? xas_alloc+0x336/0x440 [ 2247.733143] should_failslab+0x5/0x20 [ 2247.733949] kmem_cache_alloc+0x5b/0x310 [ 2247.734805] xas_alloc+0x336/0x440 [ 2247.735563] xas_create+0x34a/0x10d0 [ 2247.736353] ? kernel_text_address+0xf2/0x120 [ 2247.737298] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2247.738406] xas_store+0x8c/0x1c40 [ 2247.739175] __xa_store+0x164/0x2d0 [ 2247.739941] ? xa_delete_node+0x280/0x280 [ 2247.740826] ? trace_hardirqs_on+0x5b/0x180 [ 2247.741754] xa_store+0x31/0x50 [ 2247.742450] __io_uring_add_tctx_node+0x1cf/0x520 [ 2247.743458] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2247.744563] ? alloc_fd+0x2e7/0x670 [ 2247.745339] io_uring_setup+0x1fbb/0x2980 [ 2247.746231] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2247.747288] ? wait_for_completion_io+0x270/0x270 [ 2247.748335] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2247.749441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2247.750544] do_syscall_64+0x33/0x40 [ 2247.751330] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2247.752408] RIP: 0033:0x7fbb28dd6b19 [ 2247.753198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2247.757072] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2247.758687] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2247.760191] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2247.761702] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2247.763208] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2247.764708] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2247.771265] device syz_tun entered promiscuous mode [ 2247.772517] device syz_tun left promiscuous mode [ 2247.842564] device syz_tun entered promiscuous mode [ 2247.844059] device syz_tun left promiscuous mode [ 2247.919677] FAULT_INJECTION: forcing a failure. [ 2247.919677] name failslab, interval 1, probability 0, space 0, times 0 [ 2247.921929] CPU: 1 PID: 11821 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2247.923201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2247.924728] Call Trace: [ 2247.925222] dump_stack+0x107/0x167 [ 2247.925923] should_fail.cold+0x5/0xa [ 2247.926633] ? create_object.isra.0+0x3a/0xa30 [ 2247.927476] should_failslab+0x5/0x20 [ 2247.928173] kmem_cache_alloc+0x5b/0x310 [ 2247.928928] create_object.isra.0+0x3a/0xa30 [ 2247.929749] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2247.930693] __kmalloc+0x16e/0x390 [ 2247.931362] alloc_pipe_info+0x1e5/0x590 [ 2247.932118] splice_direct_to_actor+0x774/0x980 [ 2247.932980] ? _cond_resched+0x10/0x30 [ 2247.933699] ? inode_security+0x107/0x140 [ 2247.934454] ? pipe_to_sendpage+0x380/0x380 [ 2247.935246] ? avc_policy_seqno+0x9/0x70 [ 2247.935991] ? selinux_file_permission+0x92/0x520 [ 2247.936880] ? do_splice_to+0x160/0x160 [ 2247.937611] ? security_file_permission+0xb1/0xe0 [ 2247.938516] do_splice_direct+0x1c4/0x290 [ 2247.939266] ? splice_direct_to_actor+0x980/0x980 [ 2247.940137] ? avc_policy_seqno+0x9/0x70 [ 2247.940885] ? security_file_permission+0xb1/0xe0 [ 2247.941777] do_sendfile+0x553/0x11e0 [ 2247.942484] ? do_pwritev+0x270/0x270 [ 2247.943187] ? wait_for_completion_io+0x270/0x270 [ 2247.944075] ? rcu_read_lock_any_held+0x75/0xa0 [ 2247.944920] ? vfs_write+0x354/0xb10 [ 2247.945600] __x64_sys_sendfile64+0x1d1/0x210 [ 2247.946429] ? __ia32_sys_sendfile+0x220/0x220 [ 2247.947261] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2247.948213] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2247.949143] do_syscall_64+0x33/0x40 [ 2247.949826] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2247.950769] RIP: 0033:0x7f4ef9c71b19 [ 2247.951450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2247.954793] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2247.956197] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2247.957496] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2247.958795] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2247.960085] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 2247.961373] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 [ 2248.000465] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.1'. 13:16:25 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 56) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:16:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xfffff000, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:16:25 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:16:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 5) 13:16:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010000120001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:16:25 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:16:25 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:16:25 executing program 0: r0 = socket$packet(0x11, 0x1, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r1, r0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6}, 0x10) [ 2261.879549] FAULT_INJECTION: forcing a failure. [ 2261.879549] name failslab, interval 1, probability 0, space 0, times 0 [ 2261.881338] CPU: 1 PID: 11842 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2261.882199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2261.883214] Call Trace: [ 2261.883543] dump_stack+0x107/0x167 [ 2261.883987] should_fail.cold+0x5/0xa [ 2261.884417] FAULT_INJECTION: forcing a failure. [ 2261.884417] name failslab, interval 1, probability 0, space 0, times 0 [ 2261.885772] ? create_object.isra.0+0x3a/0xa30 [ 2261.885785] should_failslab+0x5/0x20 [ 2261.885797] kmem_cache_alloc+0x5b/0x310 [ 2261.885809] ? mark_held_locks+0x9e/0xe0 [ 2261.885823] create_object.isra.0+0x3a/0xa30 [ 2261.885843] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2261.889408] kmem_cache_alloc+0x159/0x310 [ 2261.889955] xas_alloc+0x336/0x440 [ 2261.890428] xas_create+0x34a/0x10d0 [ 2261.890884] ? kernel_text_address+0xf2/0x120 [ 2261.891434] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2261.892079] xas_store+0x8c/0x1c40 [ 2261.892517] __xa_store+0x164/0x2d0 [ 2261.892964] ? xa_delete_node+0x280/0x280 [ 2261.893473] ? trace_hardirqs_on+0x5b/0x180 [ 2261.894010] xa_store+0x31/0x50 [ 2261.894410] __io_uring_add_tctx_node+0x1cf/0x520 [ 2261.894995] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2261.895623] ? alloc_fd+0x2e7/0x670 [ 2261.896068] io_uring_setup+0x1fbb/0x2980 [ 2261.896569] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2261.897188] ? wait_for_completion_io+0x270/0x270 [ 2261.897780] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2261.898420] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2261.899041] do_syscall_64+0x33/0x40 [ 2261.899488] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2261.900106] RIP: 0033:0x7fbb28dd6b19 [ 2261.900556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2261.902787] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2261.903697] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2261.904563] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2261.905419] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2261.906283] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2261.907138] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2261.908017] CPU: 0 PID: 11841 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2261.909481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2261.911419] Call Trace: [ 2261.911986] dump_stack+0x107/0x167 [ 2261.912760] should_fail.cold+0x5/0xa [ 2261.913583] ? iter_file_splice_write+0x165/0xc90 [ 2261.914607] should_failslab+0x5/0x20 [ 2261.915425] __kmalloc+0x72/0x390 [ 2261.916166] iter_file_splice_write+0x165/0xc90 [ 2261.917159] ? __fsnotify_parent+0x47a/0xb10 [ 2261.918131] ? generic_splice_sendpage+0x140/0x140 [ 2261.919163] ? pipe_to_user+0x170/0x170 [ 2261.920014] ? security_file_permission+0xb1/0xe0 [ 2261.921049] ? generic_splice_sendpage+0x140/0x140 [ 2261.922104] direct_splice_actor+0x10f/0x170 [ 2261.923037] splice_direct_to_actor+0x387/0x980 [ 2261.924035] ? pipe_to_sendpage+0x380/0x380 [ 2261.924969] ? do_splice_to+0x160/0x160 [ 2261.925817] ? security_file_permission+0xb1/0xe0 [ 2261.926854] do_splice_direct+0x1c4/0x290 [ 2261.927746] ? splice_direct_to_actor+0x980/0x980 [ 2261.928769] ? avc_policy_seqno+0x9/0x70 [ 2261.929639] ? security_file_permission+0xb1/0xe0 [ 2261.930693] do_sendfile+0x553/0x11e0 [ 2261.931503] ? do_pwritev+0x270/0x270 [ 2261.932301] ? wait_for_completion_io+0x270/0x270 [ 2261.933312] ? rcu_read_lock_any_held+0x75/0xa0 [ 2261.934316] ? vfs_write+0x354/0xb10 [ 2261.935107] __x64_sys_sendfile64+0x1d1/0x210 [ 2261.936044] ? __ia32_sys_sendfile+0x220/0x220 [ 2261.937030] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2261.938162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2261.939271] do_syscall_64+0x33/0x40 [ 2261.940072] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2261.941147] RIP: 0033:0x7f4ef9c71b19 [ 2261.941939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2261.945796] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2261.947412] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2261.948914] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2261.950433] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2261.951957] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 2261.953485] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 [ 2261.959236] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11845 comm=syz-executor.5 [ 2261.965610] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.1'. 13:16:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xffffff7f, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:16:25 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 57) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:16:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 6) 13:16:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010000130001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:16:25 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2262.180242] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11862 comm=syz-executor.5 [ 2262.194133] FAULT_INJECTION: forcing a failure. [ 2262.194133] name failslab, interval 1, probability 0, space 0, times 0 [ 2262.195514] CPU: 1 PID: 11864 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2262.196313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2262.197252] Call Trace: [ 2262.197567] dump_stack+0x107/0x167 [ 2262.198002] should_fail.cold+0x5/0xa [ 2262.198438] ? xas_alloc+0x336/0x440 [ 2262.198860] should_failslab+0x5/0x20 [ 2262.199296] kmem_cache_alloc+0x5b/0x310 [ 2262.199758] xas_alloc+0x336/0x440 [ 2262.200165] xas_create+0x34a/0x10d0 [ 2262.200597] ? kernel_text_address+0xf2/0x120 [ 2262.201109] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2262.201704] xas_store+0x8c/0x1c40 [ 2262.202124] __xa_store+0x164/0x2d0 [ 2262.202545] ? xa_delete_node+0x280/0x280 [ 2262.203023] ? trace_hardirqs_on+0x5b/0x180 [ 2262.203525] xa_store+0x31/0x50 [ 2262.203900] __io_uring_add_tctx_node+0x1cf/0x520 [ 2262.204452] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2262.205048] ? alloc_fd+0x2e7/0x670 [ 2262.205470] io_uring_setup+0x1fbb/0x2980 [ 2262.205962] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2262.206542] ? wait_for_completion_io+0x270/0x270 [ 2262.207102] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2262.207698] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2262.208288] do_syscall_64+0x33/0x40 [ 2262.208710] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2262.209292] RIP: 0033:0x7fbb28dd6b19 [ 2262.209716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2262.211816] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2262.212759] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2262.213716] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2262.214543] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2262.215365] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2262.216174] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2262.222452] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2262.224332] FAULT_INJECTION: forcing a failure. [ 2262.224332] name failslab, interval 1, probability 0, space 0, times 0 [ 2262.225655] CPU: 1 PID: 11863 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2262.226510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2262.227588] Call Trace: [ 2262.227981] dump_stack+0x107/0x167 [ 2262.228515] should_fail.cold+0x5/0xa [ 2262.229052] ? create_object.isra.0+0x3a/0xa30 [ 2262.229568] should_failslab+0x5/0x20 [ 2262.230011] kmem_cache_alloc+0x5b/0x310 [ 2262.230479] create_object.isra.0+0x3a/0xa30 [ 2262.230976] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2262.231566] __kmalloc+0x16e/0x390 [ 2262.231977] iter_file_splice_write+0x165/0xc90 [ 2262.232505] ? __fsnotify_parent+0x47a/0xb10 [ 2262.233014] ? generic_splice_sendpage+0x140/0x140 [ 2262.233576] ? pipe_to_user+0x170/0x170 [ 2262.234201] ? security_file_permission+0xb1/0xe0 [ 2262.234815] ? generic_splice_sendpage+0x140/0x140 [ 2262.235552] direct_splice_actor+0x10f/0x170 [ 2262.236164] splice_direct_to_actor+0x387/0x980 [ 2262.236707] ? pipe_to_sendpage+0x380/0x380 [ 2262.237197] ? do_splice_to+0x160/0x160 [ 2262.237648] ? security_file_permission+0xb1/0xe0 [ 2262.238375] do_splice_direct+0x1c4/0x290 [ 2262.238852] ? splice_direct_to_actor+0x980/0x980 [ 2262.239397] ? avc_policy_seqno+0x9/0x70 [ 2262.239872] ? security_file_permission+0xb1/0xe0 [ 2262.240429] do_sendfile+0x553/0x11e0 [ 2262.240875] ? do_pwritev+0x270/0x270 [ 2262.241318] ? wait_for_completion_io+0x270/0x270 [ 2262.241918] ? rcu_read_lock_any_held+0x75/0xa0 [ 2262.242512] ? vfs_write+0x354/0xb10 [ 2262.243048] __x64_sys_sendfile64+0x1d1/0x210 [ 2262.243705] ? __ia32_sys_sendfile+0x220/0x220 [ 2262.244345] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2262.244946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2262.245537] do_syscall_64+0x33/0x40 [ 2262.245998] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2262.246713] RIP: 0033:0x7f4ef9c71b19 [ 2262.247193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2262.249727] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2262.250744] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2262.251680] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2262.252752] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2262.253579] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 2262.254584] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 13:16:25 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4408c0, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={@local, @mcast2, @ipv4={'\x00', '\xff\xff', @empty}, 0x5, 0x2, 0x6, 0x100, 0x0, 0x1, r3}) 13:16:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xffffff9e, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:16:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010000140001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:16:26 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:16:26 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 58) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) [ 2262.408723] device syz_tun entered promiscuous mode [ 2262.424561] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11877 comm=syz-executor.5 [ 2262.451958] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2262.530490] FAULT_INJECTION: forcing a failure. [ 2262.530490] name failslab, interval 1, probability 0, space 0, times 0 [ 2262.533210] CPU: 0 PID: 11883 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2262.534795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2262.536558] Call Trace: [ 2262.537126] dump_stack+0x107/0x167 [ 2262.537908] should_fail.cold+0x5/0xa [ 2262.538726] ? create_object.isra.0+0x3a/0xa30 [ 2262.539691] should_failslab+0x5/0x20 [ 2262.540502] kmem_cache_alloc+0x5b/0x310 [ 2262.541365] ? mark_held_locks+0x9e/0xe0 [ 2262.542245] create_object.isra.0+0x3a/0xa30 [ 2262.543166] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2262.544237] kmem_cache_alloc+0x159/0x310 [ 2262.545118] xas_alloc+0x336/0x440 [ 2262.545884] xas_create+0x34a/0x10d0 [ 2262.546692] ? kernel_text_address+0xf2/0x120 [ 2262.547640] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2262.548752] xas_store+0x8c/0x1c40 [ 2262.549519] __xa_store+0x164/0x2d0 [ 2262.550303] ? xa_delete_node+0x280/0x280 [ 2262.551188] ? trace_hardirqs_on+0x5b/0x180 [ 2262.552107] xa_store+0x31/0x50 [ 2262.552807] __io_uring_add_tctx_node+0x1cf/0x520 [ 2262.553832] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2262.554961] ? alloc_fd+0x2e7/0x670 [ 2262.555753] io_uring_setup+0x1fbb/0x2980 [ 2262.556637] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2262.557704] ? wait_for_completion_io+0x270/0x270 [ 2262.558765] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2262.559879] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2262.560967] do_syscall_64+0x33/0x40 [ 2262.561748] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2262.562849] RIP: 0033:0x7fbb28dd6b19 [ 2262.563633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2262.567528] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2262.569154] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2262.570664] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2262.572166] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2262.573671] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2262.575183] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:16:26 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:16:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xfffffff0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:16:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010000150001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2262.630435] device syz_tun left promiscuous mode [ 2262.637121] device syz_tun entered promiscuous mode [ 2262.638660] device syz_tun left promiscuous mode [ 2262.653338] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11889 comm=syz-executor.5 13:16:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) r3 = dup3(r1, r2, 0x0) getpeername(r1, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000200)=0x80) getsockopt$packet_int(r4, 0x107, 0x13, &(0x7f00000000c0), &(0x7f0000000040)=0x3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000000280)={0x80000000, 0x8, [0x2, 0x8001, 0x9, 0x4], &(0x7f0000000240)=[0x0]}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r6, 0x3, 0x6}, 0x10) [ 2262.707963] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2262.764207] device syz_tun entered promiscuous mode [ 2262.774729] device syz_tun left promiscuous mode 13:16:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 7) 13:16:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xffffffff, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:16:39 executing program 3: socket$packet(0x11, 0x3, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8, 0x800) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r1, 0x800, 0xfffffffffffffffe, 0xc2}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) dup3(r0, r1, 0x0) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f00000001c0)=""/214, &(0x7f0000000180)=0xd6) 13:16:39 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:16:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010000160001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:16:39 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 59) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:16:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 13:16:39 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2276.101283] FAULT_INJECTION: forcing a failure. [ 2276.101283] name failslab, interval 1, probability 0, space 0, times 0 [ 2276.102825] CPU: 1 PID: 11910 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2276.103700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2276.104764] Call Trace: [ 2276.105104] dump_stack+0x107/0x167 [ 2276.105572] should_fail.cold+0x5/0xa [ 2276.106077] ? xas_alloc+0x336/0x440 [ 2276.106558] should_failslab+0x5/0x20 [ 2276.107044] kmem_cache_alloc+0x5b/0x310 [ 2276.107568] xas_alloc+0x336/0x440 [ 2276.108025] xas_create+0x34a/0x10d0 [ 2276.108675] ? kernel_text_address+0xf2/0x120 [ 2276.109255] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2276.109921] xas_store+0x8c/0x1c40 [ 2276.110409] __xa_store+0x164/0x2d0 [ 2276.110878] ? xa_delete_node+0x280/0x280 [ 2276.111532] ? trace_hardirqs_on+0x5b/0x180 [ 2276.112264] xa_store+0x31/0x50 [ 2276.112750] __io_uring_add_tctx_node+0x1cf/0x520 [ 2276.113370] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2276.114059] ? alloc_fd+0x2e7/0x670 [ 2276.114546] io_uring_setup+0x1fbb/0x2980 [ 2276.115083] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2276.115727] ? wait_for_completion_io+0x270/0x270 [ 2276.116358] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2276.117029] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2276.117690] do_syscall_64+0x33/0x40 [ 2276.118209] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2276.118977] RIP: 0033:0x7fbb28dd6b19 [ 2276.119464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2276.122168] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2276.123218] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2276.124199] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2276.125276] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2276.126364] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2276.127260] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2276.130283] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11911 comm=syz-executor.5 [ 2276.136462] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2276.137399] FAULT_INJECTION: forcing a failure. [ 2276.137399] name failslab, interval 1, probability 0, space 0, times 0 [ 2276.140435] CPU: 0 PID: 11909 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2276.142014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2276.143927] Call Trace: [ 2276.144546] dump_stack+0x107/0x167 [ 2276.145376] should_fail.cold+0x5/0xa [ 2276.146262] ? jbd2__journal_start+0x190/0x7e0 [ 2276.147312] should_failslab+0x5/0x20 [ 2276.148198] kmem_cache_alloc+0x5b/0x310 [ 2276.149152] jbd2__journal_start+0x190/0x7e0 [ 2276.150170] __ext4_journal_start_sb+0x214/0x390 [ 2276.150190] device syz_tun entered promiscuous mode [ 2276.151250] ext4_file_write_iter+0xee9/0x1530 [ 2276.151293] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2276.152182] device syz_tun left promiscuous mode [ 2276.152901] ? kasan_save_stack+0x32/0x40 [ 2276.152919] ? kasan_save_stack+0x1b/0x40 [ 2276.152943] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2276.157502] ? iter_file_splice_write+0x165/0xc90 [ 2276.158597] ? direct_splice_actor+0x10f/0x170 [ 2276.159631] ? splice_direct_to_actor+0x387/0x980 [ 2276.160721] ? do_splice_direct+0x1c4/0x290 [ 2276.161698] ? do_sendfile+0x553/0x11e0 [ 2276.162598] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2276.163658] ? do_syscall_64+0x33/0x40 [ 2276.164527] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2276.165730] do_iter_readv_writev+0x476/0x750 [ 2276.166736] ? _cond_resched+0x10/0x30 [ 