a0 [ 2648.908166] raw_sendmsg+0xaa6/0x29d0 [ 2648.908539] ? dst_output+0x170/0x170 [ 2648.908896] ? __lock_acquire+0x1657/0x5b00 [ 2648.909315] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2648.909800] ? SOFTIRQ_verbose+0x10/0x10 [ 2648.910207] ? create_object.isra.0+0x3ad/0xa20 [ 2648.910656] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2648.911136] ? find_held_lock+0x2c/0x110 [ 2648.911526] ? trace_hardirqs_on+0x5b/0x180 [ 2648.911940] ? dst_output+0x170/0x170 [ 2648.912303] inet_sendmsg+0x11d/0x140 [ 2648.912660] ? inet_send_prepare+0x540/0x540 [ 2648.913062] __sock_sendmsg+0x13c/0x190 [ 2648.913430] ____sys_sendmsg+0x334/0x870 [ 2648.913822] ? sock_write_iter+0x3d0/0x3d0 [ 2648.914236] ? do_recvmmsg+0x6d0/0x6d0 [ 2648.914604] ? SOFTIRQ_verbose+0x10/0x10 [ 2648.914989] ? mark_lock+0xf5/0x2df0 [ 2648.915345] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2648.915836] ___sys_sendmsg+0xf3/0x170 [ 2648.916206] ? sendmsg_copy_msghdr+0x160/0x160 [ 2648.916637] ? __fget_files+0x2cf/0x520 [ 2648.917011] ? lock_downgrade+0x6d0/0x6d0 [ 2648.917406] ? lock_downgrade+0x6d0/0x6d0 [ 2648.917807] ? __fget_files+0x2f8/0x520 [ 2648.918207] ? __fget_light+0xea/0x290 [ 2648.918575] __sys_sendmmsg+0x195/0x470 [ 2648.918951] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2648.919350] ? lock_downgrade+0x6d0/0x6d0 [ 2648.919760] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2648.920214] ? wait_for_completion_io+0x270/0x270 [ 2648.920680] ? rcu_read_lock_any_held+0x75/0xa0 [ 2648.921108] ? vfs_write+0x354/0xb10 [ 2648.921464] ? fput_many+0x2f/0x1a0 [ 2648.921809] ? ksys_write+0x1a9/0x260 [ 2648.922187] ? __ia32_sys_read+0xb0/0xb0 [ 2648.922574] __x64_sys_sendmmsg+0x99/0x100 [ 2648.922973] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2648.923448] do_syscall_64+0x33/0x40 [ 2648.923812] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2648.924273] RIP: 0033:0x7f6f45c0ab19 [ 2648.924620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2648.926295] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2648.926990] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2648.927636] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2648.928285] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2648.928929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2648.929579] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 [ 2648.970236] FAULT_INJECTION: forcing a failure. [ 2648.970236] name failslab, interval 1, probability 0, space 0, times 0 [ 2648.971426] CPU: 1 PID: 11474 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2648.972063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2648.972816] Call Trace: [ 2648.973071] dump_stack+0x107/0x167 [ 2648.973419] should_fail.cold+0x5/0xa [ 2648.973785] should_failslab+0x5/0x20 [ 2648.974162] __kmalloc_node_track_caller+0x74/0x3b0 [ 2648.974594] ? __ip_append_data+0x2930/0x3310 [ 2648.974999] __alloc_skb+0xb1/0x5b0 [ 2648.975333] __ip_append_data+0x2930/0x3310 [ 2648.975728] ? raw_destroy+0x30/0x30 [ 2648.976070] ? ip_finish_output+0x330/0x330 [ 2648.976454] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2648.976900] ? memcpy+0x39/0x60 [ 2648.977196] ? raw_destroy+0x30/0x30 [ 2648.977530] ip_append_data+0x114/0x1a0 [ 2648.977896] raw_sendmsg+0xaa6/0x29d0 [ 2648.978290] ? dst_output+0x170/0x170 [ 2648.978651] ? __lock_acquire+0x1657/0x5b00 [ 2648.979058] ? mark_held_locks+0x9e/0xe0 [ 2648.979445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2648.979936] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2648.980436] ? trace_hardirqs_on+0x5b/0x180 [ 2648.980838] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2648.981352] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2648.981824] ? find_held_lock+0x2c/0x110 [ 2648.982235] ? trace_hardirqs_on+0x5b/0x180 [ 2648.982640] ? dst_output+0x170/0x170 [ 2648.982999] inet_sendmsg+0x11d/0x140 [ 2648.983355] ? inet_send_prepare+0x540/0x540 [ 2648.983759] __sock_sendmsg+0x13c/0x190 [ 2648.984126] ____sys_sendmsg+0x334/0x870 [ 2648.984512] ? sock_write_iter+0x3d0/0x3d0 [ 2648.984904] ? do_recvmmsg+0x6d0/0x6d0 [ 2648.985265] ? SOFTIRQ_verbose+0x10/0x10 [ 2648.985643] ? mark_lock+0xf5/0x2df0 [ 2648.986004] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2648.986514] ___sys_sendmsg+0xf3/0x170 [ 2648.986886] ? sendmsg_copy_msghdr+0x160/0x160 [ 2648.987308] ? __fget_files+0x2cf/0x520 [ 2648.987675] ? lock_downgrade+0x6d0/0x6d0 [ 2648.988064] ? lock_downgrade+0x6d0/0x6d0 [ 2648.988455] ? __fget_files+0x2f8/0x520 [ 2648.988838] ? __fget_light+0xea/0x290 [ 2648.989216] __sys_sendmmsg+0x195/0x470 [ 2648.989601] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2648.990007] ? lock_downgrade+0x6d0/0x6d0 [ 2648.990433] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2648.990887] ? wait_for_completion_io+0x270/0x270 [ 2648.991342] ? rcu_read_lock_any_held+0x75/0xa0 [ 2648.991778] ? vfs_write+0x354/0xb10 [ 2648.992132] ? fput_many+0x2f/0x1a0 [ 2648.992482] ? ksys_write+0x1a9/0x260 [ 2648.992841] ? __ia32_sys_read+0xb0/0xb0 [ 2648.993231] __x64_sys_sendmmsg+0x99/0x100 [ 2648.993627] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2648.994116] do_syscall_64+0x33/0x40 [ 2648.994465] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2648.994941] RIP: 0033:0x7f7b32767b19 [ 2648.995290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2648.996949] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2648.997648] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2648.998325] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2648.998980] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2648.999640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2649.000294] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:05:19 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x20, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) 23:05:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:05:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080), 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:05:19 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 46) 23:05:19 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, 0x0, 0x10044001) 23:05:19 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0x436, 0x80000001) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:05:19 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 58) 23:05:19 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYRES32, @ANYBLOB="000000002efd80120bfb2f66696c653000"]) copy_file_range(r0, 0x0, r5, &(0x7f0000000180)=0x80000000001, 0x8, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) [ 2664.211846] FAULT_INJECTION: forcing a failure. [ 2664.211846] name failslab, interval 1, probability 0, space 0, times 0 [ 2664.212000] FAULT_INJECTION: forcing a failure. [ 2664.212000] name failslab, interval 1, probability 0, space 0, times 0 [ 2664.212898] CPU: 0 PID: 11506 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2664.214441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2664.215174] Call Trace: [ 2664.215410] dump_stack+0x107/0x167 [ 2664.215744] should_fail.cold+0x5/0xa [ 2664.216088] ? __alloc_skb+0x6d/0x5b0 [ 2664.216418] should_failslab+0x5/0x20 [ 2664.216764] kmem_cache_alloc_node+0x55/0x330 [ 2664.217162] __alloc_skb+0x6d/0x5b0 [ 2664.217483] __ip_append_data+0x2930/0x3310 [ 2664.217877] ? raw_destroy+0x30/0x30 [ 2664.218231] ? ip_finish_output+0x330/0x330 [ 2664.218612] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2664.219067] ? memcpy+0x39/0x60 [ 2664.219353] ? raw_destroy+0x30/0x30 [ 2664.219690] ip_append_data+0x114/0x1a0 [ 2664.220037] raw_sendmsg+0xaa6/0x29d0 [ 2664.220388] ? dst_output+0x170/0x170 [ 2664.220734] ? __lock_acquire+0x1657/0x5b00 [ 2664.221115] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2664.221587] ? SOFTIRQ_verbose+0x10/0x10 [ 2664.221943] ? create_object.isra.0+0x3ad/0xa20 [ 2664.222379] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2664.222835] ? find_held_lock+0x2c/0x110 [ 2664.223195] ? trace_hardirqs_on+0x5b/0x180 [ 2664.223589] ? dst_output+0x170/0x170 [ 2664.223929] inet_sendmsg+0x11d/0x140 [ 2664.224254] ? inet_send_prepare+0x540/0x540 [ 2664.224663] __sock_sendmsg+0x13c/0x190 [ 2664.225008] ____sys_sendmsg+0x334/0x870 [ 2664.225372] ? sock_write_iter+0x3d0/0x3d0 [ 2664.225753] ? do_recvmmsg+0x6d0/0x6d0 [ 2664.226094] ? SOFTIRQ_verbose+0x10/