2276.167619] ? new_sync_write+0x660/0x660 [ 2276.168541] ? avc_policy_seqno+0x9/0x70 [ 2276.169446] ? selinux_file_permission+0x92/0x520 [ 2276.170686] ? security_file_permission+0xb1/0xe0 [ 2276.171779] do_iter_write+0x191/0x700 [ 2276.172657] ? trace_hardirqs_on+0x5b/0x180 [ 2276.173639] vfs_iter_write+0x70/0xa0 [ 2276.174501] iter_file_splice_write+0x726/0xc90 [ 2276.175556] ? generic_splice_sendpage+0x140/0x140 [ 2276.176676] ? security_file_permission+0xb1/0xe0 [ 2276.177749] ? generic_splice_sendpage+0x140/0x140 [ 2276.178848] direct_splice_actor+0x10f/0x170 [ 2276.179827] splice_direct_to_actor+0x387/0x980 [ 2276.180869] ? pipe_to_sendpage+0x380/0x380 [ 2276.181839] ? do_splice_to+0x160/0x160 [ 2276.182727] ? security_file_permission+0xb1/0xe0 [ 2276.183805] do_splice_direct+0x1c4/0x290 [ 2276.184720] ? splice_direct_to_actor+0x980/0x980 [ 2276.185782] ? avc_policy_seqno+0x9/0x70 [ 2276.186694] ? security_file_permission+0xb1/0xe0 [ 2276.187767] do_sendfile+0x553/0x11e0 [ 2276.188633] ? do_pwritev+0x270/0x270 [ 2276.189482] ? wait_for_completion_io+0x270/0x270 [ 2276.190554] ? rcu_read_lock_any_held+0x75/0xa0 [ 2276.191571] ? vfs_write+0x354/0xb10 [ 2276.192392] __x64_sys_sendfile64+0x1d1/0x210 [ 2276.193378] ? __ia32_sys_sendfile+0x220/0x220 [ 2276.194402] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2276.195547] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2276.196686] do_syscall_64+0x33/0x40 [ 2276.197504] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2276.198635] RIP: 0033:0x7f4ef9c71b19 [ 2276.199445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2276.203441] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2276.205083] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2276.206637] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2276.208178] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2276.209711] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 2276.211259] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 [ 2276.221324] device syz_tun entered promiscuous mode 13:16:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='\t'], 0x138}}, 0x0) [ 2276.226630] device syz_tun left promiscuous mode 13:16:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010000170001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:16:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x0, @loopback}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) 13:16:56 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:16:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='\n'], 0x138}}, 0x0) 13:16:56 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r1, 0x2, 0x9, 0x100000001}) r3 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) r4 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f00000003c0)='-\xfcx{\xe6\xac\xc8\xdf\x8e;\xb4Wy\xbea\xac2@\xa7\\\x98\x1f\x9d\x00\x00\x00', 0x0) r5 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f00000003c0)='-\xfcx{\xe6\xac\xc8\xdf\x8e;\xb4Wy\xbea\xac2@\xa7\\\x98\x1f\x9d\x00\x00\x00', 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x4295}, {r3, 0x1008}, {r4, 0x400}, {r1, 0x8101}, {r5, 0x8202}], 0x5, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000300)={[0x1]}, 0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @local}, 0x24) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) dup3(r0, r1, 0x0) r6 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f00000003c0)='-\xfcx{\xe6\xac\xc8\xdf\x8e;\xb4Wy\xbea\xac2@\xa7\\\x98\x1f\x9d\x00\x00\x00', 0x0) r7 = fork() fcntl$lock(r6, 0x6, &(0x7f00000000c0)={0x1, 0x4, 0x8, 0x80, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x7e}, 'port0\x00', 0x20, 0x1, 0x9a, 0x9fd8, 0x8, 0x6, 0x80, 0x0, 0x2, 0x9}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e00)='net/ipv6_route\x00') ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000140)={{0x8, 0x5c}, 'port0\x00', 0x2a, 0x800, 0x0, 0x7ff, 0x1c90, 0xcd, 0x1, 0x0, 0x1, 0x1}) 13:16:56 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:16:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 8) 13:16:56 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 60) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) [ 2293.282530] device syz_tun entered promiscuous mode [ 2293.285639] device syz_tun left promiscuous mode [ 2293.299951] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2293.303158] FAULT_INJECTION: forcing a failure. [ 2293.303158] name failslab, interval 1, probability 0, space 0, times 0 [ 2293.305911] CPU: 0 PID: 11936 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2293.307576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2293.309476] Call Trace: [ 2293.310092] dump_stack+0x107/0x167 [ 2293.310953] should_fail.cold+0x5/0xa [ 2293.311090] device syz_tun entered promiscuous mode [ 2293.311836] ? create_object.isra.0+0x3a/0xa30 [ 2293.311859] should_failslab+0x5/0x20 [ 2293.311884] kmem_cache_alloc+0x5b/0x310 [ 2293.313185] device syz_tun left promiscuous mode [ 2293.313597] create_object.isra.0+0x3a/0xa30 [ 2293.317058] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2293.318231] __kmalloc+0x16e/0x390 [ 2293.319066] iter_file_splice_write+0x165/0xc90 [ 2293.320137] ? __fsnotify_parent+0x47a/0xb10 [ 2293.321176] ? generic_splice_sendpage+0x140/0x140 [ 2293.322148] FAULT_INJECTION: forcing a failure. [ 2293.322148] name failslab, interval 1, probability 0, space 0, times 0 [ 2293.322320] ? pipe_to_user+0x170/0x170 [ 2293.324720] ? security_file_permission+0xb1/0xe0 [ 2293.325844] ? generic_splice_sendpage+0x140/0x140 [ 2293.326998] direct_splice_actor+0x10f/0x170 [ 2293.328024] splice_direct_to_actor+0x387/0x980 [ 2293.329101] ? pipe_to_sendpage+0x380/0x380 [ 2293.330100] ? do_splice_to+0x160/0x160 [ 2293.331021] ? security_file_permission+0xb1/0xe0 [ 2293.332145] do_splice_direct+0x1c4/0x290 [ 2293.333101] ? splice_direct_to_actor+0x980/0x980 [ 2293.334206] ? avc_policy_seqno+0x9/0x70 [ 2293.335161] ? security_file_permission+0xb1/0xe0 [ 2293.336282] do_sendfile+0x553/0x11e0 [ 2293.337176] ? do_pwritev+0x270/0x270 [ 2293.338053] ? wait_for_completion_io+0x270/0x270 [ 2293.339179] ? rcu_read_lock_any_held+0x75/0xa0 [ 2293.340248] ? vfs_write+0x354/0xb10 [ 2293.341112] __x64_sys_sendfile64+0x1d1/0x210 [ 2293.342145] ? __ia32_sys_sendfile+0x220/0x220 [ 2293.343211] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2293.344418] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2293.345610] do_syscall_64+0x33/0x40 [ 2293.346477] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2293.347651] RIP: 0033:0x7f4ef9c71b19 [ 2293.348529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2293.352783] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2293.354538] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2293.356175] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2293.357809] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2293.359452] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 2293.361089] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 [ 2293.362758] CPU: 1 PID: 11938 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2293.363691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2293.364772] Call Trace: [ 2293.365124] dump_stack+0x107/0x167 [ 2293.365598] should_fail.cold+0x5/0xa [ 2293.366102] ? create_object.isra.0+0x3a/0xa30 [ 2293.366731] should_failslab+0x5/0x20 [ 2293.367239] kmem_cache_alloc+0x5b/0x310 [ 2293.367770] ? mark_held_locks+0x9e/0xe0 [ 2293.368308] create_object.isra.0+0x3a/0xa30 [ 2293.368883] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2293.369556] kmem_cache_alloc+0x159/0x310 [ 2293.370103] xas_alloc+0x336/0x440 [ 2293.370593] xas_create+0x34a/0x10d0 [ 2293.371091] ? kernel_text_address+0xf2/0x120 [ 2293.371683] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2293.372376] xas_store+0x8c/0x1c40 [ 2293.372861] __xa_store+0x164/0x2d0 [ 2293.373343] ? xa_delete_node+0x280/0x280 [ 2293.373900] ? trace_hardirqs_on+0x5b/0x180 [ 2293.374489] xa_store+0x31/0x50 [ 2293.374921] __io_uring_add_tctx_node+0x1cf/0x520 [ 2293.375547] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2293.376231] ? alloc_fd+0x2e7/0x670 [ 2293.376699] io_uring_setup+0x1fbb/0x2980 [ 2293.377243] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2293.377895] ? wait_for_completion_io+0x270/0x270 [ 2293.378571] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2293.379273] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2293.379947] do_syscall_64+0x33/0x40 [ 2293.380429] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2293.381095] RIP: 0033:0x7fbb28dd6b19 [ 2293.381566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2293.383962] RSP: 002b:00007fbb2634c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2293.384952] RAX: ffffffffffffffda RBX: 00007fbb28ee9f60 RCX: 00007fbb28dd6b19 [ 2293.385877] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2293.386824] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2293.387719] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2293.388654] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:16:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x81403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000014c0), 0x8}, 0x4, 0x3, 0xfffffffc, 0x2, 0x3, 0x400, 0xfffe, 0x0, 0xfffffffc, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r4}, 0x14}}, 0x0) dup(r0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000200)=0x6, 0x3) write$binfmt_elf64(r1, &(0x7f00000008c0)=ANY=[], 0x629) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000300)="0d36ece137692fc544a572aa7dac2f58e1935b14ca7ec06a7ed64c774139fb45b95d05f119bae9839e2b156ade12070818464430b4e9fa7abd42876da66fa7bf1b616a1e2629ba69ba3caaa2490c17546d3a178c3deaa608c82ed4ee62a62ecf5ffc609080406d7bbbeba964ed00f3d97e929c225c0c8ea851bcf77001be736d98e4bfc0a98c26b1bcea82185e33d1675931edccbefc9a4d8751de56bbfb9ea49fa0b7f6b3e830af3dcc3ee0a2e3c0576b074d1a8d14af6bf851e8d6", 0xbc}, {&(0x7f0000000180)="6b466dcf1f258d6cd259ee6ff4a465afc940a3a47a86123a31ab3bc17f1dd2e2093798302a219d8aba13fdbee1ca3edfee85e92a9eb886ad875b525c83890df77a01ace7ddb3401cd7bbab7f", 0x4c}, {&(0x7f00000003c0)="20199a9e7328ae99e73f7caae0b32469de03ef897f81aaa6488fae2b8e75a18cf4e9aa72d1c329815bbe32e80f692e54655e702d07835668a799d924dc93f848ddb77fb48215ce79bee1f30623d93d0986dc80975db97412d5ae3ba6fce8704298f810c2bb5d550de22c549f93c18c1ff6ce32e6b9782ac3f98d2785579acd8ca5317d2d601c0e8681dfd62edeb7faa614c233", 0x93}, {&(0x7f0000000480)="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", 0x1000}], 0x4) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000001480)) pwrite64(r6, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) 13:16:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="0f"], 0x138}}, 0x0) 13:16:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010000180001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:16:57 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:16:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000800)={{{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000900)=0xe8) bind$packet(r0, &(0x7f0000000940)={0x11, 0x0, r1, 0x1, 0x9}, 0x14) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x66, 0x3, 0xff, 0x8, 0x0, 0x4, 0xc1, 0xe, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x401, 0x101}, 0x800b, 0x100, 0x0, 0x2, 0x1, 0x7, 0x54da, 0x0, 0x4, 0x0, 0x5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x7) dup(r4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f00000003c0)='-\xfcx{\xe6\xac\xc8\xdf\x8e;\xb4Wy\xbea\xac2@\xa7\\\x98\x1f\x9d\x00\x00\x00', 0x0) r7 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f00000003c0)='-\xfcx{\xe6\xac\xc8\xdf\x8e;\xb4Wy\xbea\xac2@\xa7\\\x98\x1f\x9d\x00\x00\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x18, 0x8, {0x52, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e11212215056fb08ac5a60bbd962b"}}, @etimer_thresh={0x8}, @replay_thresh={0x8}, @proto={0x5}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00'}) r8 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f00000003c0)='-\xfcx{\xe6\xac\xc8\xdf\x8e;\xb4Wy\xbea\xac2@\xa7\\\x98\x1f\x9d\x00\x00\x00', 0x0) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x100, 0x8080) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000180)={0x0, 0x5, 0x9, 0x0, 0x0, [{{r7}, 0x4}, {{r0}, 0x7}, {{r8}, 0x2}, {{r9}, 0x6}, {{r3}, 0xffffffffffff5d49}, {{r0}, 0x7fff}, {{r3}, 0x4}, {{r0}, 0xfffffffffffffffc}, {{r10}, 0x10000}]}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r5, 0x3, 0x6, @local}, 0x10) 13:16:57 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 61) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) [ 2293.602238] device syz_tun entered promiscuous mode [ 2293.610047] device syz_tun left promiscuous mode [ 2293.630641] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2293.646750] FAULT_INJECTION: forcing a failure. [ 2293.646750] name failslab, interval 1, probability 0, space 0, times 0 [ 2293.649598] CPU: 1 PID: 11959 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2293.651248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2293.653087] Call Trace: [ 2293.653643] dump_stack+0x107/0x167 [ 2293.654432] should_fail.cold+0x5/0xa [ 2293.655252] ? vm_area_dup+0x78/0x290 [ 2293.656050] should_failslab+0x5/0x20 [ 2293.656845] kmem_cache_alloc+0x5b/0x310 [ 2293.657711] vm_area_dup+0x78/0x290 [ 2293.658484] ? lock_release+0x680/0x680 [ 2293.659326] ? mark_lock+0xf5/0x2df0 [ 2293.660121] ? lock_chain_count+0x20/0x20 [ 2293.660988] ? mark_lock+0xf5/0x2df0 [ 2293.661785] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2293.662900] ? lock_chain_count+0x20/0x20 [ 2293.663770] ? mark_lock+0xf5/0x2df0 [ 2293.664558] ? vm_area_alloc+0x110/0x110 [ 2293.665411] ? __lock_acquire+0x1657/0x5b00 [ 2293.666342] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2293.667434] ? vmacache_find+0x55/0x2a0 [ 2293.668263] __split_vma+0xa8/0x4e0 [ 2293.669031] __do_munmap+0x365/0x1260 [ 2293.669831] ? arch_get_unmapped_area+0x450/0x450 [ 2293.670856] mmap_region+0x7cc/0x1500 [ 2293.671677] do_mmap+0x868/0x1370 [ 2293.672415] vm_mmap_pgoff+0x198/0x1f0 [ 2293.673234] ? randomize_page+0xb0/0xb0 [ 2293.674086] ksys_mmap_pgoff+0x41c/0x560 [ 2293.674952] ? find_mergeable_anon_vma+0x250/0x250 [ 2293.675992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2293.677086] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2293.678171] do_syscall_64+0x33/0x40 [ 2293.678957] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2293.680027] RIP: 0033:0x7fbb28dd6b62 [ 2293.680803] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2293.684675] RSP: 002b:00007fbb2634c0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2293.686290] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbb28dd6b62 [ 2293.687796] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2293.689293] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2293.690793] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2293.692297] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:16:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="86"], 0x138}}, 0x0) 13:16:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010002190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:16:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x6, 0xff, 0x6, 0x9, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, 0x40, 0x10, 0x3, 0x8}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x3e, r3}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) 13:16:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 9) [ 2293.929599] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11968 comm=syz-executor.5 13:16:57 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 62) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:16:57 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2293.994450] device syz_tun entered promiscuous mode [ 2293.998557] device syz_tun left promiscuous mode [ 2294.099888] FAULT_INJECTION: forcing a failure. [ 2294.099888] name failslab, interval 1, probability 0, space 0, times 0 [ 2294.102352] CPU: 1 PID: 11977 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2294.103810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2294.105554] Call Trace: [ 2294.106112] dump_stack+0x107/0x167 [ 2294.106892] should_fail.cold+0x5/0xa [ 2294.107693] ? __iomap_dio_rw+0x1ee/0x1110 [ 2294.108584] should_failslab+0x5/0x20 [ 2294.109377] kmem_cache_alloc_trace+0x55/0x320 [ 2294.110349] __iomap_dio_rw+0x1ee/0x1110 [ 2294.111219] ? jbd2_journal_stop+0x188/0xdc0 [ 2294.112141] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2294.113099] ? ext4_orphan_add+0x253/0x9e0 [ 2294.113990] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2294.115032] ? ext4_empty_dir+0xae0/0xae0 [ 2294.115894] ? jbd2__journal_start+0xf3/0x7e0 [ 2294.116838] iomap_dio_rw+0x31/0x90 [ 2294.117613] ext4_file_write_iter+0xe0e/0x1530 [ 2294.118603] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2294.119544] ? kasan_save_stack+0x32/0x40 [ 2294.120403] ? kasan_save_stack+0x1b/0x40 [ 2294.121265] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2294.122337] ? iter_file_splice_write+0x165/0xc90 [ 2294.123342] ? direct_splice_actor+0x10f/0x170 [ 2294.124296] ? splice_direct_to_actor+0x387/0x980 [ 2294.125298] ? do_splice_direct+0x1c4/0x290 [ 2294.126192] ? do_sendfile+0x553/0x11e0 [ 2294.127029] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2294.128004] ? do_syscall_64+0x33/0x40 [ 2294.128808] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2294.129924] do_iter_readv_writev+0x476/0x750 [ 2294.130865] ? _cond_resched+0x10/0x30 [ 2294.131674] ? new_sync_write+0x660/0x660 [ 2294.132534] ? avc_policy_seqno+0x9/0x70 [ 2294.133385] ? selinux_file_permission+0x92/0x520 [ 2294.134416] ? security_file_permission+0xb1/0xe0 [ 2294.135431] do_iter_write+0x191/0x700 [ 2294.136250] ? trace_hardirqs_on+0x5b/0x180 [ 2294.137159] vfs_iter_write+0x70/0xa0 [ 2294.137976] iter_file_splice_write+0x726/0xc90 [ 2294.138979] ? generic_splice_sendpage+0x140/0x140 [ 2294.140033] ? security_file_permission+0xb1/0xe0 [ 2294.141044] ? generic_splice_sendpage+0x140/0x140 [ 2294.142073] direct_splice_actor+0x10f/0x170 [ 2294.143004] splice_direct_to_actor+0x387/0x980 [ 2294.143991] ? pipe_to_sendpage+0x380/0x380 [ 2294.144904] ? do_splice_to+0x160/0x160 [ 2294.145745] ? security_file_permission+0xb1/0xe0 [ 2294.146764] do_splice_direct+0x1c4/0x290 [ 2294.147625] ? splice_direct_to_actor+0x980/0x980 [ 2294.148620] ? avc_policy_seqno+0x9/0x70 [ 2294.149466] ? security_file_permission+0xb1/0xe0 [ 2294.150492] do_sendfile+0x553/0x11e0 [ 2294.151304] ? do_pwritev+0x270/0x270 [ 2294.152102] ? wait_for_completion_io+0x270/0x270 [ 2294.153107] ? rcu_read_lock_any_held+0x75/0xa0 [ 2294.154071] ? vfs_write+0x354/0xb10 [ 2294.154855] __x64_sys_sendfile64+0x1d1/0x210 [ 2294.155788] ? __ia32_sys_sendfile+0x220/0x220 [ 2294.156746] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2294.157830] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2294.158908] do_syscall_64+0x33/0x40 [ 2294.159681] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2294.160737] RIP: 0033:0x7f4ef9c71b19 [ 2294.161510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2294.165345] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2294.166935] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2294.168406] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2294.169886] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2294.171375] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 2294.172851] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 [ 2294.190676] FAULT_INJECTION: forcing a failure. [ 2294.190676] name failslab, interval 1, probability 0, space 0, times 0 [ 2294.193470] CPU: 1 PID: 11979 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2294.195224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2294.197129] Call Trace: [ 2294.197785] dump_stack+0x107/0x167 [ 2294.198743] should_fail.cold+0x5/0xa [ 2294.199676] ? create_object.isra.0+0x3a/0xa30 [ 2294.200608] should_failslab+0x5/0x20 [ 2294.201566] kmem_cache_alloc+0x5b/0x310 [ 2294.202577] create_object.isra.0+0x3a/0xa30 [ 2294.203642] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2294.204682] kmem_cache_alloc+0x159/0x310 [ 2294.205712] vm_area_dup+0x78/0x290 [ 2294.206557] ? lock_release+0x680/0x680 [ 2294.207597] ? mark_lock+0xf5/0x2df0 [ 2294.208373] ? lock_chain_count+0x20/0x20 [ 2294.209216] ? mark_lock+0xf5/0x2df0 [ 2294.209988] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2294.211071] ? lock_chain_count+0x20/0x20 [ 2294.211920] ? mark_lock+0xf5/0x2df0 [ 2294.212673] ? vm_area_alloc+0x110/0x110 [ 2294.213499] ? __lock_acquire+0x1657/0x5b00 [ 2294.214393] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2294.215457] ? vmacache_find+0x55/0x2a0 [ 2294.216267] __split_vma+0xa8/0x4e0 [ 2294.217013] __do_munmap+0x365/0x1260 [ 2294.217793] ? arch_get_unmapped_area+0x450/0x450 [ 2294.218789] mmap_region+0x7cc/0x1500 [ 2294.219576] do_mmap+0x868/0x1370 [ 2294.220293] vm_mmap_pgoff+0x198/0x1f0 [ 2294.221102] ? randomize_page+0xb0/0xb0 [ 2294.221924] ksys_mmap_pgoff+0x41c/0x560 [ 2294.222756] ? find_mergeable_anon_vma+0x250/0x250 [ 2294.223750] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2294.224812] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2294.225856] do_syscall_64+0x33/0x40 [ 2294.226625] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2294.227662] RIP: 0033:0x7fbb28dd6b62 [ 2294.228417] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2294.232166] RSP: 002b:00007fbb2634c0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2294.233709] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbb28dd6b62 [ 2294.235164] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2294.236600] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2294.238045] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2294.239477] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:17:13 executing program 3: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x80000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x164, 0x1d, 0xc21, 0x0, 0x0, {0x3, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}, @generic="2ef9b9d79bb827e8b023d973f9a9b317430606a5eb854dcf902b63643a28dfea2b84efeeb6dd5765d40299ce6e50190d9408877186bdf575b0c6c65b685d75e818361d6b1d17e3cf85df0b3de40dc1ec6c27fdc611b63c9c9d1c566dd4d4", @nested={0xda, 0x3f, 0x0, 0x1, [@typed={0x8, 0x4f, 0x0, 0x0, @fd=r0}, @generic="5d51e9507cbbf971fc6f", @typed={0xb, 0x8, 0x0, 0x0, @str='\x13\x19/&/-\x00'}, @generic="48f9e82c32d8e1ec51679c392e897feebd136f5cf00e7b2b5a05b7e68c06ff088a386feda87740393c862899ab0fb01e790da0a41d74f3a207ded92499ecb871dfbc46b2491b8da07fe7b4cf276d5f3010f1b277a7fb7f5dd439a6888ee33e79f1e1338a57db0919a2b6c73458322c29d9af4514557aa30d80ad7dc9ad5a3a85f8d77034c84ba98d4bf4fba3d2045398dcd76879584c3af61409fccc4bda89a776986b06caa40f50973dcdd17540f4f3", @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x164}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x11a) 13:17:13 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:17:13 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:17:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 10) 13:17:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010003190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:17:13 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, r6, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x80, &(0x7f00000001c0)=@l2tp={0x2, 0x0, @loopback}, 0x0, 0x800, 0x1}, 0x1ff) r8 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd=r1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000340)="501da9a76ad93bd2e42941d78b3b6627e8dacdc3b34ebb0c28c0a34e4c9b3b0efbe57d332c45c6e85a1e3124e0e092d149625c927e12d4063cf7ec1af85c9bcf2c99ac64515c324556b4281e0d02ff7b0cc7d783ddc9c1f5", 0x58}], 0x1, 0x1, 0x1, {0x2}}, 0x9) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x28) 13:17:13 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 63) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:17:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) [ 2309.747383] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11995 comm=syz-executor.5 [ 2309.766799] FAULT_INJECTION: forcing a failure. [ 2309.766799] name failslab, interval 1, probability 0, space 0, times 0 [ 2309.769535] CPU: 0 PID: 12000 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2309.771227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2309.773235] Call Trace: [ 2309.773868] dump_stack+0x107/0x167 [ 2309.774750] should_fail.cold+0x5/0xa [ 2309.775657] ? anon_vma_clone+0xdc/0x590 [ 2309.776619] should_failslab+0x5/0x20 [ 2309.777545] kmem_cache_alloc+0x5b/0x310 [ 2309.778528] anon_vma_clone+0xdc/0x590 [ 2309.779469] __split_vma+0x17c/0x4e0 [ 2309.780356] __do_munmap+0x365/0x1260 [ 2309.781262] ? arch_get_unmapped_area+0x450/0x450 [ 2309.782403] mmap_region+0x7cc/0x1500 [ 2309.783334] do_mmap+0x868/0x1370 [ 2309.784174] vm_mmap_pgoff+0x198/0x1f0 [ 2309.785095] ? randomize_page+0xb0/0xb0 [ 2309.786049] ksys_mmap_pgoff+0x41c/0x560 [ 2309.787019] ? find_mergeable_anon_vma+0x250/0x250 [ 2309.788183] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2309.789418] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2309.790649] do_syscall_64+0x33/0x40 [ 2309.791524] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2309.792733] RIP: 0033:0x7fbb28dd6b62 [ 2309.793610] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2309.797951] RSP: 002b:00007fbb2634c0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2309.799807] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbb28dd6b62 [ 2309.801552] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2309.803303] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2309.805046] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2309.806793] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2309.829535] FAULT_INJECTION: forcing a failure. [ 2309.829535] name failslab, interval 1, probability 0, space 0, times 0 [ 2309.831103] CPU: 1 PID: 11999 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2309.831215] netlink: 316 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2309.832076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2309.832081] Call Trace: [ 2309.832102] dump_stack+0x107/0x167 [ 2309.832120] should_fail.cold+0x5/0xa [ 2309.832145] ? create_object.isra.0+0x3a/0xa30 [ 2309.837303] should_failslab+0x5/0x20 [ 2309.837833] kmem_cache_alloc+0x5b/0x310 [ 2309.838397] create_object.isra.0+0x3a/0xa30 [ 2309.839006] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2309.839714] kmem_cache_alloc+0x159/0x310 [ 2309.840290] jbd2__journal_start+0x190/0x7e0 [ 2309.840907] __ext4_journal_start_sb+0x214/0x390 [ 2309.841577] ext4_file_write_iter+0xee9/0x1530 [ 2309.842224] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2309.842863] ? kasan_save_stack+0x32/0x40 [ 2309.843434] ? kasan_save_stack+0x1b/0x40 [ 2309.844004] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2309.844711] ? iter_file_splice_write+0x165/0xc90 [ 2309.845379] ? direct_splice_actor+0x10f/0x170 [ 2309.846007] ? splice_direct_to_actor+0x387/0x980 [ 2309.846679] ? do_splice_direct+0x1c4/0x290 [ 2309.847280] ? do_sendfile+0x553/0x11e0 [ 2309.847824] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2309.848455] ? do_syscall_64+0x33/0x40 [ 2309.848966] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2309.849676] do_iter_readv_writev+0x476/0x750 [ 2309.850279] ? _cond_resched+0x10/0x30 [ 2309.850805] ? new_sync_write+0x660/0x660 [ 2309.851351] ? avc_policy_seqno+0x9/0x70 [ 2309.851893] ? selinux_file_permission+0x92/0x520 [ 2309.852531] ? security_file_permission+0xb1/0xe0 [ 2309.853184] do_iter_write+0x191/0x700 [ 2309.853711] ? trace_hardirqs_on+0x5b/0x180 [ 2309.854287] vfs_iter_write+0x70/0xa0 [ 2309.854804] iter_file_splice_write+0x726/0xc90 [ 2309.855440] ? generic_splice_sendpage+0x140/0x140 [ 2309.856094] ? security_file_permission+0xb1/0xe0 [ 2309.856734] ? generic_splice_sendpage+0x140/0x140 [ 2309.857376] direct_splice_actor+0x10f/0x170 [ 2309.857961] splice_direct_to_actor+0x387/0x980 [ 2309.858579] ? pipe_to_sendpage+0x380/0x380 [ 2309.859147] ? do_splice_to+0x160/0x160 [ 2309.859681] ? security_file_permission+0xb1/0xe0 [ 2309.860317] do_splice_direct+0x1c4/0x290 [ 2309.860866] ? splice_direct_to_actor+0x980/0x980 [ 2309.861495] ? avc_policy_seqno+0x9/0x70 [ 2309.862050] ? security_file_permission+0xb1/0xe0 [ 2309.862700] do_sendfile+0x553/0x11e0 [ 2309.863228] ? do_pwritev+0x270/0x270 [ 2309.863742] ? wait_for_completion_io+0x270/0x270 [ 2309.864391] ? rcu_read_lock_any_held+0x75/0xa0 [ 2309.864866] device syz_tun entered promiscuous mode [ 2309.865003] ? vfs_write+0x354/0xb10 [ 2309.865021] __x64_sys_sendfile64+0x1d1/0x210 [ 2309.867235] ? __ia32_sys_sendfile+0x220/0x220 [ 2309.867835] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2309.868519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2309.869200] do_syscall_64+0x33/0x40 [ 2309.869697] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2309.870371] RIP: 0033:0x7f4ef9c71b19 [ 2309.870881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2309.873318] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2309.874323] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2309.875278] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2309.876215] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2309.877146] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2309.878083] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 [ 2309.900014] device syz_tun left promiscuous mode [ 2309.939779] device syz_tun entered promiscuous mode [ 2309.940688] device syz_tun left promiscuous mode 13:17:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 11) 13:17:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) 13:17:28 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:17:28 executing program 0: r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x5) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6}, 0x10) 13:17:28 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010004190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:17:28 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:17:28 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:17:28 executing program 3: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x80000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x164, 0x1d, 0xc21, 0x0, 0x0, {0x3, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}, @generic="2ef9b9d79bb827e8b023d973f9a9b317430606a5eb854dcf902b63643a28dfea2b84efeeb6dd5765d40299ce6e50190d9408877186bdf575b0c6c65b685d75e818361d6b1d17e3cf85df0b3de40dc1ec6c27fdc611b63c9c9d1c566dd4d4", @nested={0xda, 0x3f, 0x0, 0x1, [@typed={0x8, 0x4f, 0x0, 0x0, @fd=r0}, @generic="5d51e9507cbbf971fc6f", @typed={0xb, 0x8, 0x0, 0x0, @str='\x13\x19/&/-\x00'}, @generic="48f9e82c32d8e1ec51679c392e897feebd136f5cf00e7b2b5a05b7e68c06ff088a386feda87740393c862899ab0fb01e790da0a41d74f3a207ded92499ecb871dfbc46b2491b8da07fe7b4cf276d5f3010f1b277a7fb7f5dd439a6888ee33e79f1e1338a57db0919a2b6c73458322c29d9af4514557aa30d80ad7dc9ad5a3a85f8d77034c84ba98d4bf4fba3d2045398dcd76879584c3af61409fccc4bda89a776986b06caa40f50973dcdd17540f4f3", @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x164}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x11a) [ 2325.107390] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12020 comm=syz-executor.5 [ 2325.117266] device syz_tun entered promiscuous mode [ 2325.119451] device syz_tun left promiscuous mode [ 2325.128306] FAULT_INJECTION: forcing a failure. [ 2325.128306] name failslab, interval 1, probability 0, space 0, times 0 [ 2325.129652] FAULT_INJECTION: forcing a failure. [ 2325.129652] name failslab, interval 1, probability 0, space 0, times 0 [ 2325.130214] CPU: 0 PID: 12022 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2325.134114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2325.135488] Call Trace: [ 2325.135921] dump_stack+0x107/0x167 [ 2325.136521] should_fail.cold+0x5/0xa [ 2325.137141] ? __iomap_dio_rw+0x1ee/0x1110 [ 2325.137824] should_failslab+0x5/0x20 [ 2325.138440] kmem_cache_alloc_trace+0x55/0x320 [ 2325.139201] __iomap_dio_rw+0x1ee/0x1110 [ 2325.139868] ? jbd2_journal_stop+0x188/0xdc0 [ 2325.140579] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2325.141338] ? ext4_orphan_add+0x253/0x9e0 [ 2325.142035] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2325.142862] ? ext4_empty_dir+0xae0/0xae0 [ 2325.143538] ? jbd2__journal_start+0xf3/0x7e0 [ 2325.144294] iomap_dio_rw+0x31/0x90 [ 2325.144905] ext4_file_write_iter+0xe0e/0x1530 [ 2325.145673] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2325.146412] ? kasan_save_stack+0x32/0x40 [ 2325.147095] ? kasan_save_stack+0x1b/0x40 [ 2325.147768] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2325.148607] ? iter_file_splice_write+0x165/0xc90 [ 2325.149401] ? direct_splice_actor+0x10f/0x170 [ 2325.150148] ? splice_direct_to_actor+0x387/0x980 [ 2325.150939] ? do_splice_direct+0x1c4/0x290 [ 2325.151635] ? do_sendfile+0x553/0x11e0 [ 2325.152282] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2325.153035] ? do_syscall_64+0x33/0x40 [ 2325.153674] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2325.154542] do_iter_readv_writev+0x476/0x750 [ 2325.155270] ? _cond_resched+0x10/0x30 [ 2325.155906] ? new_sync_write+0x660/0x660 [ 2325.156584] ? avc_policy_seqno+0x9/0x70 [ 2325.157248] ? selinux_file_permission+0x92/0x520 [ 2325.158041] ? security_file_permission+0xb1/0xe0 [ 2325.158843] do_iter_write+0x191/0x700 [ 2325.159470] ? trace_hardirqs_on+0x5b/0x180 [ 2325.160170] vfs_iter_write+0x70/0xa0 [ 2325.160789] iter_file_splice_write+0x726/0xc90 [ 2325.161560] ? generic_splice_sendpage+0x140/0x140 [ 2325.162371] ? security_file_permission+0xb1/0xe0 [ 2325.163170] ? generic_splice_sendpage+0x140/0x140 [ 2325.163967] direct_splice_actor+0x10f/0x170 [ 2325.164678] splice_direct_to_actor+0x387/0x980 [ 2325.165442] ? pipe_to_sendpage+0x380/0x380 [ 2325.166152] ? do_splice_to+0x160/0x160 [ 2325.166811] ? security_file_permission+0xb1/0xe0 [ 2325.167598] do_splice_direct+0x1c4/0x290 [ 2325.168263] ? splice_direct_to_actor+0x980/0x980 [ 2325.169040] ? avc_policy_seqno+0x9/0x70 [ 2325.169703] ? security_file_permission+0xb1/0xe0 [ 2325.170496] do_sendfile+0x553/0x11e0 [ 2325.171126] ? do_pwritev+0x270/0x270 [ 2325.171741] ? wait_for_completion_io+0x270/0x270 [ 2325.172529] ? rcu_read_lock_any_held+0x75/0xa0 [ 2325.173278] ? vfs_write+0x354/0xb10 [ 2325.173874] __x64_sys_sendfile64+0x1d1/0x210 [ 2325.174598] ? __ia32_sys_sendfile+0x220/0x220 [ 2325.175334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2325.176180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2325.177025] do_syscall_64+0x33/0x40 [ 2325.177636] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2325.178453] RIP: 0033:0x7f4ef9c71b19 [ 2325.179051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2325.182037] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2325.183256] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2325.184367] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2325.185483] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2325.186599] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2325.187729] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 [ 2325.188881] CPU: 1 PID: 12026 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2325.190402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2325.192218] Call Trace: [ 2325.192788] dump_stack+0x107/0x167 [ 2325.193591] should_fail.cold+0x5/0xa [ 2325.194413] ? create_object.isra.0+0x3a/0xa30 [ 2325.195420] should_failslab+0x5/0x20 [ 2325.196243] kmem_cache_alloc+0x5b/0x310 [ 2325.197110] create_object.isra.0+0x3a/0xa30 [ 2325.198046] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2325.199170] kmem_cache_alloc+0x159/0x310 [ 2325.200068] anon_vma_clone+0xdc/0x590 [ 2325.200945] __split_vma+0x17c/0x4e0 [ 2325.201737] __do_munmap+0x365/0x1260 [ 2325.202546] ? arch_get_unmapped_area+0x450/0x450 [ 2325.203573] mmap_region+0x7cc/0x1500 [ 2325.204391] do_mmap+0x868/0x1370 [ 2325.205132] vm_mmap_pgoff+0x198/0x1f0 [ 2325.205948] ? randomize_page+0xb0/0xb0 [ 2325.206812] ksys_mmap_pgoff+0x41c/0x560 [ 2325.207685] ? find_mergeable_anon_vma+0x250/0x250 [ 2325.208713] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2325.209825] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2325.210923] do_syscall_64+0x33/0x40 [ 2325.211710] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2325.212788] RIP: 0033:0x7fbb28dd6b62 [ 2325.213575] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2325.217425] RSP: 002b:00007fbb2634c0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2325.219032] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbb28dd6b62 [ 2325.220535] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2325.222033] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2325.223533] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2325.225035] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:17:28 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010005190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2325.251757] netlink: 316 bytes leftover after parsing attributes in process `syz-executor.3'. 13:17:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x402100, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000040)={0x401, 0x7ff, 0x1, 0x80}, 0x10) 13:17:29 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:17:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0xf}}, 0x0) 13:17:29 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x10, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:17:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 12) 13:17:29 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 65) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:17:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010006190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2325.445543] device syz_tun entered promiscuous mode [ 2325.450943] device syz_tun left promiscuous mode [ 2325.469329] device syz_tun entered promiscuous mode [ 2325.483070] device syz_tun left promiscuous mode [ 2325.490892] FAULT_INJECTION: forcing a failure. [ 2325.490892] name failslab, interval 1, probability 0, space 0, times 0 [ 2325.492636] CPU: 0 PID: 12044 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2325.493582] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2325.494721] Call Trace: [ 2325.495096] dump_stack+0x107/0x167 [ 2325.495596] should_fail.cold+0x5/0xa [ 2325.496128] ? create_object.isra.0+0x3a/0xa30 [ 2325.496749] should_failslab+0x5/0x20 [ 2325.497278] kmem_cache_alloc+0x5b/0x310 [ 2325.497838] create_object.isra.0+0x3a/0xa30 [ 2325.498443] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2325.499155] kmem_cache_alloc_trace+0x151/0x320 [ 2325.499808] __iomap_dio_rw+0x1ee/0x1110 [ 2325.500373] ? jbd2_journal_stop+0x188/0xdc0 [ 2325.500974] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2325.501599] ? ext4_orphan_add+0x253/0x9e0 [ 2325.502191] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2325.502868] ? ext4_empty_dir+0xae0/0xae0 [ 2325.503434] ? jbd2__journal_start+0xf3/0x7e0 [ 2325.504058] iomap_dio_rw+0x31/0x90 [ 2325.504561] ext4_file_write_iter+0xe0e/0x1530 [ 2325.505195] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2325.505813] ? kasan_save_stack+0x32/0x40 [ 2325.506379] ? kasan_save_stack+0x1b/0x40 [ 2325.506941] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2325.507640] ? iter_file_splice_write+0x165/0xc90 [ 2325.508289] ? direct_splice_actor+0x10f/0x170 [ 2325.508904] ? splice_direct_to_actor+0x387/0x980 [ 2325.509553] ? do_splice_direct+0x1c4/0x290 [ 2325.510144] ? do_sendfile+0x553/0x11e0 [ 2325.510689] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2325.511329] ? do_syscall_64+0x33/0x40 [ 2325.511862] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2325.512586] do_iter_readv_writev+0x476/0x750 [ 2325.513199] ? _cond_resched+0x10/0x30 [ 2325.513726] ? new_sync_write+0x660/0x660 [ 2325.514290] ? avc_policy_seqno+0x9/0x70 [ 2325.514852] ? selinux_file_permission+0x92/0x520 [ 2325.515509] ? security_file_permission+0xb1/0xe0 [ 2325.516167] do_iter_write+0x191/0x700 [ 2325.516695] ? trace_hardirqs_on+0x5b/0x180 [ 2325.517287] vfs_iter_write+0x70/0xa0 [ 2325.517817] iter_file_splice_write+0x726/0xc90 [ 2325.518462] ? generic_splice_sendpage+0x140/0x140 [ 2325.519152] ? security_file_permission+0xb1/0xe0 [ 2325.519809] ? generic_splice_sendpage+0x140/0x140 [ 2325.520487] direct_splice_actor+0x10f/0x170 [ 2325.521078] splice_direct_to_actor+0x387/0x980 [ 2325.521703] ? pipe_to_sendpage+0x380/0x380 [ 2325.522285] ? do_splice_to+0x160/0x160 [ 2325.522830] ? security_file_permission+0xb1/0xe0 [ 2325.523483] do_splice_direct+0x1c4/0x290 [ 2325.524046] ? splice_direct_to_actor+0x980/0x980 [ 2325.524688] ? avc_policy_seqno+0x9/0x70 [ 2325.525236] ? security_file_permission+0xb1/0xe0 [ 2325.525887] do_sendfile+0x553/0x11e0 [ 2325.526404] ? do_pwritev+0x270/0x270 [ 2325.526929] ? wait_for_completion_io+0x270/0x270 [ 2325.527585] ? rcu_read_lock_any_held+0x75/0xa0 [ 2325.528221] ? vfs_write+0x354/0xb10 [ 2325.528721] __x64_sys_sendfile64+0x1d1/0x210 [ 2325.529329] ? __ia32_sys_sendfile+0x220/0x220 [ 2325.529946] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2325.530666] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2325.531356] do_syscall_64+0x33/0x40 [ 2325.531857] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2325.532555] RIP: 0033:0x7f4ef9c71b19 [ 2325.533068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2325.535564] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2325.536603] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2325.537561] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2325.538516] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2325.539484] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2325.540451] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 13:17:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) [ 2325.563335] FAULT_INJECTION: forcing a failure. [ 2325.563335] name failslab, interval 1, probability 0, space 0, times 0 [ 2325.565757] CPU: 1 PID: 12047 Comm: syz-executor.7 Not tainted 5.10.242 #1 13:17:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) [ 2325.567215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2325.569076] Call Trace: [ 2325.569694] dump_stack+0x107/0x167 [ 2325.570711] should_fail.cold+0x5/0xa [ 2325.571745] ? vm_area_dup+0x78/0x290 [ 2325.572805] should_failslab+0x5/0x20 [ 2325.573831] kmem_cache_alloc+0x5b/0x310 [ 2325.574956] ? __lockdep_reset_lock+0x180/0x180 [ 2325.576024] vm_area_dup+0x78/0x290 [ 2325.576821] ? find_held_lock+0x2c/0x110 [ 2325.577777] ? __vma_adjust+0x66e/0x2510 [ 2325.578676] ? lock_downgrade+0x6d0/0x6d0 [ 2325.579578] ? up_write+0x191/0x550 [ 2325.580370] ? downgrade_write+0x3a0/0x3a0 [ 2325.581287] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 2325.582455] ? vm_area_alloc+0x110/0x110 [ 2325.583353] ? __vma_adjust+0xbb8/0x2510 [ 2325.584254] ? vmacache_find+0x55/0x2a0 [ 2325.585101] __split_vma+0xa8/0x4e0 [ 2325.585896] __do_munmap+0xf40/0x1260 [ 2325.586742] ? arch_get_unmapped_area+0x450/0x450 [ 2325.587846] mmap_region+0x7cc/0x1500 [ 2325.588670] do_mmap+0x868/0x1370 [ 2325.589409] vm_mmap_pgoff+0x198/0x1f0 [ 2325.590239] ? randomize_page+0xb0/0xb0 [ 2325.591098] ksys_mmap_pgoff+0x41c/0x560 [ 2325.591961] ? find_mergeable_anon_vma+0x250/0x250 [ 2325.593003] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2325.594112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2325.595218] do_syscall_64+0x33/0x40 [ 2325.596008] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2325.597091] RIP: 0033:0x7fbb28dd6b62 [ 2325.597879] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2325.601772] RSP: 002b:00007fbb2634c0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2325.603371] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbb28dd6b62 [ 2325.604870] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2325.606359] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2325.607872] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2325.609365] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2325.716763] device syz_tun entered promiscuous mode [ 2325.736347] device syz_tun left promiscuous mode [ 2325.748531] device syz_tun entered promiscuous mode [ 2325.762938] device syz_tun left promiscuous mode [ 2325.778623] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12057 comm=syz-executor.5 13:17:43 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x402100, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000040)={0x401, 0x7ff, 0x1, 0x80}, 0x10) 13:17:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010007190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:17:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x109}}, 0x0) 13:17:43 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0xfffffffffffffff7, 0x200) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x30}}, 0x7f) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r6, &(0x7f0000000180)="8eca4ffc90e143dd710d904363a24a36fd3ee786e7867db14922a95de934c54b052c944f1e957cc4e2a427ca1ba061b017af0f95e14855a2d6d0c3daebb9785b5df26be730c1fabac318e69c691d0541e9f24f210dda76fd938ca6aae8d3d72c6de4b4431c8325f040d09c96fcafac85549c121730d911c2fab5281a73ba668dd61cb2507a3d602bc7415ccea8583eb167506cb0b7b9b284d8555c3beb3cbf81d62b9760ef272960e817f9d99c40ce952e4484dc1e4b6413650d840b6603a572ad122afad1f3af83a5089737f3", 0xcd, 0x20000004, 0x0, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) dup3(r5, r6, 0x0) r7 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f00000003c0)='-\xfcx{\xe6\xac\xc8\xdf\x8e;\xb4Wy\xbea\xac2@\xa7\\\x98\x1f\x9d\x00\x00\x00', 0x0) ioctl$int_out(r7, 0x7e50, &(0x7f0000000280)) sendto$packet(r5, &(0x7f0000000000)="da64aa8618430cfc817e945a2e05ad009f2a05bbfe37c173c0c6e0e4575f643bc33e5ccb2ddd07f59747932d2da326fc5266613b55a8037c5d1b6e9c9619c973c7e26c587efe953d9b2265914fc5d2ed79c12f37392674b173a0b4751cf93f1a6aacd0f64dabe5b881d8f44d8beaa8f91187a899699846a88b01b24eb49298c41712a8254b501f3f2507225a8a4f3e398724d3fcc22e253f9fe02193cdf12c700626c4dda57f763050463ac1d2c12f0f580b134d14b4656f2570203ca62092e02aa285b98c493efc85e783911cd7ce206feafe3dca157b4f", 0xd8, 0x0, 0x0, 0x0) 13:17:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 13) 13:17:43 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:17:43 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 66) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:17:43 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x10, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2339.515465] device syz_tun entered promiscuous mode [ 2339.517674] device syz_tun entered promiscuous mode 13:17:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010009190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2339.525558] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12074 comm=syz-executor.5 [ 2339.527869] FAULT_INJECTION: forcing a failure. [ 2339.527869] name failslab, interval 1, probability 0, space 0, times 0 [ 2339.530269] CPU: 1 PID: 12069 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2339.531142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2339.532172] Call Trace: [ 2339.532509] dump_stack+0x107/0x167 [ 2339.532962] should_fail.cold+0x5/0xa [ 2339.533436] ? create_object.isra.0+0x3a/0xa30 [ 2339.534006] should_failslab+0x5/0x20 [ 2339.534476] kmem_cache_alloc+0x5b/0x310 [ 2339.534992] create_object.isra.0+0x3a/0xa30 [ 2339.535533] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2339.536164] kmem_cache_alloc+0x159/0x310 [ 2339.536679] vm_area_dup+0x78/0x290 [ 2339.537133] ? find_held_lock+0x2c/0x110 [ 2339.537637] ? __vma_adjust+0x66e/0x2510 [ 2339.538139] ? lock_downgrade+0x6d0/0x6d0 [ 2339.538661] ? up_write+0x191/0x550 [ 2339.539123] ? downgrade_write+0x3a0/0x3a0 [ 2339.539647] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 2339.540325] ? vm_area_alloc+0x110/0x110 [ 2339.540830] ? __vma_adjust+0xbb8/0x2510 [ 2339.541346] ? vmacache_find+0x55/0x2a0 [ 2339.541836] __split_vma+0xa8/0x4e0 [ 2339.542291] __do_munmap+0xf40/0x1260 [ 2339.542767] ? asm_sysvec_call_function_single+0x12/0x20 [ 2339.543444] ? trace_hardirqs_on+0x5b/0x180 [ 2339.543982] mmap_region+0x7cc/0x1500 [ 2339.544492] ? memfd_file_seals_ptr+0x2/0x170 [ 2339.545048] do_mmap+0x868/0x1370 [ 2339.545484] vm_mmap_pgoff+0x198/0x1f0 [ 2339.545970] ? randomize_page+0xb0/0xb0 [ 2339.546469] ksys_mmap_pgoff+0x41c/0x560 [ 2339.546983] ? find_mergeable_anon_vma+0x250/0x250 [ 2339.547591] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2339.548240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2339.548878] do_syscall_64+0x33/0x40 [ 2339.549344] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2339.549979] RIP: 0033:0x7fbb28dd6b62 [ 2339.550446] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2339.552729] RSP: 002b:00007fbb2634c0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2339.553663] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbb28dd6b62 [ 2339.554541] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2339.555423] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2339.556297] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2339.557188] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2339.558403] device syz_tun left promiscuous mode 13:17:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x10a}}, 0x0) [ 2339.586255] FAULT_INJECTION: forcing a failure. [ 2339.586255] name failslab, interval 1, probability 0, space 0, times 0 [ 2339.588851] CPU: 0 PID: 12075 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2339.590369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2339.592115] Call Trace: [ 2339.592683] dump_stack+0x107/0x167 [ 2339.593457] should_fail.cold+0x5/0xa [ 2339.594269] ? create_object.isra.0+0x3a/0xa30 [ 2339.595244] should_failslab+0x5/0x20 [ 2339.596047] kmem_cache_alloc+0x5b/0x310 [ 2339.596937] create_object.isra.0+0x3a/0xa30 [ 2339.597860] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2339.598967] kmem_cache_alloc+0x159/0x310 [ 2339.599868] jbd2__journal_start+0x190/0x7e0 [ 2339.600818] __ext4_journal_start_sb+0x214/0x390 [ 2339.601848] ext4_iomap_begin+0x485/0x700 [ 2339.602756] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 2339.603814] ? kasan_save_stack+0x1b/0x40 [ 2339.604712] ? ext4_file_write_iter+0xe0e/0x1530 [ 2339.605737] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 2339.607105] ? splice_direct_to_actor+0x387/0x980 [ 2339.608136] ? do_splice_direct+0x1c4/0x290 [ 2339.609067] ? do_sendfile+0x553/0x11e0 [ 2339.609920] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2339.610924] ? do_syscall_64+0x33/0x40 [ 2339.611758] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2339.612907] iomap_apply+0x164/0x810 [ 2339.613708] ? iomap_dio_rw+0x90/0x90 [ 2339.614535] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2339.615792] ? mark_held_locks+0x9e/0xe0 [ 2339.616686] ? filemap_check_errors+0xa5/0x150 [ 2339.617677] __iomap_dio_rw+0x6cd/0x1110 [ 2339.618555] ? iomap_dio_rw+0x90/0x90 [ 2339.619408] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2339.620391] ? ext4_orphan_add+0x253/0x9e0 [ 2339.621304] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2339.622357] ? ext4_empty_dir+0xae0/0xae0 [ 2339.623262] ? jbd2__journal_start+0xf3/0x7e0 [ 2339.624236] iomap_dio_rw+0x31/0x90 [ 2339.625025] ext4_file_write_iter+0xe0e/0x1530 [ 2339.626021] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2339.627004] ? kasan_save_stack+0x32/0x40 13:17:43 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, r6, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x80, &(0x7f00000001c0)=@l2tp={0x2, 0x0, @loopback}, 0x0, 0x800, 0x1}, 0x1ff) r8 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd=r1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000340)="501da9a76ad93bd2e42941d78b3b6627e8dacdc3b34ebb0c28c0a34e4c9b3b0efbe57d332c45c6e85a1e3124e0e092d149625c927e12d4063cf7ec1af85c9bcf2c99ac64515c324556b4281e0d02ff7b0cc7d783ddc9c1f5", 0x58}], 0x1, 0x1, 0x1, {0x2}}, 0x9) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x28) [ 2339.627894] ? kasan_save_stack+0x1b/0x40 [ 2339.628941] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2339.630033] ? iter_file_splice_write+0x165/0xc90 [ 2339.631079] ? direct_splice_actor+0x10f/0x170 [ 2339.632065] ? splice_direct_to_actor+0x387/0x980 [ 2339.632183] device syz_tun left promiscuous mode [ 2339.633102] ? do_splice_direct+0x1c4/0x290 [ 2339.633121] ? do_sendfile+0x553/0x11e0 [ 2339.633142] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2339.636529] ? do_syscall_64+0x33/0x40 [ 2339.637368] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2339.638526] do_iter_readv_writev+0x476/0x750 [ 2339.639495] ? _cond_resched+0x10/0x30 [ 2339.640316] ? new_sync_write+0x660/0x660 [ 2339.641207] ? avc_policy_seqno+0x9/0x70 [ 2339.642076] ? selinux_file_permission+0x92/0x520 [ 2339.643125] ? security_file_permission+0xb1/0xe0 [ 2339.644171] do_iter_write+0x191/0x700 [ 2339.645017] ? trace_hardirqs_on+0x5b/0x180 [ 2339.645958] vfs_iter_write+0x70/0xa0 [ 2339.646780] iter_file_splice_write+0x726/0xc90 [ 2339.647810] ? generic_splice_sendpage+0x140/0x140 [ 2339.648886] ? security_file_permission+0xb1/0xe0 [ 2339.649929] ? generic_splice_sendpage+0x140/0x140 [ 2339.650999] direct_splice_actor+0x10f/0x170 [ 2339.651955] splice_direct_to_actor+0x387/0x980 [ 2339.652962] ? pipe_to_sendpage+0x380/0x380 [ 2339.653893] ? do_splice_to+0x160/0x160 [ 2339.654753] ? security_file_permission+0xb1/0xe0 [ 2339.655811] do_splice_direct+0x1c4/0x290 [ 2339.656708] ? splice_direct_to_actor+0x980/0x980 [ 2339.657746] ? avc_policy_seqno+0x9/0x70 [ 2339.658631] ? security_file_permission+0xb1/0xe0 [ 2339.659693] do_sendfile+0x553/0x11e0 [ 2339.660532] ? do_pwritev+0x270/0x270 [ 2339.661360] ? wait_for_completion_io+0x270/0x270 [ 2339.662399] ? rcu_read_lock_any_held+0x75/0xa0 [ 2339.663412] ? vfs_write+0x354/0xb10 [ 2339.664224] __x64_sys_sendfile64+0x1d1/0x210 [ 2339.665205] ? __ia32_sys_sendfile+0x220/0x220 [ 2339.666204] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2339.667349] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2339.668470] do_syscall_64+0x33/0x40 [ 2339.669279] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2339.670393] RIP: 0033:0x7f4ef9c71b19 [ 2339.671212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2339.675215] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2339.676854] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2339.678384] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2339.679853] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2339.681307] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2339.682814] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 13:17:43 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 67) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:17:43 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = syz_open_dev$vcsu(&(0x7f0000000180), 0x20, 0x10000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'virt_wifi0\x00'}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6}, 0x10) 13:17:43 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x10, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:17:43 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2339.883737] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12083 comm=syz-executor.5 [ 2339.898973] FAULT_INJECTION: forcing a failure. [ 2339.898973] name failslab, interval 1, probability 0, space 0, times 0 [ 2339.901366] CPU: 0 PID: 12084 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2339.902814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2339.904558] Call Trace: [ 2339.905116] dump_stack+0x107/0x167 [ 2339.905884] should_fail.cold+0x5/0xa [ 2339.906685] ? anon_vma_clone+0xdc/0x590 [ 2339.907545] should_failslab+0x5/0x20 [ 2339.908349] kmem_cache_alloc+0x5b/0x310 [ 2339.909214] anon_vma_clone+0xdc/0x590 [ 2339.910041] __split_vma+0x17c/0x4e0 [ 2339.910823] __do_munmap+0xf40/0x1260 [ 2339.911642] ? arch_get_unmapped_area+0x450/0x450 [ 2339.912662] mmap_region+0x7cc/0x1500 [ 2339.913481] do_mmap+0x868/0x1370 [ 2339.914216] vm_mmap_pgoff+0x198/0x1f0 [ 2339.915046] ? randomize_page+0xb0/0xb0 [ 2339.915902] ksys_mmap_pgoff+0x41c/0x560 [ 2339.916757] ? find_mergeable_anon_vma+0x250/0x250 [ 2339.917792] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2339.918907] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2339.919993] do_syscall_64+0x33/0x40 [ 2339.920774] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2339.921852] RIP: 0033:0x7fbb28dd6b62 [ 2339.922631] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2339.926495] RSP: 002b:00007fbb2634c0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2339.928112] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbb28dd6b62 [ 2339.929607] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2339.931117] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2339.932639] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2339.934146] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:17:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="3801000f190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2339.992475] device syz_tun entered promiscuous mode 13:17:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x10f}}, 0x0) [ 2340.008752] device syz_tun left promiscuous mode [ 2340.029998] device syz_tun entered promiscuous mode 13:17:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 14) [ 2340.093709] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12100 comm=syz-executor.5 [ 2340.183901] device syz_tun left promiscuous mode [ 2340.194466] device syz_tun entered promiscuous mode [ 2340.197063] device syz_tun left promiscuous mode [ 2340.209613] FAULT_INJECTION: forcing a failure. [ 2340.209613] name failslab, interval 1, probability 0, space 0, times 0 [ 2340.213189] CPU: 0 PID: 12104 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2340.214650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2340.216408] Call Trace: [ 2340.216967] dump_stack+0x107/0x167 [ 2340.217736] should_fail.cold+0x5/0xa [ 2340.218533] ? jbd2__journal_start+0x190/0x7e0 [ 2340.219504] should_failslab+0x5/0x20 [ 2340.220300] kmem_cache_alloc+0x5b/0x310 [ 2340.221158] ? __kernel_text_address+0x9/0x40 [ 2340.222102] jbd2__journal_start+0x190/0x7e0 [ 2340.223053] __ext4_journal_start_sb+0x214/0x390 [ 2340.224053] ext4_iomap_begin+0x485/0x700 [ 2340.224938] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 2340.225968] ? kasan_save_stack+0x1b/0x40 [ 2340.226833] ? ext4_file_write_iter+0xe0e/0x1530 [ 2340.227843] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 2340.229171] ? splice_direct_to_actor+0x387/0x980 [ 2340.230194] ? do_splice_direct+0x1c4/0x290 [ 2340.231110] ? do_sendfile+0x553/0x11e0 [ 2340.231952] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2340.232942] ? do_syscall_64+0x33/0x40 [ 2340.233752] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2340.234897] iomap_apply+0x164/0x810 [ 2340.235681] ? iomap_dio_rw+0x90/0x90 [ 2340.236487] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2340.237698] ? mark_held_locks+0x9e/0xe0 [ 2340.238564] ? filemap_check_errors+0xa5/0x150 [ 2340.239536] __iomap_dio_rw+0x6cd/0x1110 [ 2340.240385] ? iomap_dio_rw+0x90/0x90 [ 2340.241201] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2340.242155] ? ext4_orphan_add+0x253/0x9e0 [ 2340.243049] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2340.244081] ? ext4_empty_dir+0xae0/0xae0 [ 2340.244944] ? jbd2__journal_start+0xf3/0x7e0 [ 2340.245898] iomap_dio_rw+0x31/0x90 [ 2340.246663] ext4_file_write_iter+0xe0e/0x1530 [ 2340.247650] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2340.248610] ? kasan_save_stack+0x32/0x40 [ 2340.249478] ? kasan_save_stack+0x1b/0x40 [ 2340.250339] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2340.251412] ? iter_file_splice_write+0x165/0xc90 [ 2340.252419] ? direct_splice_actor+0x10f/0x170 [ 2340.253369] ? splice_direct_to_actor+0x387/0x980 [ 2340.254381] ? do_splice_direct+0x1c4/0x290 [ 2340.255296] ? do_sendfile+0x553/0x11e0 [ 2340.256127] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2340.257102] ? do_syscall_64+0x33/0x40 [ 2340.257919] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2340.259064] do_iter_readv_writev+0x476/0x750 [ 2340.259993] ? _cond_resched+0x10/0x30 [ 2340.260813] ? new_sync_write+0x660/0x660 [ 2340.261683] ? avc_policy_seqno+0x9/0x70 [ 2340.262531] ? selinux_file_permission+0x92/0x520 [ 2340.263563] ? security_file_permission+0xb1/0xe0 [ 2340.264591] do_iter_write+0x191/0x700 [ 2340.265411] ? trace_hardirqs_on+0x5b/0x180 [ 2340.266333] vfs_iter_write+0x70/0xa0 [ 2340.267150] iter_file_splice_write+0x726/0xc90 [ 2340.268148] ? generic_splice_sendpage+0x140/0x140 [ 2340.269204] ? security_file_permission+0xb1/0xe0 [ 2340.270215] ? generic_splice_sendpage+0x140/0x140 [ 2340.271255] direct_splice_actor+0x10f/0x170 [ 2340.272187] splice_direct_to_actor+0x387/0x980 [ 2340.273177] ? pipe_to_sendpage+0x380/0x380 [ 2340.274096] ? do_splice_to+0x160/0x160 [ 2340.274945] ? security_file_permission+0xb1/0xe0 [ 2340.275970] do_splice_direct+0x1c4/0x290 [ 2340.276838] ? splice_direct_to_actor+0x980/0x980 [ 2340.277848] ? avc_policy_seqno+0x9/0x70 [ 2340.278704] ? security_file_permission+0xb1/0xe0 [ 2340.279760] do_sendfile+0x553/0x11e0 [ 2340.280578] ? do_pwritev+0x270/0x270 [ 2340.281388] ? wait_for_completion_io+0x270/0x270 [ 2340.282406] ? rcu_read_lock_any_held+0x75/0xa0 [ 2340.283398] ? vfs_write+0x354/0xb10 [ 2340.284186] __x64_sys_sendfile64+0x1d1/0x210 [ 2340.285134] ? __ia32_sys_sendfile+0x220/0x220 [ 2340.286097] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2340.287212] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2340.288309] do_syscall_64+0x33/0x40 [ 2340.289095] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2340.290176] RIP: 0033:0x7f4ef9c71b19 [ 2340.290979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2340.294745] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2340.296305] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2340.297745] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2340.299216] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2340.300689] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2340.302150] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 13:17:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 15) 13:17:57 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:17:58 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:17:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x186}}, 0x0) 13:17:58 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 68) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:17:58 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x7, 0x8000}, 0x1009) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r3) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000006c0)=ANY=[@ANYBLOB="0400000000000000000000008c08c84ff5b8a3ec28e7a662527f3f10335de21e52bc746436305082c8c02784edf9a1c7949181f8d53917f8b47b1af94d8d43a757a1208e366b24491136c764ca5bf7c9f714dbb9c75924ba7b736b0fbb876442e9e381f1afca97eea671999834692dbfb014d699b5fefc74e2c791af240fb6c837e14a0e06a5f5cc62f3ec26103a362cb798833413b74b2b76fc5301", @ANYRES32=r2, @ANYBLOB="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"]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x8804) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000280)='id_resolver\x00', 0x0, &(0x7f0000000080)="fa", 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000002c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) unshare(0x48020200) 13:17:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="3801002f190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:17:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x3, 0x6}, 0x10) [ 2354.350008] FAULT_INJECTION: forcing a failure. [ 2354.350008] name failslab, interval 1, probability 0, space 0, times 0 [ 2354.353325] CPU: 1 PID: 12116 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2354.355099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2354.357235] Call Trace: [ 2354.357943] dump_stack+0x107/0x167 [ 2354.359009] should_fail.cold+0x5/0xa [ 2354.360253] ? create_object.isra.0+0x3a/0xa30 [ 2354.361428] should_failslab+0x5/0x20 [ 2354.362410] kmem_cache_alloc+0x5b/0x310 [ 2354.363457] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2354.364822] create_object.isra.0+0x3a/0xa30 [ 2354.365928] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2354.367191] kmem_cache_alloc+0x159/0x310 [ 2354.368076] ? __kernel_text_address+0x9/0x40 [ 2354.369023] jbd2__journal_start+0x190/0x7e0 [ 2354.369997] __ext4_journal_start_sb+0x214/0x390 [ 2354.371174] ext4_iomap_begin+0x485/0x700 [ 2354.372308] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 2354.373373] ? kasan_save_stack+0x1b/0x40 [ 2354.374246] ? ext4_file_write_iter+0xe0e/0x1530 [ 2354.375277] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 2354.376618] ? splice_direct_to_actor+0x387/0x980 [ 2354.377680] ? do_splice_direct+0x1c4/0x290 [ 2354.378733] ? do_sendfile+0x553/0x11e0 [ 2354.379802] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2354.380780] ? do_syscall_64+0x33/0x40 [ 2354.381601] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2354.382741] iomap_apply+0x164/0x810 [ 2354.383566] ? iomap_dio_rw+0x90/0x90 [ 2354.384375] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2354.385600] ? mark_held_locks+0x9e/0xe0 [ 2354.386481] ? filemap_check_errors+0xa5/0x150 [ 2354.387481] __iomap_dio_rw+0x6cd/0x1110 [ 2354.388333] ? iomap_dio_rw+0x90/0x90 [ 2354.389192] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2354.390174] ? ext4_orphan_add+0x253/0x9e0 [ 2354.391201] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2354.392308] ? ext4_empty_dir+0xae0/0xae0 [ 2354.393200] ? jbd2__journal_start+0xf3/0x7e0 [ 2354.394322] iomap_dio_rw+0x31/0x90 [ 2354.395213] ext4_file_write_iter+0xe0e/0x1530 [ 2354.396190] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2354.397151] ? kasan_save_stack+0x32/0x40 [ 2354.398020] ? kasan_save_stack+0x1b/0x40 [ 2354.398896] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2354.399998] ? iter_file_splice_write+0x165/0xc90 [ 2354.401012] ? direct_splice_actor+0x10f/0x170 [ 2354.401969] ? splice_direct_to_actor+0x387/0x980 [ 2354.402979] ? do_splice_direct+0x1c4/0x290 [ 2354.403927] ? do_sendfile+0x553/0x11e0 [ 2354.404763] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2354.405744] ? do_syscall_64+0x33/0x40 [ 2354.406563] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2354.407728] do_iter_readv_writev+0x476/0x750 [ 2354.408670] ? _cond_resched+0x10/0x30 [ 2354.409497] ? new_sync_write+0x660/0x660 [ 2354.410369] ? avc_policy_seqno+0x9/0x70 [ 2354.411259] ? selinux_file_permission+0x92/0x520 [ 2354.412280] ? security_file_permission+0xb1/0xe0 [ 2354.413306] do_iter_write+0x191/0x700 [ 2354.414134] ? trace_hardirqs_on+0x5b/0x180 [ 2354.415078] vfs_iter_write+0x70/0xa0 [ 2354.415902] iter_file_splice_write+0x726/0xc90 [ 2354.416901] ? generic_splice_sendpage+0x140/0x140 [ 2354.417955] ? security_file_permission+0xb1/0xe0 [ 2354.418979] ? generic_splice_sendpage+0x140/0x140 [ 2354.420043] direct_splice_actor+0x10f/0x170 [ 2354.420983] splice_direct_to_actor+0x387/0x980 [ 2354.421967] ? pipe_to_sendpage+0x380/0x380 [ 2354.422884] ? do_splice_to+0x160/0x160 [ 2354.423750] ? security_file_permission+0xb1/0xe0 [ 2354.424781] do_splice_direct+0x1c4/0x290 [ 2354.425652] ? splice_direct_to_actor+0x980/0x980 [ 2354.426658] ? avc_policy_seqno+0x9/0x70 [ 2354.427556] ? security_file_permission+0xb1/0xe0 [ 2354.428597] do_sendfile+0x553/0x11e0 [ 2354.429415] ? do_pwritev+0x270/0x270 [ 2354.430223] ? wait_for_completion_io+0x270/0x270 [ 2354.431269] ? rcu_read_lock_any_held+0x75/0xa0 [ 2354.431940] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2354.432227] ? vfs_write+0x354/0xb10 [ 2354.432254] __x64_sys_sendfile64+0x1d1/0x210 [ 2354.435774] ? __ia32_sys_sendfile+0x220/0x220 [ 2354.436745] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2354.437848] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2354.438936] do_syscall_64+0x33/0x40 [ 2354.439746] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2354.440831] RIP: 0033:0x7f4ef9c71b19 [ 2354.441619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2354.445527] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2354.447157] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2354.448650] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2354.450154] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2354.451693] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2354.453198] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 [ 2354.467657] FAULT_INJECTION: forcing a failure. [ 2354.467657] name failslab, interval 1, probability 0, space 0, times 0 [ 2354.470254] CPU: 1 PID: 12119 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2354.471767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2354.473530] Call Trace: [ 2354.474090] dump_stack+0x107/0x167 [ 2354.474835] should_fail.cold+0x5/0xa [ 2354.475675] ? create_object.isra.0+0x3a/0xa30 [ 2354.476650] should_failslab+0x5/0x20 [ 2354.477428] kmem_cache_alloc+0x5b/0x310 [ 2354.478292] create_object.isra.0+0x3a/0xa30 [ 2354.479214] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2354.480297] kmem_cache_alloc+0x159/0x310 [ 2354.481148] anon_vma_clone+0xdc/0x590 [ 2354.481984] __split_vma+0x17c/0x4e0 [ 2354.482745] __do_munmap+0xf40/0x1260 [ 2354.483578] ? arch_get_unmapped_area+0x450/0x450 [ 2354.484572] mmap_region+0x7cc/0x1500 [ 2354.485392] do_mmap+0x868/0x1370 [ 2354.486114] vm_mmap_pgoff+0x198/0x1f0 [ 2354.486940] ? randomize_page+0xb0/0xb0 [ 2354.487788] ksys_mmap_pgoff+0x41c/0x560 [ 2354.488651] ? find_mergeable_anon_vma+0x250/0x250 [ 2354.489652] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2354.490766] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2354.491852] do_syscall_64+0x33/0x40 [ 2354.492642] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2354.493675] RIP: 0033:0x7fbb28dd6b62 [ 2354.494461] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2354.498213] RSP: 002b:00007fbb2634c0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2354.499850] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbb28dd6b62 [ 2354.501292] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2354.502811] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2354.504296] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2354.505808] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:17:58 executing program 3: r0 = fork() ptrace(0x11, r0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x1, 0x9, 0x9, 0x5, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3521, 0x4, @perf_config_ext={0xf7d2, 0x9}, 0x208, 0x10000, 0x78, 0xe, 0x4, 0xae97, 0x6, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) wait4(r0, 0x0, 0x1000000, &(0x7f0000000080)) ptrace(0x10, r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f00000001c0)='net/vlan/config\x00') ptrace$cont(0x7, r0, 0x373b, 0x100) 13:17:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x2c0}}, 0x0) 13:17:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) dup3(r3, r4, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x4, 0x20, 0x1, 0x9, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x7800, 0x1, 0x6}}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x15, r5, 0x1, 0x40, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) 13:17:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010041190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:17:58 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2354.739738] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12136 comm=syz-executor.5 13:17:58 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 69) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) [ 2354.783159] device syz_tun entered promiscuous mode [ 2354.795602] device syz_tun left promiscuous mode [ 2354.802983] device syz_tun entered promiscuous mode [ 2354.810667] device syz_tun left promiscuous mode 13:17:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0xec0}}, 0x0) [ 2354.913329] FAULT_INJECTION: forcing a failure. [ 2354.913329] name failslab, interval 1, probability 0, space 0, times 0 [ 2354.915553] CPU: 0 PID: 12146 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2354.916883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2354.918479] Call Trace: [ 2354.918990] dump_stack+0x107/0x167 [ 2354.919712] should_fail.cold+0x5/0xa [ 2354.920467] ? vm_area_alloc+0x1c/0x110 [ 2354.921245] should_failslab+0x5/0x20 [ 2354.921998] kmem_cache_alloc+0x5b/0x310 [ 2354.922796] vm_area_alloc+0x1c/0x110 [ 2354.923572] mmap_region+0x982/0x1500 [ 2354.924330] do_mmap+0x868/0x1370 [ 2354.925028] vm_mmap_pgoff+0x198/0x1f0 [ 2354.925793] ? randomize_page+0xb0/0xb0 [ 2354.926601] ksys_mmap_pgoff+0x41c/0x560 [ 2354.927403] ? find_mergeable_anon_vma+0x250/0x250 [ 2354.928388] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2354.929420] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2354.930459] do_syscall_64+0x33/0x40 [ 2354.931200] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2354.932201] RIP: 0033:0x7fbb28dd6b62 [ 2354.932921] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2354.936542] RSP: 002b:00007fbb2634c0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2354.938011] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbb28dd6b62 [ 2354.939434] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2354.940846] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2354.942247] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2354.943660] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2355.088683] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12150 comm=syz-executor.5 13:18:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010048190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:18:11 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:18:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x33fe0}}, 0x0) 13:18:11 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 70) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:18:11 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:18:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 16) 13:18:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000100)=0x3f, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001200)={0x3c, 0x16, 0x20, 0x70bd2a, 0x0, {0xa, 0x0, 0x300}, [@generic="9f1d62e53de5d7a1319cf1d8d2b38e9757875581b9ad317d4a75cfe079b24885c72015b615"]}, 0x3c}}, 0x0) r2 = creat(0x0, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000040)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) syz_io_uring_submit(r4, r5, &(0x7f00000011c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index, 0xff, 0x0, 0x9, 0x2}, 0xaa) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x8, 0x40, 0x1, 0x8, 0x0, 0x3c7bcee4, 0x40020, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x190, 0x1ff, 0x43f, 0x5, 0x1ff, 0x7fff, 0x4, 0x0, 0x9, 0x0, 0x6388cc53}, r6, 0x7, r2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x1030, 0x2b, 0x1, 0x70bd29, 0x25dfdbfd, {0x14}, [@generic="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", @generic="4a020393079e261f9ac9", @typed={0x8, 0x3b, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x6f, 0x0, 0x0, @pid=r6}]}, 0x1030}, 0x1, 0x0, 0x0, 0x40008080}, 0x40044) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r8, 0x3, 0x6}, 0x10) 13:18:11 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd_index=0x2, 0x8, &(0x7f00000000c0)=[{&(0x7f0000000000)="1474454fe85db21d0f42375c4195b1281acd9e9dd53d7d40", 0x18}, {&(0x7f0000000040)="4e91dd44ceeeee1d128402d465c821160913f31425420e2e42a979e1f3fee09bf978641f13d373f8ccb8a345b0bc199ff94cd09ae77b07f0001a1bbe0c43226c353eefbc294415ac", 0x48}], 0x2, 0xb}, 0x9) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000340)="849a376dce629a3b8819bf42ffe1cf44d2dda84272eb66132755343e91d301170a6adfe62efbcb8f959a79306e68be7e8be86ed5e07b69606f5f67638529f468eabf5edea35d7b2e504a0b953a00aec684558b39f4cffb6abe07be6042e221314d73302a467722ec697a25305f38217fc40c09a141789d035f81eb878fb4f323300fc692e2d28cfe4b12a62950f8ffca7274ea2b2ea77b5d8449970c4a3d49a773582d4c9090bb9e1d25d9d959d8ac99245c4ccfc4ba6b1618ac0c70b7c981a3531de8c8e3f19c38c8b6f2f6fdea865d261a7b566c42", 0xd6}, 0x1, 0x0, 0x0, 0x1}, 0x40015) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) [ 2368.279495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=12161 comm=syz-executor.0 [ 2368.284453] device syz_tun entered promiscuous mode [ 2368.286002] device syz_tun left promiscuous mode [ 2368.293735] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12164 comm=syz-executor.5 [ 2368.297686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=12161 comm=syz-executor.0 [ 2368.301294] device syz_tun entered promiscuous mode [ 2368.302524] device syz_tun left promiscuous mode [ 2368.330088] FAULT_INJECTION: forcing a failure. [ 2368.330088] name failslab, interval 1, probability 0, space 0, times 0 [ 2368.330437] FAULT_INJECTION: forcing a failure. [ 2368.330437] name failslab, interval 1, probability 0, space 0, times 0 [ 2368.332940] CPU: 1 PID: 12162 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2368.335966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2368.337778] Call Trace: [ 2368.338341] dump_stack+0x107/0x167 [ 2368.339150] should_fail.cold+0x5/0xa [ 2368.339975] ? ext4_find_extent+0xa77/0xd70 [ 2368.340890] should_failslab+0x5/0x20 [ 2368.341700] __kmalloc+0x72/0x390 [ 2368.342446] ext4_find_extent+0xa77/0xd70 [ 2368.343354] ext4_ext_map_blocks+0x1c8/0x5830 [ 2368.344329] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2368.345446] ? perf_trace_lock+0xac/0x490 [ 2368.346337] ? ext4_ext_release+0x10/0x10 [ 2368.347238] ? lock_release+0x680/0x680 [ 2368.348095] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 2368.349099] ? lock_downgrade+0x6d0/0x6d0 [ 2368.349998] ? down_read+0x10f/0x430 [ 2368.350791] ? down_write+0x160/0x160 [ 2368.351610] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 2368.352614] ext4_map_blocks+0x8e1/0x1910 [ 2368.353501] ? kmem_cache_alloc+0x2a6/0x310 [ 2368.354417] ? __kernel_text_address+0x9/0x40 [ 2368.355360] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2368.356302] ? jbd2__journal_start+0xf3/0x7e0 [ 2368.357239] ? __ext4_journal_start_sb+0x214/0x390 [ 2368.358259] ? __ext4_journal_start_sb+0x1db/0x390 [ 2368.359281] ext4_iomap_begin+0x3ad/0x700 [ 2368.360192] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 2368.361187] ? kasan_save_stack+0x1b/0x40 [ 2368.362045] ? ext4_file_write_iter+0xe0e/0x1530 [ 2368.363055] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 2368.364376] ? splice_direct_to_actor+0x387/0x980 [ 2368.365390] ? do_splice_direct+0x1c4/0x290 [ 2368.366306] ? do_sendfile+0x553/0x11e0 [ 2368.367146] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2368.368151] ? do_syscall_64+0x33/0x40 [ 2368.368976] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2368.370112] iomap_apply+0x164/0x810 [ 2368.370904] ? iomap_dio_rw+0x90/0x90 [ 2368.371726] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2368.372960] ? mark_held_locks+0x9e/0xe0 [ 2368.373840] ? filemap_check_errors+0xa5/0x150 [ 2368.374818] __iomap_dio_rw+0x6cd/0x1110 [ 2368.375686] ? iomap_dio_rw+0x90/0x90 [ 2368.376521] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2368.377490] ? ext4_orphan_add+0x253/0x9e0 [ 2368.378390] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2368.379446] ? ext4_empty_dir+0xae0/0xae0 [ 2368.380318] ? jbd2__journal_start+0xf3/0x7e0 [ 2368.381287] iomap_dio_rw+0x31/0x90 [ 2368.382060] ext4_file_write_iter+0xe0e/0x1530 [ 2368.383052] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2368.384028] ? kasan_save_stack+0x32/0x40 [ 2368.384901] ? kasan_save_stack+0x1b/0x40 [ 2368.385778] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2368.386852] ? iter_file_splice_write+0x165/0xc90 [ 2368.387880] ? direct_splice_actor+0x10f/0x170 [ 2368.388846] ? splice_direct_to_actor+0x387/0x980 [ 2368.389864] ? do_splice_direct+0x1c4/0x290 [ 2368.390780] ? do_sendfile+0x553/0x11e0 [ 2368.391629] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2368.392611] ? do_syscall_64+0x33/0x40 [ 2368.393435] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2368.394569] do_iter_readv_writev+0x476/0x750 [ 2368.395540] ? _cond_resched+0x10/0x30 [ 2368.396365] ? new_sync_write+0x660/0x660 [ 2368.397247] ? avc_policy_seqno+0x9/0x70 [ 2368.398109] ? selinux_file_permission+0x92/0x520 [ 2368.399134] ? security_file_permission+0xb1/0xe0 [ 2368.400170] do_iter_write+0x191/0x700 [ 2368.400993] ? trace_hardirqs_on+0x5b/0x180 [ 2368.401916] vfs_iter_write+0x70/0xa0 [ 2368.402726] iter_file_splice_write+0x726/0xc90 [ 2368.403745] ? generic_splice_sendpage+0x140/0x140 [ 2368.404808] ? security_file_permission+0xb1/0xe0 [ 2368.405845] ? generic_splice_sendpage+0x140/0x140 [ 2368.406885] direct_splice_actor+0x10f/0x170 [ 2368.407837] splice_direct_to_actor+0x387/0x980 [ 2368.408832] ? pipe_to_sendpage+0x380/0x380 [ 2368.409758] ? do_splice_to+0x160/0x160 [ 2368.410597] ? security_file_permission+0xb1/0xe0 [ 2368.411868] do_splice_direct+0x1c4/0x290 [ 2368.412933] ? splice_direct_to_actor+0x980/0x980 [ 2368.414154] ? avc_policy_seqno+0x9/0x70 [ 2368.415188] ? security_file_permission+0xb1/0xe0 [ 2368.416258] do_sendfile+0x553/0x11e0 [ 2368.417041] ? do_pwritev+0x270/0x270 [ 2368.417817] ? wait_for_completion_io+0x270/0x270 [ 2368.418789] ? rcu_read_lock_any_held+0x75/0xa0 [ 2368.419732] ? vfs_write+0x354/0xb10 [ 2368.420492] __x64_sys_sendfile64+0x1d1/0x210 [ 2368.421394] ? __ia32_sys_sendfile+0x220/0x220 [ 2368.422328] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2368.423390] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2368.424425] do_syscall_64+0x33/0x40 [ 2368.425176] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2368.426198] RIP: 0033:0x7f4ef9c71b19 [ 2368.426956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2368.430652] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2368.432194] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2368.433640] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2368.435074] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2368.436523] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2368.437957] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 [ 2368.439443] CPU: 0 PID: 12171 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2368.440338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2368.441379] Call Trace: [ 2368.441717] dump_stack+0x107/0x167 [ 2368.442175] should_fail.cold+0x5/0xa [ 2368.442664] ? create_object.isra.0+0x3a/0xa30 [ 2368.443245] should_failslab+0x5/0x20 [ 2368.443726] kmem_cache_alloc+0x5b/0x310 [ 2368.444238] create_object.isra.0+0x3a/0xa30 [ 2368.444789] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2368.445423] kmem_cache_alloc+0x159/0x310 [ 2368.445956] vm_area_alloc+0x1c/0x110 [ 2368.446428] mmap_region+0x982/0x1500 [ 2368.446920] do_mmap+0x868/0x1370 [ 2368.447369] vm_mmap_pgoff+0x198/0x1f0 [ 2368.447858] ? randomize_page+0xb0/0xb0 [ 2368.448363] ksys_mmap_pgoff+0x41c/0x560 [ 2368.448874] ? find_mergeable_anon_vma+0x250/0x250 [ 2368.449497] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2368.450156] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2368.450815] do_syscall_64+0x33/0x40 [ 2368.451300] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2368.451961] RIP: 0033:0x7fbb28dd6b62 [ 2368.452465] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2368.454767] RSP: 002b:00007fbb2634c0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2368.455726] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbb28dd6b62 [ 2368.456618] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2368.457515] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2368.458410] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2368.459308] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:18:12 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x1, 0x3ff, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[]) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="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"]) 13:18:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="3801004c190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:18:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x20000938}}, 0x0) 13:18:12 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000100)=0x3f, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000016ae9cc073e089a15fc600000000000000007043110086ea785cc5cbdbbb616a555357f1000000000000000a"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xb8, 0x0, 0x203, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x9}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a427518553d8987cceaba20c70a4bb9401c115657f007aaf"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2265e500ec28cb96a3a82c9d10fec39591f01decb24d4c2c"}], @NL80211_ATTR_IFNAME={0x0, 0x4, 'team_slave_1\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40088) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) 13:18:12 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:18:12 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 71) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:18:12 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2368.677106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44566 sclass=netlink_route_socket pid=12183 comm=syz-executor.0 [ 2368.687535] FAULT_INJECTION: forcing a failure. [ 2368.687535] name failslab, interval 1, probability 0, space 0, times 0 [ 2368.688884] CPU: 0 PID: 12184 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2368.689698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2368.690692] Call Trace: [ 2368.691010] dump_stack+0x107/0x167 [ 2368.691454] should_fail.cold+0x5/0xa [ 2368.691908] ? vm_area_dup+0x78/0x290 [ 2368.692363] should_failslab+0x5/0x20 [ 2368.692811] kmem_cache_alloc+0x5b/0x310 [ 2368.693294] vm_area_dup+0x78/0x290 [ 2368.693728] ? mark_lock+0xf5/0x2df0 [ 2368.694173] ? lock_chain_count+0x20/0x20 [ 2368.694666] ? __lock_acquire+0x1657/0x5b00 [ 2368.695181] ? mark_lock+0xf5/0x2df0 [ 2368.695629] ? find_held_lock+0x2c/0x110 [ 2368.696110] ? vm_area_alloc+0x110/0x110 [ 2368.696592] ? __lock_acquire+0x1657/0x5b00 [ 2368.697110] ? lock_acquire+0x197/0x470 [ 2368.697581] ? __mm_populate+0x24e/0x360 [ 2368.698061] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2368.698681] ? vmacache_find+0x55/0x2a0 [ 2368.699150] __split_vma+0xa8/0x4e0 [ 2368.699585] __do_munmap+0x365/0x1260 [ 2368.700039] ? arch_get_unmapped_area+0x450/0x450 [ 2368.700607] ? lock_release+0x680/0x680 [ 2368.701081] mmap_region+0x7cc/0x1500 [ 2368.701537] do_mmap+0x868/0x1370 [ 2368.701957] vm_mmap_pgoff+0x198/0x1f0 [ 2368.702422] ? randomize_page+0xb0/0xb0 [ 2368.702903] ksys_mmap_pgoff+0x41c/0x560 [ 2368.703391] ? find_mergeable_anon_vma+0x250/0x250 [ 2368.703964] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2368.704583] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2368.705202] do_syscall_64+0x33/0x40 [ 2368.705643] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2368.706251] RIP: 0033:0x7fbb28dd6b62 [ 2368.706688] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2368.708853] RSP: 002b:00007fbb2634c0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2368.709743] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbb28dd6b62 [ 2368.710580] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2368.711434] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2368.712272] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2368.713111] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2368.714263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12183 comm=syz-executor.0 [ 2368.718207] device syz_tun entered promiscuous mode [ 2368.720903] device syz_tun left promiscuous mode [ 2368.737626] 9p: Unknown Cache mode [ 2368.737626] ' [ 2368.746959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44566 sclass=netlink_route_socket pid=12183 comm=syz-executor.0 [ 2368.755598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12189 comm=syz-executor.0 13:18:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x7ffff000}}, 0x0) [ 2368.764694] device syz_tun entered promiscuous mode [ 2368.765495] device syz_tun left promiscuous mode 13:18:26 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:18:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0xfffffdef}}, 0x0) 13:18:26 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:18:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010068190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:18:26 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1613bf23, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000300)=0x5, 0x4) finit_module(0xffffffffffffffff, &(0x7f0000000380)='\xff\xff', 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x3966, @mcast1={0xff, 0x5}, 0xfffffffc}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2000000}}}, 0x108) pselect6(0x40, &(0x7f00000013c0)={0x0, 0xfffffffffffffeff, 0x0, 0x9d, 0x5, 0x5, 0x10003ff}, 0x0, &(0x7f0000001440)={0xe9, 0x80000000a, 0x0, 0x2000000000000005, 0x1, 0x401, 0x81, 0x4bd}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) fsetxattr$security_selinux(r0, &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26, 0x2) quotactl(0x0, &(0x7f0000001340)='./file0\x00', 0x0, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000cc0)={&(0x7f0000000b40), 0xc, &(0x7f0000000c80)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="010000f60000000000001a01000000002280040022901cf10500920000000000f2cbcc0070aab07340b5b7ea38d76a8bca8a9f3a52b03ba8d25dddbea73f89db8f5e"], 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)=ANY=[@ANYBLOB='l', @ANYRES32=r2, @ANYBLOB="02000000000000072657bc42002e2f66696c653000"]) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x2) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000008c0), 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000280)) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000180), &(0x7f0000000200)=0xc) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000240)=0xffffffffffffffff) unshare(0x8040000) 13:18:26 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 72) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:18:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 17) 13:18:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f00000003c0)='-\xfcx{\xe6\xac\xc8\xdf\x8e;\xb4Wy\xbea\xac2@\xa7\\\x98\x1f\x9d\x00\x00\x00', 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r7, 0xc0109428, &(0x7f0000000440)={0x2, 0x5}) r8 = openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x260942, 0x17e, 0x10}, 0x18) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1930d4ab63d8f066}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4084) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x12, 0x0, r11) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r9, 0x0, &(0x7f0000000000)="72e2c13c40b9c7ae73a350df613aab71b0b3d1d895c41b489c932fc604199e6957c5a2b3c52a1dbaeba2eca3f784c63b5a0c77462fb95342dcc9745fea5a986fc278216741ad38e3625af03736fcd4f9e215dfc0967055a44bb0e6849831aced77fb097510d8999bde9a5a33e9bb401d59ab57a0f02ec4369238f4547facef3f7255cd48c5c8d6e935314252c60eb89c90ad9bd84488769bc28f1b35deadddb6aeb5357f581fbbe4703fd0482bb580bea2e636c6e603206b83a7b0c2", 0xbc, 0x40, 0x0, {0x0, r11}}, 0xd2f) [ 2382.595413] FAULT_INJECTION: forcing a failure. [ 2382.595413] name failslab, interval 1, probability 0, space 0, times 0 [ 2382.599412] CPU: 0 PID: 12211 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2382.599860] FAULT_INJECTION: forcing a failure. [ 2382.599860] name failslab, interval 1, probability 0, space 0, times 0 [ 2382.601205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2382.604820] Call Trace: [ 2382.605516] dump_stack+0x107/0x167 [ 2382.606478] should_fail.cold+0x5/0xa [ 2382.607485] ? __es_insert_extent+0xed1/0x1370 [ 2382.608679] should_failslab+0x5/0x20 [ 2382.609676] kmem_cache_alloc+0x5b/0x310 [ 2382.610747] __es_insert_extent+0xed1/0x1370 [ 2382.611914] ? do_raw_read_unlock+0x70/0x70 [ 2382.613037] ? perf_trace_lock+0xac/0x490 [ 2382.614135] ext4_es_insert_extent+0x45d/0xf10 [ 2382.615344] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2382.616481] ? ext4_es_find_extent_range+0x1cb/0x460 [ 2382.617804] ? lock_downgrade+0x6d0/0x6d0 [ 2382.618900] ? __ext4_handle_dirty_super+0x100/0x100 [ 2382.620235] ? __es_find_extent_range+0x197/0x4b0 [ 2382.621361] ? do_raw_read_unlock+0x3b/0x70 [ 2382.622375] ext4_ext_map_blocks+0x1866/0x5830 [ 2382.623451] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2382.624653] ? perf_trace_lock+0xac/0x490 [ 2382.625614] ? ext4_ext_release+0x10/0x10 [ 2382.626572] ? lock_release+0x680/0x680 [ 2382.627495] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 2382.628578] ? lock_downgrade+0x6d0/0x6d0 [ 2382.629542] ? down_read+0x10f/0x430 [ 2382.630396] ? down_write+0x160/0x160 [ 2382.631263] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 2382.632349] ext4_map_blocks+0x8e1/0x1910 [ 2382.633310] ? kmem_cache_alloc+0x2a6/0x310 [ 2382.634298] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2382.635322] ? jbd2__journal_start+0xf3/0x7e0 [ 2382.636361] ? __ext4_journal_start_sb+0x214/0x390 [ 2382.637473] ? __ext4_journal_start_sb+0x1db/0x390 [ 2382.638598] ext4_iomap_begin+0x3ad/0x700 [ 2382.639567] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 2382.640679] ? kasan_save_stack+0x1b/0x40 [ 2382.641626] ? ext4_file_write_iter+0xe0e/0x1530 [ 2382.642708] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 2382.644149] ? splice_direct_to_actor+0x387/0x980 [ 2382.645230] ? do_splice_direct+0x1c4/0x290 [ 2382.646205] ? do_sendfile+0x553/0x11e0 [ 2382.647100] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2382.648157] ? do_syscall_64+0x33/0x40 [ 2382.649035] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2382.650246] iomap_apply+0x164/0x810 [ 2382.651091] ? iomap_dio_rw+0x90/0x90 [ 2382.651968] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2382.653283] ? mark_held_locks+0x9e/0xe0 [ 2382.654221] ? filemap_check_errors+0xa5/0x150 [ 2382.655261] __iomap_dio_rw+0x6cd/0x1110 [ 2382.656187] ? iomap_dio_rw+0x90/0x90 [ 2382.657075] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2382.658107] ? ext4_orphan_add+0x253/0x9e0 [ 2382.659066] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2382.660185] ? ext4_empty_dir+0xae0/0xae0 [ 2382.661126] ? jbd2__journal_start+0xf3/0x7e0 [ 2382.662152] iomap_dio_rw+0x31/0x90 [ 2382.662979] ext4_file_write_iter+0xe0e/0x1530 [ 2382.664039] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2382.665062] ? kasan_save_stack+0x32/0x40 [ 2382.665988] ? kasan_save_stack+0x1b/0x40 [ 2382.666923] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2382.668066] ? iter_file_splice_write+0x165/0xc90 [ 2382.669141] ? direct_splice_actor+0x10f/0x170 [ 2382.670159] ? splice_direct_to_actor+0x387/0x980 [ 2382.671234] ? do_splice_direct+0x1c4/0x290 [ 2382.672203] ? do_sendfile+0x553/0x11e0 [ 2382.673095] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2382.674140] ? do_syscall_64+0x33/0x40 [ 2382.675010] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2382.676231] do_iter_readv_writev+0x476/0x750 [ 2382.677231] ? _cond_resched+0x10/0x30 [ 2382.678104] ? new_sync_write+0x660/0x660 [ 2382.679039] ? avc_policy_seqno+0x9/0x70 [ 2382.679966] ? selinux_file_permission+0x92/0x520 [ 2382.681052] ? security_file_permission+0xb1/0xe0 [ 2382.682146] do_iter_write+0x191/0x700 [ 2382.683023] ? trace_hardirqs_on+0x5b/0x180 [ 2382.684005] vfs_iter_write+0x70/0xa0 [ 2382.684867] iter_file_splice_write+0x726/0xc90 [ 2382.685922] ? generic_splice_sendpage+0x140/0x140 [ 2382.687036] ? security_file_permission+0xb1/0xe0 [ 2382.688120] ? generic_splice_sendpage+0x140/0x140 [ 2382.689221] direct_splice_actor+0x10f/0x170 [ 2382.690203] splice_direct_to_actor+0x387/0x980 [ 2382.691246] ? pipe_to_sendpage+0x380/0x380 [ 2382.692218] ? do_splice_to+0x160/0x160 [ 2382.693100] ? security_file_permission+0xb1/0xe0 [ 2382.694182] do_splice_direct+0x1c4/0x290 [ 2382.695105] ? splice_direct_to_actor+0x980/0x980 [ 2382.696177] ? avc_policy_seqno+0x9/0x70 [ 2382.697087] ? security_file_permission+0xb1/0xe0 [ 2382.698181] do_sendfile+0x553/0x11e0 [ 2382.699044] ? do_pwritev+0x270/0x270 [ 2382.699898] ? wait_for_completion_io+0x270/0x270 [ 2382.700972] ? rcu_read_lock_any_held+0x75/0xa0 [ 2382.702001] ? vfs_write+0x354/0xb10 [ 2382.702835] __x64_sys_sendfile64+0x1d1/0x210 [ 2382.703837] ? __ia32_sys_sendfile+0x220/0x220 [ 2382.704866] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2382.706033] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2382.707188] do_syscall_64+0x33/0x40 [ 2382.708023] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2382.709163] RIP: 0033:0x7f4ef9c71b19 [ 2382.709993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2382.714099] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2382.715789] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2382.717379] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2382.718951] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2382.720533] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2382.722103] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 [ 2382.723731] CPU: 1 PID: 12209 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2382.724647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2382.725725] Call Trace: [ 2382.726067] dump_stack+0x107/0x167 [ 2382.726557] should_fail.cold+0x5/0xa [ 2382.727070] ? create_object.isra.0+0x3a/0xa30 [ 2382.727690] should_failslab+0x5/0x20 [ 2382.728200] kmem_cache_alloc+0x5b/0x310 [ 2382.728743] create_object.isra.0+0x3a/0xa30 [ 2382.729321] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2382.729989] kmem_cache_alloc+0x159/0x310 [ 2382.730538] vm_area_dup+0x78/0x290 [ 2382.731025] ? mark_lock+0xf5/0x2df0 [ 2382.731529] ? lock_chain_count+0x20/0x20 [ 2382.732080] ? __lock_acquire+0x1657/0x5b00 [ 2382.732650] ? mark_lock+0xf5/0x2df0 [ 2382.733137] ? find_held_lock+0x2c/0x110 [ 2382.733681] ? vm_area_alloc+0x110/0x110 [ 2382.734222] ? __lock_acquire+0x1657/0x5b00 [ 2382.734793] ? lock_acquire+0x197/0x470 [ 2382.735315] ? __mm_populate+0x24e/0x360 [ 2382.735854] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2382.736583] ? vmacache_find+0x55/0x2a0 [ 2382.737106] __split_vma+0xa8/0x4e0 [ 2382.737594] __do_munmap+0x365/0x1260 [ 2382.738098] ? arch_get_unmapped_area+0x450/0x450 [ 2382.738728] ? lock_release+0x680/0x680 [ 2382.739248] mmap_region+0x7cc/0x1500 [ 2382.739771] do_mmap+0x868/0x1370 [ 2382.740233] vm_mmap_pgoff+0x198/0x1f0 [ 2382.740747] ? randomize_page+0xb0/0xb0 [ 2382.741271] ksys_mmap_pgoff+0x41c/0x560 [ 2382.741793] ? find_mergeable_anon_vma+0x250/0x250 [ 2382.742429] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2382.743107] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2382.743793] do_syscall_64+0x33/0x40 [ 2382.744273] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2382.744935] RIP: 0033:0x7fbb28dd6b62 [ 2382.745413] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2382.747799] RSP: 002b:00007fbb2634c0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2382.748779] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbb28dd6b62 [ 2382.749703] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2382.750624] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2382.751559] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2382.752483] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:18:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}, 0x8}, 0x0) [ 2382.758388] device syz_tun entered promiscuous mode [ 2382.845019] device syz_tun left promiscuous mode 13:18:26 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2382.860291] device syz_tun entered promiscuous mode 13:18:26 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 73) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:18:26 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:18:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="3801006c190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2382.908850] device syz_tun left promiscuous mode [ 2382.967445] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12221 comm=syz-executor.5 13:18:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 18) [ 2383.063088] FAULT_INJECTION: forcing a failure. [ 2383.063088] name failslab, interval 1, probability 0, space 0, times 0 [ 2383.065771] CPU: 0 PID: 12231 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2383.067403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2383.069325] Call Trace: [ 2383.069939] dump_stack+0x107/0x167 [ 2383.070787] should_fail.cold+0x5/0xa [ 2383.071681] ? anon_vma_clone+0xdc/0x590 [ 2383.072629] should_failslab+0x5/0x20 [ 2383.073520] kmem_cache_alloc+0x5b/0x310 [ 2383.074470] anon_vma_clone+0xdc/0x590 [ 2383.075392] __split_vma+0x17c/0x4e0 [ 2383.076267] __do_munmap+0x365/0x1260 [ 2383.077163] ? arch_get_unmapped_area+0x450/0x450 [ 2383.078291] ? lock_release+0x680/0x680 [ 2383.079217] mmap_region+0x7cc/0x1500 [ 2383.080125] do_mmap+0x868/0x1370 [ 2383.080940] vm_mmap_pgoff+0x198/0x1f0 [ 2383.081850] ? randomize_page+0xb0/0xb0 [ 2383.082789] ksys_mmap_pgoff+0x41c/0x560 [ 2383.083753] ? find_mergeable_anon_vma+0x250/0x250 [ 2383.084896] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2383.086351] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2383.087575] do_syscall_64+0x33/0x40 [ 2383.088447] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2383.089641] RIP: 0033:0x7fbb28dd6b62 [ 2383.090509] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2383.094853] RSP: 002b:00007fbb2634c0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2383.096640] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbb28dd6b62 [ 2383.098308] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2383.099980] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2383.101648] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2383.103317] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:18:26 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) dup3(r0, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000001bc0)={0x200, 0x1, {0xffffffffffffffff, 0x3, 0xa0, 0x1, 0x8}, 0x9}) io_uring_enter(0xffffffffffffffff, 0x3070, 0x39ef, 0x3, &(0x7f0000000000), 0x8) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = accept4$packet(r2, 0x0, &(0x7f0000000040), 0x80000) accept$packet(r2, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002600)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002fc0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000059c0)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000005ac0)=0xe8) sendmmsg$inet(r5, &(0x7f0000006340)=[{{&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001340)=[{&(0x7f0000000180)="708d73a662ef643699fc9fbd05de79fbea526fba05ed1a11ab40496e01b9c834c93e7eae4c964008486e3d12164d399e66be495f26ae8dcd8764da980c8fd4e3f50e9d1ddd16c87473c6bc4292eff499d3f430a4f24a689fdbe1be803e25c583d2c43c369dcb151944cda936136d8291a82fd032b8b1f669e5d95f755431f15a1d8271f0f27725478a8815aaa1af187e58d9b091340e3d", 0x97}, {&(0x7f00000000c0)="38a40dc347e1675631ffac0ac10d6e8ce4b4596efc65d6db2467c1828d337a3db185a181e149cc354f1944cdd73377c045fae8d76f5d", 0x36}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="6a3292b1b975080afa7614a1c1df3ecbd96a4605eac3bc8dc9bbfd36dd919097ed72553e17551faf8b8b2231eefb296c8e35aa1416295d3308f60bce85df1800f7bd2ad9c7d2f2f357df787ea01c876e9a3578c3800ced3008c8f2509c6bb8baea47989bc8823721eb026a95290aa14225eccdaa33f95676d90794af7429ed56459b4214ebc60ff73b30d43207933fe61082654cc49fcc2fbc7af6324f1022b09de516477b403a01f89a3a9c9bc0b39e2f26c4d36263e99e10a204ad69c904c521c007d834fb2adbcf711b54744c086c669a1404e485c61481e063", 0xdb}], 0x4, &(0x7f0000001380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010102, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @dev={0xac, 0x14, 0x14, 0x4}}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x27, 0x2a, [@loopback, @local, @empty, @multicast2, @rand_addr=0x64010101, @multicast2, @loopback, @remote, @rand_addr=0x64010102]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0x42, 0x1, 0x5, [{@loopback, 0x80000000}, {@loopback, 0xffff8001}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x17f24c3a}, {@broadcast, 0x80000001}, {@loopback, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x770}, {@remote}]}, @timestamp_addr={0x44, 0xc, 0x25, 0x1, 0xb, [{@remote, 0x4}]}, @ssrr={0x89, 0x1f, 0xd0, [@dev={0xac, 0x14, 0x14, 0x11}, @local, @empty, @broadcast, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}, @ip_tos_u8={{0x11}}], 0x108}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="8154d9ce2a2ae5f90cecdf3c56dd1949ccc7b858839cc076f3ed01416af96507dc6815a9a4f722832021fa9456b5512ffa222a156100923748c82a09acebfe11f7b156dbb242d9434de97d55c3883bbb0f961c17b8169af6aaa61a5656a92e9a293ca5894a254bc015f740d2ca3edb08ea5ebc19c5b69d5b86ab746ea1840deb06e3922473b8dea51db0144cf8e30826e9f1c21272f261ed21f19837fee409f892beb9bdf20b15f614bb1f3194e4f88bd8914f5ab0d32a4ca8", 0xb9}, {&(0x7f0000001580)="61d3244e6d42a4623b15135c3429489d6dc0a43c93478d62", 0x18}, {&(0x7f00000015c0)="7caae4ddce49afbc53b41041157cf7d7b15c3de12a4670bc07e2e182a8753a79b5fad9180a477a8900e763b8edf63f66f5f8a847cbf8ace42969f67dc6256fc5280ef8b3ef34920dee7cd45bf73e931f25c2b78cce7026735c3a2b79385942dc39cb9b6134954e508bcb95e2ddb39027570aaa2b14a8bc8d02bf617a5ba1d302e01b", 0x82}], 0x3}}, {{&(0x7f00000016c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000001700)="fb8f2ce16ad789912da3d59c3c725fa5f6dc7c55a6c159b15bcc6a5a738d1b01c02e3d2136b050ee2c62f83efdc4361e835b903cf4bdc28fa3762053a5b5c0cfb5d3233de81febcdca7b98744b017d298415a065b9a54c7c3b9fa123bbb3ad125d7fd3c07c0f2e69b96e5132296906793cb53896a0cbc6114996df15910a60ba9fd9d8c7612da0b92d333773c02b05a70dd143fc67d51370c5acfa67606ca4cd8ff38a60a373b7deaa203240cca75f", 0xaf}, {&(0x7f00000017c0)="e2ff792971a7d7b4a4768c7840e232ea4e0ccc0ec77e1309e1b799772cdcfaffcef4c285b8b8732ae6c96a75a1edcf9ec1f0bb2ca08a3917", 0x38}, {&(0x7f0000001800)="dbde9ca57f2cfef03d760e569830a48586cd0fcdfbbd3b844adcc71ec7dc66c14495a49cfdd096dad0df65fa434c7a935ff680c6f071d20af7f053d485e1cb5b06c563c9ea38ea0c34c248a0833daa81d707830701b153", 0x57}, {&(0x7f0000001880)="d226bf8ed9693fac6b76d02979e616ba14097005e29a96c19321c5e76aa395ad37dbf7b966da580e34bdd1ee74458afb344d4c93c4eb080e242950013079a8f1b0030ba85108f3f782ac3810d7ac6b263278e7f12a7fd5211a622c02d8e15f60ec011406ab3b8ab94d39bf0bec34c7c225214e836d56df0393", 0x79}, {&(0x7f0000001900)="50c01d6504ee641753660ef4eac710b998bb89617b8e551f5dae71298919dc2a15657e8d9b99f5d35c03e32b9cc6e7a8086b452d88edf2053f3dbdd0d745ec4b24aad567df05d45f56144baedb0781eaf1ce9238589b79bf1af9e16a585b29cb41bd4e2c1990737ba5bc6f98c11b282507215b83bbe8b763955b825dcf0ef4fee0a6993781aa1adede7e84b82304eda8e2e6c087885608e412f81aefa7faa3b193516fa8e7b8df0c4255fa3cb86f9d1a8e2bfd46090345522df4f559cf62fbf2242595782896458a90882126927fb98df5ee3c379527", 0xd6}, {&(0x7f0000001a00)="07c9c3ad55d075f9f79738f0ae105c3c2bfcffa62f0391bc7d2edc9c8ba238c15fe89d16cd0d8087fc62317c937280acd65c593f48daf3761b872faf9acd7aa95ec7c994c39fd71ac65c428fafc6", 0x4e}, {&(0x7f0000001a80)="b418365a5dd891ea78ee5247945d34c9a8b1ba8f51484c7c2323d7a81f32d1e69c36e41027ecc44d1b7c3e94a94aebce542de1c6568db60095104c627d31599126be65572a1d8dc775069f44773ce51b5e5d685fdd18e033c2e5bdd332b4ba703a1e024f3bf2ef1d1da88e19dabf63654b93851ec2292d2cc387a650326fa6578dbe8ba4ca398c6331", 0x89}], 0x7, &(0x7f0000002640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x70}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000026c0)="ef674d3f98be82f5eb7a9b3d7d133f4844262b8d88b1e92fd841e678ace2b31f6ba3abfdb1fac33ff5f17fee494061119fa181dbe0cabbafd841813f830b5410a09518d33fc946fa234f08e58425614ad2afd871f178401263ef9a5f9cc585fdad627830", 0x64}, {&(0x7f0000002740)="279b0709b3f7bf641b2320104c6888c1e51ab470", 0x14}, {&(0x7f0000002780)="904b6615a6aa150f3a0e952bcee7928009d739d1f27a6d2f90896817b97a8c989068883389b36e901fb3a91b3c12f413adf0656639c8f5e37d5b2edd2e129bcbb79864216df648f10ea5febe86a59932983568fde672fd09733d7f55dbe0a75b8a202dc453b6bf8ddb76003c1e3ff9a956a35f561990274c5f029e4642cd6e1bbedd3ecbd3dc1b44b451fe7ef419b3e8cce7f092a00e9f805b99c2f8fb2239e045bbdbb7a7d863e50a2978b3345d93341262ba391e545b79c3570395c999b4a682f1c06569616595e3f10a351a132afbf9a75835f24c9de87b01", 0xda}, {&(0x7f0000002880)="5462a74939f3f2e2aa578eae25228bdc5fadb841c49157ad64fe29dcf5edf195c0b38dcfb07ea1526ade8f46263d45d2fdd36ce12f8fde528cc5736ca26e7243af1b5465c6aa6b86adeaa84e93d8a309a898a9411f8162f3ed18ba24a5d26b44693fb79b544197d5e01f82a20800f916bb76cca15ac3697b0c98946b114fdf2fab2bb483b2c44d0e94a5b76296f7193bda398e39a3cb01b4", 0x98}, {&(0x7f0000002940)="32090a314a716561b8b4f81453e21edb8099801d909ddd20c7003ef2becaaf08d3d5bd16ec296bdf4d847c359bb3290d9db6817e7ac1343176c48401ed138e48668dbac1bea17ca16b451dfd58a1f0", 0x4f}, {&(0x7f00000029c0)="24d80c4c1fa1353e686155b11610645e54676ad4047560e90ea5748a0b20dd667b25b31568a1f08e5f1f7f6b5b41bd87660803884261d8ac683c", 0x3a}], 0x6, &(0x7f0000002a80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x30}}, {{&(0x7f0000002ac0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002d80)=[{&(0x7f0000002b00)="0c6e90f27658c8d57c9f387683dd77252bbab2827302a66d1ea7ef82fa93c79c2ce2c0addb1f3b28a3d3bf7452e43e69e168bdbd70050e960617076f6913901cd2a3013c1ec6c12b358cbc84b6c87bc33540cbaeb194", 0x56}, {&(0x7f0000002b80)="f6c2d755b423f13e03dc2446443e8513511d1a32dc48c69b36af76af302c6995b92b22abe907bbbdaed29443bb855b0314b68162a799bc9d4a1c0c5d5e211cbf52a488d8b8ada169bf67c9d801b74bd244ca9b378e80ee50b4618066a57b68dd7e73093b3d71f5cb6263dd48811ebdd15d517bafb4140b67b9a05e7748edf6ae5dcb4506f8e351666b353a9a6697bc55c392e58691afd822196c67b007958483075fd4bb61e2c7178b485481d2af5103ced5b7b7f34f7ad10df8068acbba701fb5922b592d3505d450dc", 0xca}, {&(0x7f0000002c80)="b05eafe238462f5e91f17922cfb2429cd3c8f8545160c6bcc3cdb007a502906ed87a7736a7e5c2f6d9048874117480cde11691fc36280a64b32312c8196eb7592d71b5e97825ca43ccde16e4d54768af83f6206793b5f012fcca68a437a88d6aa7f90aef7c959eb8819c27cffdb1c3efe73adfb6d80490f64c501f334235473797af56621da53d38d7fcd372ca98134a661804863cdfee1aad5b6fea347f1104829b2fdebc66c705ed79c9a12079c972edfd0b55d9871762dd21a81d3b1ed8387d1e6d72e2cd3319862cb8f326f7f93be23928", 0xd3}], 0x3}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002dc0)="9b5c3e4474fd2636bac16fc0296d77f32c76e0b0bf56d724b2ecdd7b2c42fe6f5738891db9a0335c60ad14b1abc58976c35cb6e542e71611365b4a759b8fbd535a4b0a3d92209ce96767a651ddf9f05d0cce6f6587e67700f8fafb4e97544ce5", 0x60}, {&(0x7f0000002e40)="87cd49a25eb5ca72ba05828adedec54b8d715dc74b18a46b73b892dff9c0d691b167a4d827c9dfdce5992f7bdd332562a7ae9b00ae11125fe6a82ed4543f290c1b78851b1cc69b3b8fcd0cba8291eae1f3ca0faa62a6193a7359612a1500b09710dd52cf7a6a21", 0x67}, {&(0x7f0000002ec0)="37e049921e60e3af3d6e17545b01674fcec1ab289c3563354ecef111c1d73c2eb01f7a6bc52a987cfa543c7111fbba85e0baefec1fbcfef9b087b47df335191dbe16d214fcdda5eaef6504b42ecaaafe9a6342558f532932dd13a88204688c30404d6528f8960065a696e1b92cf31aaa8e17efe2f997514bd9a46bd5c941d1064b68df6dc6b2bb4427a51ff0c63b62b2c0c108e95523f13836377bcfceb1b342e7ce1df36b1ff15288bac21348f5cce73a885f2fba03aa6021bc772e", 0xbc}], 0x3, &(0x7f0000003000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast1, @multicast1}}}, @ip_ttl={{0x14}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x2d, 0x0, 0x5, [0x1, 0x0, 0x9]}, @ra={0x94, 0x4}, @generic={0x94, 0xc, "1f3e05b6264040fad5f8"}, @timestamp_prespec={0x44, 0x4c, 0xa4, 0x3, 0x3, [{@empty, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3f}, {@empty, 0x84}, {@empty, 0x8}, {@private=0xa010100, 0xfffff000}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x84}, {@local, 0x9}, {@multicast1}, {@remote, 0x80}]}, @cipso={0x86, 0x28, 0x1, [{0x0, 0x7, "80ef0e61f6"}, {0x1, 0xa, "03549bf9273430bb"}, {0x7, 0x11, "13cd05b6587ff988ac033cac0b27b8"}]}, @end, @cipso={0x86, 0xc, 0xffffffffffffffff, [{0x5, 0x6, "e2470f5b"}]}, @timestamp_prespec={0x44, 0x24, 0xf4, 0x3, 0xb, [{@multicast2, 0x3f}, {@rand_addr=0x64010100, 0x7}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x2ab}, {@multicast1, 0x2}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x128}}, {{&(0x7f0000003140)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000005400)=[{&(0x7f0000003180)="7630d86bd68cb851778bb7c9c87e5f0e929738caf715439804b693f697962000168b875fa4988712cebee270c1fc96356e4f7176894e05478b66b798cef425aa128741c67d6e3a4f49e2799374eefe932990a2c5817b7651c4d902109a1d72dd3ef9c6962318da34addd298f5b1313aca41d2c2c2d1884e0f0e5d8e36172963cc919d93f6a6910ede0d598b9310e89cdbbaefc936a8d1f36144f567f07ee20a8ef9f07ea41", 0xa5}, {&(0x7f0000003240)="c13bd0763e105bc1001a51f6171e6f128eac0a85ff336c087cd2f338c05bb7ddeed0397b1e43a77f1ded7dee7e28689e466343a42fa96094465237eb1f36e108bc134acdd2926f0ba557e111429a0a139a73851fdd5e9ba35e1d4676e7100857dd23944a7743465a1196212af3904ecc996c589f0451dd8ec9964198ebb48c71e9f05265401bef3c909f5fd59a116a04", 0x90}, {&(0x7f0000003300)="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", 0x1000}, {&(0x7f0000004300)="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", 0x1000}, {&(0x7f0000005300)="ed38f33fca92bc9ab2e5dde5a9fedf97ba5123c96c8d", 0x16}, {&(0x7f0000005340)="1d36bf9b318b462fad17a239923d5366a32ff1296ef5fbb38760c963c609bbfcfd41996ba074bdb179a3c7fcf1190b1996f6d9ef2b0a54ffc2be1584c2689df8e6a89af82a5953afe0f284961c", 0x4d}, {&(0x7f00000053c0)="1633a74ec6649613c1c40fb3eb6d1e5cf00a04cf4748a92d3abc704c98c5625939b6", 0x22}], 0x7}}, {{&(0x7f0000005480)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000005940)=[{&(0x7f00000054c0)="d2f76cc92402d752ddfb484bb027723fae96c6c96b2deb20e206894349d3cd137a96459da3768dbed95f8cbc5e9f22bb12fa03de1db81e5cad1eaa24d95153b3e2c7a83b03d0fd07c82bc673e9274ac1262a5aa1a443739c4aa9ac870086980b6a0b69f9dd04c114a2b9bc6e08f5780fd51f573b1ad3", 0x76}, {&(0x7f0000005540)="a527b72c11cb097cbb0e86dddbcf1b87ce9abb4c3616fcdbbf9f2fcb77dcf2e4817c8f333d4b1162742f475419352fa2c1f57ebcf0060686f299ccc37c6ccb33cf0576cb57281bd9638e021f7d9557b6d45efd2cb3e97a43a8901d3f2919c793e1cea3f789546bc9cffe49fd3116977af1b5f18915c2446daa156620ff88ea7e6c170a", 0x83}, {&(0x7f0000005600)="f13b8b7df0f2518332032a6c534e911a2de519bafc717770d8d44fb676dcfe878c8366ae9d9a6a582fbb1de477c0580df836f6537d85f486376ebdd10cae0999b3616750fd77270305708d3e1b0816f0487410fed80ce2c2440b31037292d8c689fc40df6e6a77b329b8ed1099e765b43861d4f6c3c59ab6710b979ff8fef35ec8722784fba93655e3add95318d835e256aafacd85bc44f51f44b7f0d92ed996a68dbfb74f17", 0xa6}, {&(0x7f00000056c0)="e8f4ccc066da9aaed5cb2dc203e76152b6f567b7be0c07ab2002088604b7bb365df069b85ba93dd11ab8fb4954424701e45109ac1b627284abceefbfca57cc5259d1353547", 0x45}, {&(0x7f0000005740)="d9becab2d05efb795e83acb1eecaae2ee5e268c7e0c4c784db977731a09cd9951d45e07db3b16708f56bc86539f62c13583e6c6adc63fb06f56ad4d88c10a5d652e8fdc25f5e790b1a293c4068cb5cdd407fa081b74264d2d0341f2a4565b5e56d0c24027fe23a2f96664b1891aa8dc23fe0da22dbe4349f40547cb39a", 0x7d}, {&(0x7f00000057c0)="1fc20a4b9b5697952f41305a6cb4792fcea7729a3a535890d09853fd9820ae70c37606a1b3c792020158fe2d6a2be9c41e5336d055b94cbd4a0a2bd900799abdd1e8615b938bd2e4ef947bcd47ffe505ba3fc50ac6c4fb030c736470ad371cdcca773e235a9fd13fdc85a896ca27b3b98c283fd924", 0x75}, {&(0x7f0000005840)="cf7f0c56e2325e4e444afeba37a649b0d4d66069739238ddf209061fcb068e9d3a530169a2f5d135207eae2c434c8ffb54e10d4289c8b7b3f9ab4800fb48081edc5469f41823716fbce85cac93f52b8fe7c40ecb62e17b6ea55131faf475f5f3fcd01ac5552b10ca8856e6c080402ce23ee83ec52aec57f070ebfd165303143d5902b99aaaacd873dbfadc4b9a4bbc09eff6cb59b122919bdbce60a4b5f38553b313b9f1b27aadb0262224f78ec08ac74da1a4020731d30fd814737ec8b7cc0290407406445a745dd51c2b42b218", 0xce}], 0x7, &(0x7f0000005b00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @dev={0xac, 0x14, 0x14, 0x2b}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x88}}, {{&(0x7f0000005bc0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000005dc0)=[{&(0x7f0000005c00)="15f0d1ec32a4a196c6430e410ea91fcb09062d584493a20ac076a9a1f1382905b2e3fe83ecebbe9969ecc69ad16bf4f49c434249ed6fe60084568ba81c3eaba82603604884601cf956f3de5f552c70030258efee5477a98209900459f5acf01dc78447c5087ab519df61048274365169b0c7ba0b09a92167f390d6bf31b14864b9af9552b274c4ce576956f8e483d891bf032ffea07cef5421bc", 0x9a}, {&(0x7f0000005cc0)="30c6a3dc39f2935afb6dcbea68bc16411bfc16f26003e66268dc5805b1d21db33db03f0727e7b83ead6b0118c3ca3c225a07fcf1236bdce4cb025a9a17ac2a06ee4c4b3dddfe0e059fefaa0482117bc3040af127aeecb284d6175e08acb4709cb0ea2a03b66bd88dadb19959b4ca36a9d46f582ea1c2b5dbc71f6fdec62813fb4d6e2a92ce013065b8f713b8f792866b69764d5f52b43d6072935463909f7f26faabce19bfa111196d7c3ce3b6b5d9ec673c66e0cd4d101d5ac0856de82cbb515e328fcf08e68d29a7791324ff623a7a745a1c6014134219e988f8a2a818b77b207e5164f9d0d8e75d12168016", 0xed}], 0x2, &(0x7f0000005e00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x30}}, {{&(0x7f0000005e40)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000006180)=[{&(0x7f0000005e80)="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", 0xfb}, {&(0x7f0000005f80)="5f855670d8830f9739f20e38b62c75234c9aa5f2a046aea6c286d061dd0b6be16d4f875c1993fb5934e3d895cadb24017fea62cd1507d871baf64212d3ab6fa596646b03d02d093239e8f1827aafe1e3483b7f4ca7b01c6cb28d17ccef7dcc91c3c0c9732e596e4c973d51ed6ae9bdc5dd57201d50ce7581d44ef6f9e354c4d3f37132dc4332165ed9bb3b571c5f98513a19883590994f04045e39f78dd7cd1e09a8bbbb29dd883ebb2596ac040c93c25a096def1ac1d380abad1eaaab5d570b8ff24973206d36933976574130f319669547d52dcf4ef28e2488d39abc0a982dc6e418df6a311c550cbde8f1da5fb49cf873c22be78185", 0xf7}, {&(0x7f0000006080)="ce3e2eda36b85c2bc50a424e23e5aa86c18da301466914ba46dcddc1afcbe997249e07bf12024df413b817a0a8e92136e1edc1f21eaefa57d780ffc1acb2d454622af9c3acfde9ddfd784d2b091eedd504370a828694df0ce7fb350812ced16e9dc407aea704dfb9d335f7f47df64cf6a39df00be3a16306f9fc6906191bd3c45664575f5ffe054279961f0158ba7a8168f2d23738b57b28e9f68f7d877b77cb76e709010857e1329e7c42a55dac552d717dd18b3f927bb1ecac6c5e33aa93939d1f66e38782061f548a927de2e4c7658a4b87c7121bd26b1db8bf412498c794a2936da5", 0xe4}], 0x3, &(0x7f00000061c0)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@end, @lsrr={0x83, 0x1f, 0x44, [@multicast1, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @multicast1, @multicast1, @multicast2, @loopback]}, @cipso={0x86, 0x3e, 0x1, [{0x0, 0x6, "821ce98c"}, {0x6, 0x12, "f17d779fddc5cd938814e454bbc61ed2"}, {0x5, 0x11, "59c1613403203e2319a74c42e540fc"}, {0x2, 0xf, "1fdcd2dbc865670396d645697d"}]}, @generic={0x8f, 0x5, "1a357c"}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x3, [{@loopback, 0xffff8001}, {@multicast1, 0x3}, {@empty, 0x8000}, {@rand_addr=0x64010101}, {@remote, 0x1}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffff81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}], 0x150}}], 0xa, 0xc800) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6, @local}, 0x10) 13:18:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x800) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x400, 0x800) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x2, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000004c0)=ANY=[]) 13:18:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}, 0xa}, 0x0) 13:18:26 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 74) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:18:26 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2383.268561] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12245 comm=syz-executor.5 [ 2383.289637] device syz_tun entered promiscuous mode [ 2383.303985] FAULT_INJECTION: forcing a failure. [ 2383.303985] name failslab, interval 1, probability 0, space 0, times 0 [ 2383.305290] CPU: 1 PID: 12249 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2383.306085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2383.307040] Call Trace: [ 2383.307348] dump_stack+0x107/0x167 [ 2383.307777] should_fail.cold+0x5/0xa [ 2383.308219] ? create_object.isra.0+0x3a/0xa30 [ 2383.308751] should_failslab+0x5/0x20 [ 2383.309195] kmem_cache_alloc+0x5b/0x310 [ 2383.309665] create_object.isra.0+0x3a/0xa30 [ 2383.310173] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2383.310762] kmem_cache_alloc+0x159/0x310 [ 2383.311246] anon_vma_clone+0xdc/0x590 [ 2383.311704] __split_vma+0x17c/0x4e0 [ 2383.312143] __do_munmap+0x365/0x1260 [ 2383.312584] ? arch_get_unmapped_area+0x450/0x450 [ 2383.313138] ? lock_release+0x680/0x680 [ 2383.313595] mmap_region+0x7cc/0x1500 [ 2383.314045] do_mmap+0x868/0x1370 [ 2383.314456] vm_mmap_pgoff+0x198/0x1f0 [ 2383.314909] ? randomize_page+0xb0/0xb0 [ 2383.315373] ksys_mmap_pgoff+0x41c/0x560 [ 2383.315850] ? find_mergeable_anon_vma+0x250/0x250 [ 2383.316418] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2383.317023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2383.317622] do_syscall_64+0x33/0x40 [ 2383.318051] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2383.318642] RIP: 0033:0x7fbb28dd6b62 [ 2383.319073] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2383.321213] RSP: 002b:00007fbb2634c0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2383.322098] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbb28dd6b62 [ 2383.322925] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2383.323754] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2383.324576] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2383.325405] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2383.379854] FAULT_INJECTION: forcing a failure. [ 2383.379854] name failslab, interval 1, probability 0, space 0, times 0 [ 2383.383090] CPU: 0 PID: 12251 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2383.384707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2383.386622] Call Trace: [ 2383.387237] dump_stack+0x107/0x167 [ 2383.388092] should_fail.cold+0x5/0xa [ 2383.388980] ? create_object.isra.0+0x3a/0xa30 [ 2383.390041] should_failslab+0x5/0x20 [ 2383.390919] kmem_cache_alloc+0x5b/0x310 [ 2383.391875] create_object.isra.0+0x3a/0xa30 [ 2383.392893] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2383.394076] __kmalloc+0x16e/0x390 [ 2383.394907] ext4_find_extent+0xa77/0xd70 [ 2383.395880] ? kfree+0xd7/0x340 [ 2383.396662] ext4_ext_map_blocks+0x1c8/0x5830 [ 2383.397721] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2383.398935] ? perf_trace_lock+0xac/0x490 [ 2383.399915] ? ext4_ext_release+0x10/0x10 [ 2383.400892] ? ext4_map_blocks+0x5cd/0x1910 [ 2383.401911] ? lock_release+0x680/0x680 [ 2383.402841] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 2383.403963] ? find_held_lock+0x2c/0x110 [ 2383.404943] ? down_write+0xe0/0x160 [ 2383.405812] ? down_write_killable+0x180/0x180 [ 2383.406894] ext4_map_blocks+0x63f/0x1910 [ 2383.407881] ? kmem_cache_alloc+0x2a6/0x310 [ 2383.408894] ? __kernel_text_address+0x9/0x40 [ 2383.409943] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2383.410992] ? jbd2__journal_start+0xf3/0x7e0 [ 2383.412051] ? __ext4_journal_start_sb+0x214/0x390 [ 2383.413190] ? __ext4_journal_start_sb+0x1db/0x390 [ 2383.414350] ext4_iomap_begin+0x3ad/0x700 [ 2383.415338] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 2383.416481] ? kasan_save_stack+0x1b/0x40 [ 2383.417454] ? ext4_file_write_iter+0xe0e/0x1530 [ 2383.418581] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 2383.420063] ? splice_direct_to_actor+0x387/0x980 [ 2383.421183] ? do_splice_direct+0x1c4/0x290 [ 2383.422185] ? do_sendfile+0x553/0x11e0 [ 2383.423113] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2383.424203] ? do_syscall_64+0x33/0x40 [ 2383.425111] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2383.426362] iomap_apply+0x164/0x810 [ 2383.427232] ? iomap_dio_rw+0x90/0x90 [ 2383.428149] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2383.429530] ? mark_held_locks+0x9e/0xe0 [ 2383.430500] ? filemap_check_errors+0xa5/0x150 [ 2383.431588] __iomap_dio_rw+0x6cd/0x1110 [ 2383.432544] ? iomap_dio_rw+0x90/0x90 [ 2383.433476] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2383.434547] ? ext4_orphan_add+0x253/0x9e0 [ 2383.435561] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2383.436714] ? ext4_empty_dir+0xae0/0xae0 [ 2383.437700] ? jbd2__journal_start+0xf3/0x7e0 [ 2383.438766] iomap_dio_rw+0x31/0x90 [ 2383.439651] ext4_file_write_iter+0xe0e/0x1530 [ 2383.440742] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2383.441807] ? kasan_save_stack+0x32/0x40 [ 2383.442772] ? kasan_save_stack+0x1b/0x40 [ 2383.443747] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2383.444934] ? iter_file_splice_write+0x165/0xc90 [ 2383.446061] ? direct_splice_actor+0x10f/0x170 [ 2383.447130] ? splice_direct_to_actor+0x387/0x980 [ 2383.448263] ? do_splice_direct+0x1c4/0x290 [ 2383.449283] ? do_sendfile+0x553/0x11e0 [ 2383.450217] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2383.451311] ? do_syscall_64+0x33/0x40 [ 2383.452242] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2383.453505] do_iter_readv_writev+0x476/0x750 [ 2383.454559] ? _cond_resched+0x10/0x30 [ 2383.455503] ? new_sync_write+0x660/0x660 [ 2383.456485] ? avc_policy_seqno+0x9/0x70 [ 2383.457456] ? selinux_file_permission+0x92/0x520 [ 2383.458599] ? security_file_permission+0xb1/0xe0 [ 2383.459767] do_iter_write+0x191/0x700 [ 2383.460696] ? trace_hardirqs_on+0x5b/0x180 [ 2383.461729] vfs_iter_write+0x70/0xa0 [ 2383.462640] iter_file_splice_write+0x726/0xc90 [ 2383.463774] ? generic_splice_sendpage+0x140/0x140 [ 2383.464959] ? security_file_permission+0xb1/0xe0 [ 2383.466108] ? generic_splice_sendpage+0x140/0x140 [ 2383.467277] direct_splice_actor+0x10f/0x170 [ 2383.468336] splice_direct_to_actor+0x387/0x980 [ 2383.469448] ? pipe_to_sendpage+0x380/0x380 [ 2383.470478] ? do_splice_to+0x160/0x160 [ 2383.471427] ? security_file_permission+0xb1/0xe0 [ 2383.472594] do_splice_direct+0x1c4/0x290 [ 2383.473590] ? splice_direct_to_actor+0x980/0x980 [ 2383.474746] ? avc_policy_seqno+0x9/0x70 [ 2383.475728] ? security_file_permission+0xb1/0xe0 [ 2383.476885] do_sendfile+0x553/0x11e0 [ 2383.477805] ? do_pwritev+0x270/0x270 [ 2383.478713] ? wait_for_completion_io+0x270/0x270 [ 2383.479875] ? rcu_read_lock_any_held+0x75/0xa0 [ 2383.480998] ? vfs_write+0x354/0xb10 [ 2383.481899] __x64_sys_sendfile64+0x1d1/0x210 [ 2383.482971] ? __ia32_sys_sendfile+0x220/0x220 [ 2383.484094] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2383.485350] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2383.486594] do_syscall_64+0x33/0x40 [ 2383.487497] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2383.488718] RIP: 0033:0x7f4ef9c71b19 [ 2383.489617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2383.494094] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2383.495939] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2383.497666] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2383.499402] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2383.501129] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2383.502850] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 [ 2383.506672] device syz_tun left promiscuous mode [ 2383.534255] device syz_tun entered promiscuous mode [ 2383.540214] device syz_tun left promiscuous mode 13:18:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 19) 13:18:40 executing program 0: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x101, 0x2, 0x0, 0x7, 0x80, 0x6}, 0x20) r0 = socket$packet(0x11, 0x0, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x3, 0x6, @broadcast}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 13:18:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}, 0x19}, 0x0) 13:18:40 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:18:40 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:18:40 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 75) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:18:40 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:18:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="38010074190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2396.513527] FAULT_INJECTION: forcing a failure. [ 2396.513527] name failslab, interval 1, probability 0, space 0, times 0 [ 2396.515072] CPU: 1 PID: 12265 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2396.515971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2396.517020] Call Trace: [ 2396.517362] dump_stack+0x107/0x167 [ 2396.517830] should_fail.cold+0x5/0xa [ 2396.518314] ? vm_area_alloc+0x1c/0x110 [ 2396.518818] should_failslab+0x5/0x20 [ 2396.519301] kmem_cache_alloc+0x5b/0x310 [ 2396.519836] vm_area_alloc+0x1c/0x110 [ 2396.520314] mmap_region+0x982/0x1500 [ 2396.520805] do_mmap+0x868/0x1370 [ 2396.521246] vm_mmap_pgoff+0x198/0x1f0 [ 2396.521740] ? randomize_page+0xb0/0xb0 [ 2396.522251] ksys_mmap_pgoff+0x41c/0x560 [ 2396.522768] ? find_mergeable_anon_vma+0x250/0x250 [ 2396.523390] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2396.524057] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2396.524710] do_syscall_64+0x33/0x40 [ 2396.525183] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2396.525829] RIP: 0033:0x7fbb28dd6b62 [ 2396.526299] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2396.528630] RSP: 002b:00007fbb2634c0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2396.529598] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbb28dd6b62 [ 2396.530504] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2396.531406] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2396.532321] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2396.533225] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2396.542622] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12268 comm=syz-executor.5 [ 2396.566327] FAULT_INJECTION: forcing a failure. [ 2396.566327] name failslab, interval 1, probability 0, space 0, times 0 [ 2396.568923] CPU: 0 PID: 12266 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2396.570375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2396.572119] Call Trace: [ 2396.572691] dump_stack+0x107/0x167 [ 2396.573453] should_fail.cold+0x5/0xa [ 2396.574255] ? create_object.isra.0+0x3a/0xa30 [ 2396.575220] should_failslab+0x5/0x20 [ 2396.576026] kmem_cache_alloc+0x5b/0x310 [ 2396.576895] create_object.isra.0+0x3a/0xa30 [ 2396.577811] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2396.578887] kmem_cache_alloc+0x159/0x310 [ 2396.579781] __es_insert_extent+0xed1/0x1370 [ 2396.580713] ? do_raw_read_unlock+0x70/0x70 [ 2396.581618] ? perf_trace_lock+0xac/0x490 [ 2396.582498] ext4_es_insert_extent+0x45d/0xf10 [ 2396.583469] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2396.584383] ? ext4_es_find_extent_range+0x1cb/0x460 [ 2396.585444] ? lock_downgrade+0x6d0/0x6d0 [ 2396.586318] ? __ext4_handle_dirty_super+0x100/0x100 [ 2396.587374] ? __es_find_extent_range+0x197/0x4b0 [ 2396.588404] ? do_raw_read_unlock+0x3b/0x70 [ 2396.589332] ext4_ext_map_blocks+0x1866/0x5830 [ 2396.590317] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2396.591422] ? perf_trace_lock+0xac/0x490 [ 2396.592312] ? ext4_ext_release+0x10/0x10 [ 2396.593202] ? lock_release+0x680/0x680 [ 2396.594058] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 2396.595056] ? lock_downgrade+0x6d0/0x6d0 [ 2396.595951] ? down_read+0x10f/0x430 [ 2396.596733] ? down_write+0x160/0x160 [ 2396.597524] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 2396.598515] ext4_map_blocks+0x8e1/0x1910 [ 2396.599387] ? kmem_cache_alloc+0x2a6/0x310 [ 2396.600319] ? __kernel_text_address+0x9/0x40 [ 2396.601263] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2396.602208] ? jbd2__journal_start+0xf3/0x7e0 [ 2396.603160] ? __ext4_journal_start_sb+0x214/0x390 [ 2396.604202] ? __ext4_journal_start_sb+0x1db/0x390 [ 2396.605255] ext4_iomap_begin+0x3ad/0x700 [ 2396.606156] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 2396.607191] ? kasan_save_stack+0x1b/0x40 [ 2396.608069] ? ext4_file_write_iter+0xe0e/0x1530 [ 2396.609078] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 2396.610408] ? splice_direct_to_actor+0x387/0x980 [ 2396.611411] ? do_splice_direct+0x1c4/0x290 [ 2396.612327] ? do_sendfile+0x553/0x11e0 [ 2396.613157] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2396.614129] ? do_syscall_64+0x33/0x40 [ 2396.614943] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2396.616076] iomap_apply+0x164/0x810 [ 2396.616868] ? iomap_dio_rw+0x90/0x90 [ 2396.617676] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2396.618895] ? mark_held_locks+0x9e/0xe0 [ 2396.619771] ? filemap_check_errors+0xa5/0x150 [ 2396.620741] __iomap_dio_rw+0x6cd/0x1110 [ 2396.621593] ? iomap_dio_rw+0x90/0x90 [ 2396.622423] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2396.623390] ? ext4_orphan_add+0x253/0x9e0 [ 2396.624291] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2396.625328] ? ext4_empty_dir+0xae0/0xae0 13:18:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}, 0x25}, 0x0) [ 2396.626214] ? jbd2__journal_start+0xf3/0x7e0 [ 2396.627300] iomap_dio_rw+0x31/0x90 [ 2396.628079] ext4_file_write_iter+0xe0e/0x1530 [ 2396.629059] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2396.630017] ? kasan_save_stack+0x32/0x40 [ 2396.630883] ? kasan_save_stack+0x1b/0x40 [ 2396.631770] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2396.632843] ? iter_file_splice_write+0x165/0xc90 [ 2396.633850] ? direct_splice_actor+0x10f/0x170 13:18:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="3801007a190001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) [ 2396.634809] ? splice_direct_to_actor+0x387/0x980 [ 2396.635865] ? do_splice_direct+0x1c4/0x290 [ 2396.636772] ? do_sendfile+0x553/0x11e0 [ 2396.637610] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2396.638588] ? do_syscall_64+0x33/0x40 [ 2396.639406] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2396.640554] do_iter_readv_writev+0x476/0x750 [ 2396.641480] ? _cond_resched+0x10/0x30 [ 2396.642303] ? new_sync_write+0x660/0x660 [ 2396.643170] ? avc_policy_seqno+0x9/0x70 [ 2396.644031] ? selinux_file_permission+0x92/0x520 [ 2396.645058] ? security_file_permission+0xb1/0xe0 [ 2396.646088] do_iter_write+0x191/0x700 [ 2396.646911] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 2396.648001] vfs_iter_write+0x70/0xa0 [ 2396.648809] iter_file_splice_write+0x726/0xc90 [ 2396.649806] ? generic_splice_sendpage+0x140/0x140 [ 2396.650857] ? security_file_permission+0xb1/0xe0 [ 2396.651891] ? generic_splice_sendpage+0x140/0x140 [ 2396.652919] direct_splice_actor+0x10f/0x170 [ 2396.653855] splice_direct_to_actor+0x387/0x980 [ 2396.654841] ? pipe_to_sendpage+0x380/0x380 [ 2396.655769] ? do_splice_to+0x160/0x160 [ 2396.656609] ? security_file_permission+0xb1/0xe0 [ 2396.657644] do_splice_direct+0x1c4/0x290 [ 2396.658524] ? splice_direct_to_actor+0x980/0x980 [ 2396.659529] ? avc_policy_seqno+0x9/0x70 [ 2396.660398] ? security_file_permission+0xb1/0xe0 [ 2396.661429] do_sendfile+0x553/0x11e0 [ 2396.662251] ? do_pwritev+0x270/0x270 [ 2396.663052] ? wait_for_completion_io+0x270/0x270 [ 2396.664082] ? rcu_read_lock_any_held+0x75/0xa0 [ 2396.665070] ? vfs_write+0x354/0xb10 [ 2396.665867] __x64_sys_sendfile64+0x1d1/0x210 [ 2396.666828] ? __ia32_sys_sendfile+0x220/0x220 [ 2396.667803] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2396.668905] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2396.669995] do_syscall_64+0x33/0x40 [ 2396.670781] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2396.671866] RIP: 0033:0x7f4ef9c71b19 [ 2396.672645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2396.676522] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2396.678136] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2396.679631] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2396.681122] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2396.682624] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2396.684124] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 13:18:40 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 76) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:18:40 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3f, 0x4}}, './file0\x00'}) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000040)={'ip_vti0\x00', {0x2, 0x0, @initdev}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) 13:18:40 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:18:40 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:18:40 executing program 3: socket$packet(0x11, 0x1, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0x4, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @multicast, @random="d046481f7e1d", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}]}) pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x38) [ 2396.841675] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12283 comm=syz-executor.5 [ 2396.845452] FAULT_INJECTION: forcing a failure. [ 2396.845452] name failslab, interval 1, probability 0, space 0, times 0 [ 2396.847866] CPU: 0 PID: 12282 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2396.849313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2396.851062] Call Trace: [ 2396.851639] dump_stack+0x107/0x167 [ 2396.852415] should_fail.cold+0x5/0xa [ 2396.853312] ? create_object.isra.0+0x3a/0xa30 [ 2396.854273] should_failslab+0x5/0x20 [ 2396.855069] kmem_cache_alloc+0x5b/0x310 [ 2396.855955] create_object.isra.0+0x3a/0xa30 [ 2396.856889] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2396.857953] kmem_cache_alloc+0x159/0x310 [ 2396.858838] vm_area_alloc+0x1c/0x110 [ 2396.859649] mmap_region+0x982/0x1500 [ 2396.860465] do_mmap+0x868/0x1370 [ 2396.861203] vm_mmap_pgoff+0x198/0x1f0 [ 2396.862030] ? randomize_page+0xb0/0xb0 [ 2396.862877] ksys_mmap_pgoff+0x41c/0x560 [ 2396.863733] ? find_mergeable_anon_vma+0x250/0x250 [ 2396.864772] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2396.865885] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2396.866972] do_syscall_64+0x33/0x40 [ 2396.867763] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2396.868854] RIP: 0033:0x7fbb28dd6b62 [ 2396.869636] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2396.873532] RSP: 002b:00007fbb2634c0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2396.875127] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbb28dd6b62 [ 2396.876633] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2396.878132] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2396.879643] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2396.881146] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 13:18:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}, 0x86}, 0x0) [ 2397.076071] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12300 comm=syz-executor.5 13:18:57 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) 13:18:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="380100001b0001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:18:57 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) 13:18:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}, 0x300}, 0x0) 13:18:57 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 77) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 13:18:57 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x823, 0x4, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000825fccbdf25035301000000050001000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000800)={0x0, 0x0, "17f042"}) fallocate(0xffffffffffffffff, 0x52, 0x2, 0x10000000fdffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) ioctl$CDROM_NEXT_WRITABLE(r2, 0x5394, &(0x7f0000000380)) 13:18:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 20) 13:18:57 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2413.606741] FAULT_INJECTION: forcing a failure. [ 2413.606741] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2413.609310] CPU: 0 PID: 12315 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2413.610768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2413.612516] Call Trace: [ 2413.613075] dump_stack+0x107/0x167 [ 2413.613851] should_fail.cold+0x5/0xa [ 2413.614659] __alloc_pages_nodemask+0x182/0x600 [ 2413.615647] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2413.616936] ? walk_mem_res+0x170/0x170 [ 2413.617783] alloc_pages_current+0x187/0x280 [ 2413.618728] pte_alloc_one+0x16/0x1a0 [ 2413.619533] __pte_alloc+0x1d/0x330 [ 2413.620321] remap_pfn_range_internal+0x9a3/0xf60 [ 2413.621360] ? lookup_memtype+0x5b/0x200 [ 2413.622237] ? apply_to_existing_page_range+0x40/0x40 [ 2413.623335] remap_pfn_range+0xcd/0x160 [ 2413.624180] ? remap_pfn_range_notrack+0x70/0x70 [ 2413.625189] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2413.626293] io_uring_mmap+0x398/0x530 [ 2413.627115] mmap_file+0x5e/0xe0 [ 2413.627843] mmap_region+0xc4d/0x1500 [ 2413.628667] do_mmap+0x868/0x1370 [ 2413.629409] vm_mmap_pgoff+0x198/0x1f0 [ 2413.630237] ? randomize_page+0xb0/0xb0 [ 2413.631101] ksys_mmap_pgoff+0x41c/0x560 [ 2413.631976] ? find_mergeable_anon_vma+0x250/0x250 [ 2413.633024] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2413.634136] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2413.635224] do_syscall_64+0x33/0x40 [ 2413.636022] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2413.637103] RIP: 0033:0x7fbb28dd6b62 [ 2413.637885] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2413.641788] RSP: 002b:00007fbb2634c0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2413.643393] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbb28dd6b62 [ 2413.644914] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2413.646414] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2413.647917] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2413.649418] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2413.668635] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12319 comm=syz-executor.5 [ 2413.671330] device syz_tun entered promiscuous mode [ 2413.673588] device syz_tun left promiscuous mode [ 2413.676511] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2413.684287] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2413.689469] FAULT_INJECTION: forcing a failure. [ 2413.689469] name failslab, interval 1, probability 0, space 0, times 0 [ 2413.691861] CPU: 0 PID: 12321 Comm: syz-executor.4 Not tainted 5.10.242 #1 [ 2413.693325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2413.695080] Call Trace: [ 2413.695641] dump_stack+0x107/0x167 [ 2413.696428] should_fail.cold+0x5/0xa [ 2413.697233] ? ext4_mb_new_blocks+0x698/0x45c0 [ 2413.698211] should_failslab+0x5/0x20 [ 2413.699014] kmem_cache_alloc+0x5b/0x310 [ 2413.699898] ext4_mb_new_blocks+0x698/0x45c0 [ 2413.700847] ? trace_hardirqs_on+0x5b/0x180 [ 2413.701766] ? kasan_unpoison_shadow+0x33/0x50 [ 2413.702733] ? ext4_cache_extents+0x68/0x2d0 [ 2413.703658] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2413.704759] ? ext4_discard_preallocations+0xd80/0xd80 [ 2413.705866] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2413.706867] ? ext4_inode_to_goal_block+0x320/0x430 [ 2413.707945] ext4_ext_map_blocks+0x1d4c/0x5830 [ 2413.708942] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2413.710051] ? perf_trace_lock+0xac/0x490 [ 2413.710940] ? ext4_ext_release+0x10/0x10 [ 2413.711841] ? ext4_map_blocks+0x5cd/0x1910 [ 2413.712759] ? lock_release+0x680/0x680 [ 2413.713614] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 2413.714615] ? find_held_lock+0x2c/0x110 [ 2413.715608] ? down_write_killable+0x180/0x180 [ 2413.716604] ext4_map_blocks+0x63f/0x1910 [ 2413.717496] ? kmem_cache_alloc+0x2a6/0x310 [ 2413.718415] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2413.719361] ? jbd2__journal_start+0xf3/0x7e0 [ 2413.720322] ? __ext4_journal_start_sb+0x214/0x390 [ 2413.721352] ? __ext4_journal_start_sb+0x1db/0x390 [ 2413.722401] ext4_iomap_begin+0x3ad/0x700 [ 2413.723297] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 2413.724340] ? kasan_save_stack+0x1b/0x40 [ 2413.725216] ? ext4_file_write_iter+0xe0e/0x1530 [ 2413.726227] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 2413.727557] ? splice_direct_to_actor+0x387/0x980 [ 2413.728584] ? do_splice_direct+0x1c4/0x290 [ 2413.728883] ------------[ cut here ]------------ [ 2413.729490] ? do_sendfile+0x553/0x11e0 [ 2413.730301] WARNING: CPU: 1 PID: 12315 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 2413.731077] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2413.731095] ? do_syscall_64+0x33/0x40 [ 2413.731119] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2413.732550] Modules linked in: [ 2413.733502] iomap_apply+0x164/0x810 [ 2413.733525] ? iomap_dio_rw+0x90/0x90 [ 2413.734600] [ 2413.735222] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2413.735257] ? mark_held_locks+0x9e/0xe0 [ 2413.735293] ? filemap_check_errors+0xa5/0x150 [ 2413.735321] __iomap_dio_rw+0x6cd/0x1110 [ 2413.735339] ? iomap_dio_rw+0x90/0x90 [ 2413.735381] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2413.735402] ? ext4_orphan_add+0x253/0x9e0 [ 2413.735421] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2413.735445] ? ext4_empty_dir+0xae0/0xae0 [ 2413.735461] ? jbd2__journal_start+0xf3/0x7e0 [ 2413.735493] iomap_dio_rw+0x31/0x90 [ 2413.735517] ext4_file_write_iter+0xe0e/0x1530 [ 2413.735556] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2413.736097] CPU: 1 PID: 12315 Comm: syz-executor.7 Not tainted 5.10.242 #1 [ 2413.736820] ? kasan_save_stack+0x32/0x40 [ 2413.736835] ? kasan_save_stack+0x1b/0x40 [ 2413.736855] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2413.737427] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2413.737777] ? iter_file_splice_write+0x165/0xc90 [ 2413.738705] RIP: 0010:get_pat_info+0x216/0x270 [ 2413.739522] ? direct_splice_actor+0x10f/0x170 [ 2413.739544] ? splice_direct_to_actor+0x387/0x980 [ 2413.740258] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 f1 8d 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 da 8d 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 85 a1 5a 00 e9 [ 2413.741087] ? do_splice_direct+0x1c4/0x290 [ 2413.741111] ? do_sendfile+0x553/0x11e0 [ 2413.741676] RSP: 0018:ffff88802b707890 EFLAGS: 00010212 [ 2413.742644] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2413.742661] ? do_syscall_64+0x33/0x40 [ 2413.742682] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2413.743350] RAX: 0000000000014d11 RBX: ffff888032d0cc00 RCX: ffffc9000641d000 [ 2413.744375] do_iter_readv_writev+0x476/0x750 [ 2413.744395] ? _cond_resched+0x10/0x30 [ 2413.745032] RDX: 0000000000040000 RSI: ffffffff811243f6 RDI: 0000000000000007 [ 2413.745950] ? new_sync_write+0x660/0x660 [ 2413.745972] ? avc_policy_seqno+0x9/0x70 [ 2413.746506] RBP: ffff88802b707948 R08: 0000000000000000 R09: ffff88802b707818 [ 2413.746520] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 2413.747497] ? selinux_file_permission+0x92/0x520 [ 2413.747524] ? security_file_permission+0xb1/0xe0 [ 2413.748247] R13: 1ffff110056e0f12 R14: 0000000000000000 R15: ffff888032d0cc50 [ 2413.752039] do_iter_write+0x191/0x700 [ 2413.752065] ? trace_hardirqs_on+0x5b/0x180 [ 2413.756301] FS: 00007fbb2634c700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 2413.757140] vfs_iter_write+0x70/0xa0 [ 2413.757164] iter_file_splice_write+0x726/0xc90 [ 2413.757927] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2413.759644] ? generic_splice_sendpage+0x140/0x140 [ 2413.760388] CR2: 00007f04eaf4ff80 CR3: 000000000e7de000 CR4: 0000000000350ee0 [ 2413.761339] ? security_file_permission+0xb1/0xe0 [ 2413.762014] Call Trace: [ 2413.763008] ? generic_splice_sendpage+0x140/0x140 [ 2413.763031] direct_splice_actor+0x10f/0x170 [ 2413.765821] ? pgprot_writethrough+0xc0/0xc0 [ 2413.766675] splice_direct_to_actor+0x387/0x980 [ 2413.767284] ? finish_task_switch+0x126/0x5d0 [ 2413.768367] ? pipe_to_sendpage+0x380/0x380 [ 2413.768393] ? do_splice_to+0x160/0x160 [ 2413.769087] ? finish_task_switch+0xef/0x5d0 [ 2413.769870] ? security_file_permission+0xb1/0xe0 [ 2413.769902] do_splice_direct+0x1c4/0x290 [ 2413.770688] untrack_pfn+0xdc/0x240 [ 2413.772176] ? splice_direct_to_actor+0x980/0x980 [ 2413.772197] ? avc_policy_seqno+0x9/0x70 [ 2413.772877] ? track_pfn_insert+0x150/0x150 [ 2413.773708] ? security_file_permission+0xb1/0xe0 [ 2413.774802] ? lock_downgrade+0x6d0/0x6d0 [ 2413.775645] do_sendfile+0x553/0x11e0 [ 2413.776265] ? uprobe_munmap+0x1c/0x560 [ 2413.777739] ? do_pwritev+0x270/0x270 [ 2413.777761] ? wait_for_completion_io+0x270/0x270 [ 2413.778860] unmap_single_vma+0x1bc/0x300 [ 2413.779848] ? rcu_read_lock_any_held+0x75/0xa0 [ 2413.779869] ? vfs_write+0x354/0xb10 [ 2413.780594] zap_page_range_single+0x2ce/0x450 [ 2413.782061] __x64_sys_sendfile64+0x1d1/0x210 [ 2413.782082] ? __ia32_sys_sendfile+0x220/0x220 [ 2413.782655] ? unmap_single_vma+0x300/0x300 [ 2413.783545] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2413.783567] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2413.784818] ? remap_pfn_range_internal+0xc56/0xf60 [ 2413.785576] do_syscall_64+0x33/0x40 [ 2413.786289] ? lookup_memtype+0x5b/0x200 [ 2413.787457] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2413.787473] RIP: 0033:0x7f4ef9c71b19 [ 2413.788263] ? apply_to_existing_page_range+0x40/0x40 [ 2413.789716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2413.789731] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 [ 2413.790476] remap_pfn_range+0x139/0x160 [ 2413.790977] ORIG_RAX: 0000000000000028 [ 2413.790990] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2413.791005] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2413.791738] ? remap_pfn_range_notrack+0x70/0x70 [ 2413.792640] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2413.792652] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2413.792667] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 [ 2413.793336] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2413.826469] io_uring_mmap+0x398/0x530 [ 2413.827103] mmap_file+0x5e/0xe0 [ 2413.827609] mmap_region+0xc4d/0x1500 [ 2413.828237] do_mmap+0x868/0x1370 [ 2413.828764] vm_mmap_pgoff+0x198/0x1f0 [ 2413.829405] ? randomize_page+0xb0/0xb0 [ 2413.830038] ksys_mmap_pgoff+0x41c/0x560 [ 2413.830656] ? find_mergeable_anon_vma+0x250/0x250 [ 2413.831418] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 13:18:57 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:18:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="380100001d0001000000000000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0041"], 0x138}}, 0x0) 13:18:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB='8'], 0x138}, 0x368}, 0x0) [ 2413.832238] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2413.833302] do_syscall_64+0x33/0x40 [ 2413.833947] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2413.834718] RIP: 0033:0x7fbb28dd6b62 [ 2413.835312] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2413.838103] RSP: 002b:00007fbb2634c0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2413.839286] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbb28dd6b62 [ 2413.840392] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2413.841494] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2413.842598] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2413.843688] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2413.844830] irq event stamp: 1905 [ 2413.845362] hardirqs last enabled at (1913): [] console_unlock+0x92d/0xb40 [ 2413.846653] hardirqs last disabled at (1922): [] console_unlock+0x839/0xb40 [ 2413.847957] softirqs last enabled at (1206): [] asm_call_irq_on_stack+0x12/0x20 [ 2413.849301] softirqs last disabled at (1177): [] asm_call_irq_on_stack+0x12/0x20 [ 2413.850663] ---[ end trace 2c48828f96fb49f1 ]--- [ 2413.890704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2413.892344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2413.895071] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 13:18:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) dup3(r3, r4, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000040)=0x6, 0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000006, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x373a5c00) [ 2413.906195] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 13:18:57 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 78) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) [ 2413.927559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2413.929516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2413.936088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 13:18:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 21) 13:18:57 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0xff, 0x688002) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x63, 0x16, 0x78, 0x3f, 0x0, 0x101, 0x10801, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0xe4a0}, 0x498, 0x8, 0x2, 0x2, 0x5, 0x1f66, 0x2, 0x0, 0x7ff, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, r1, 0xa) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x11, r0, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) syz_io_uring_complete(r2) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) 13:18:57 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xcb, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x80, 0x6, 0x3, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x2}, {0x2, 0x2}, {0x6, 0xf, "92bdec454954f227d68b158da4"}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x7, [0x5]}, @noop, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x93, 0x0}, @multicast2, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004040) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) copy_file_range(r5, &(0x7f0000000380)=0x1ff, r4, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) [ 2414.075408] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2414.092732] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12339 comm=syz-executor.5 [ 2414.159517] FAULT_INJECTION: forcing a failure. [ 2414.159517] name failslab, interval 1, probability 0, space 0, times 0 [ 2414.161351] CPU: 1 PID: 12345 Comm: syz-executor.4 Tainted: G W 5.10.242 #1 [ 2414.162409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2414.163465] Call Trace: [ 2414.163819] dump_stack+0x107/0x167 [ 2414.164286] should_fail.cold+0x5/0xa [ 2414.164776] ? __es_insert_extent+0xed1/0x1370 [ 2414.165362] should_failslab+0x5/0x20 [ 2414.165849] kmem_cache_alloc+0x5b/0x310 [ 2414.166370] __es_insert_extent+0xed1/0x1370 [ 2414.166947] ext4_es_insert_extent+0x45d/0xf10 [ 2414.167535] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2414.168103] ? down_write_killable+0x180/0x180 [ 2414.168683] ext4_map_blocks+0x80b/0x1910 [ 2414.169207] ? __kernel_text_address+0x9/0x40 [ 2414.169777] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2414.170338] ? jbd2__journal_start+0xf3/0x7e0 [ 2414.170903] ? __ext4_journal_start_sb+0x214/0x390 [ 2414.171512] ? __ext4_journal_start_sb+0x1db/0x390 [ 2414.172144] ext4_iomap_begin+0x3ad/0x700 [ 2414.172677] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 2414.173289] ? kasan_save_stack+0x1b/0x40 [ 2414.173818] ? ext4_file_write_iter+0xe0e/0x1530 [ 2414.174421] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 2414.175213] ? splice_direct_to_actor+0x387/0x980 [ 2414.175815] ? do_splice_direct+0x1c4/0x290 [ 2414.176361] ? do_sendfile+0x553/0x11e0 [ 2414.176855] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2414.177440] ? do_syscall_64+0x33/0x40 [ 2414.177926] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2414.178597] iomap_apply+0x164/0x810 [ 2414.179072] ? iomap_dio_rw+0x90/0x90 [ 2414.179551] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2414.180287] ? mark_held_locks+0x9e/0xe0 [ 2414.180815] ? filemap_check_errors+0xa5/0x150 [ 2414.181401] __iomap_dio_rw+0x6cd/0x1110 [ 2414.181918] ? iomap_dio_rw+0x90/0x90 [ 2414.182400] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2414.182978] ? ext4_orphan_add+0x253/0x9e0 [ 2414.183511] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2414.184131] ? ext4_empty_dir+0xae0/0xae0 [ 2414.184642] ? jbd2__journal_start+0xf3/0x7e0 [ 2414.185205] iomap_dio_rw+0x31/0x90 [ 2414.185659] ext4_file_write_iter+0xe0e/0x1530 [ 2414.186242] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2414.186804] ? kasan_save_stack+0x32/0x40 [ 2414.187314] ? kasan_save_stack+0x1b/0x40 [ 2414.187829] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2414.188454] ? iter_file_splice_write+0x165/0xc90 [ 2414.189049] ? direct_splice_actor+0x10f/0x170 [ 2414.189616] ? splice_direct_to_actor+0x387/0x980 [ 2414.190211] ? do_splice_direct+0x1c4/0x290 [ 2414.190746] ? do_sendfile+0x553/0x11e0 [ 2414.191242] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2414.191827] ? do_syscall_64+0x33/0x40 [ 2414.192312] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2414.192984] do_iter_readv_writev+0x476/0x750 [ 2414.193544] ? _cond_resched+0x10/0x30 [ 2414.194029] ? new_sync_write+0x660/0x660 [ 2414.194543] ? avc_policy_seqno+0x9/0x70 [ 2414.195046] ? selinux_file_permission+0x92/0x520 [ 2414.195649] ? security_file_permission+0xb1/0xe0 [ 2414.196153] FAULT_INJECTION: forcing a failure. [ 2414.196153] name failslab, interval 1, probability 0, space 0, times 0 [ 2414.196267] do_iter_write+0x191/0x700 [ 2414.199151] ? trace_hardirqs_on+0x5b/0x180 [ 2414.199689] vfs_iter_write+0x70/0xa0 [ 2414.200179] iter_file_splice_write+0x726/0xc90 [ 2414.200761] ? generic_splice_sendpage+0x140/0x140 [ 2414.201387] ? security_file_permission+0xb1/0xe0 [ 2414.201992] ? generic_splice_sendpage+0x140/0x140 [ 2414.202595] direct_splice_actor+0x10f/0x170 [ 2414.203137] splice_direct_to_actor+0x387/0x980 [ 2414.203717] ? pipe_to_sendpage+0x380/0x380 [ 2414.204266] ? do_splice_to+0x160/0x160 [ 2414.204755] ? security_file_permission+0xb1/0xe0 [ 2414.205353] do_splice_direct+0x1c4/0x290 [ 2414.205863] ? splice_direct_to_actor+0x980/0x980 [ 2414.206455] ? avc_policy_seqno+0x9/0x70 [ 2414.206961] ? security_file_permission+0xb1/0xe0 [ 2414.207559] do_sendfile+0x553/0x11e0 [ 2414.208048] ? do_pwritev+0x270/0x270 [ 2414.208518] ? wait_for_completion_io+0x270/0x270 [ 2414.209113] ? rcu_read_lock_any_held+0x75/0xa0 [ 2414.209681] ? vfs_write+0x354/0xb10 [ 2414.210139] __x64_sys_sendfile64+0x1d1/0x210 [ 2414.210684] ? __ia32_sys_sendfile+0x220/0x220 [ 2414.211249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2414.211897] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2414.212527] do_syscall_64+0x33/0x40 [ 2414.212985] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2414.213612] RIP: 0033:0x7f4ef9c71b19 [ 2414.214069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2414.216318] RSP: 002b:00007f4ef71e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2414.217243] RAX: ffffffffffffffda RBX: 00007f4ef9d84f60 RCX: 00007f4ef9c71b19 [ 2414.218115] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2414.218984] RBP: 00007f4ef71e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2414.219864] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2414.220731] R13: 00007fff35ef1e2f R14: 00007f4ef71e7300 R15: 0000000000022000 [ 2414.221633] CPU: 0 PID: 12341 Comm: syz-executor.7 Tainted: G W 5.10.242 #1 [ 2414.223389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2414.225158] Call Trace: [ 2414.225731] dump_stack+0x107/0x167 [ 2414.226517] should_fail.cold+0x5/0xa [ 2414.227330] ? ptlock_alloc+0x1d/0x70 [ 2414.228150] should_failslab+0x5/0x20 [ 2414.228959] kmem_cache_alloc+0x5b/0x310 [ 2414.229830] ptlock_alloc+0x1d/0x70 [ 2414.230611] pte_alloc_one+0x68/0x1a0 [ 2414.231420] __pte_alloc+0x1d/0x330 [ 2414.232323] remap_pfn_range_internal+0x9a3/0xf60 [ 2414.233443] ? lookup_memtype+0x5b/0x200 [ 2414.234322] ? apply_to_existing_page_range+0x40/0x40 [ 2414.235424] remap_pfn_range+0xcd/0x160 [ 2414.236286] ? remap_pfn_range_notrack+0x70/0x70 [ 2414.237288] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2414.238389] io_uring_mmap+0x398/0x530 [ 2414.239216] mmap_file+0x5e/0xe0 [ 2414.239943] mmap_region+0xc4d/0x1500 [ 2414.240774] do_mmap+0x868/0x1370 [ 2414.241521] vm_mmap_pgoff+0x198/0x1f0 [ 2414.242355] ? randomize_page+0xb0/0xb0 [ 2414.243213] ksys_mmap_pgoff+0x41c/0x560 [ 2414.244084] ? find_mergeable_anon_vma+0x250/0x250 [ 2414.245122] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2414.246234] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2414.247324] do_syscall_64+0x33/0x40 [ 2414.248120] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2414.249200] RIP: 0033:0x7fbb28dd6b62 [ 2414.249980] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2414.253875] RSP: 002b:00007fbb2634c0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2414.255480] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbb28dd6b62 [ 2414.257000] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2414.258509] RBP: 0000000020ffc000 R08: 0000000000000008 R09: 0000000010000000 [ 2414.260023] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2414.261532] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 VM DIAGNOSIS: 13:18:57 Registers: info registers vcpu 0 RAX=00000000000385f4 RBX=0000000000000001 RCX=ffffc90004a10000 RDX=0000000000040000 RSI=ffffffff8129d801 RDI=0000000000000001 RBP=0000000000000000 RSP=ffff88802b6169f8 R8 =0000000000000000 R9 =ffffffff868706a7 R10=0000000000000000 R11=0000000000000001 R12=000000000000001f R13=0000000000000016 R14=ffff888049643480 R15=0000000000000000 RIP=ffffffff8129d803 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4ef71e7700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe4000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4ef71e6f78 CR3=000000004bd04000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffff0000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000076 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e3a31 RDI=ffffffff879f71c0 RBP=ffffffff879f7180 RSP=ffff88802b7072a8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000076 R13=0000000000000076 R14=ffffffff879f7180 R15=dffffc0000000000 RIP=ffffffff822e3a88 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbb2634c700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f04eaf4ff80 CR3=000000000e7de000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000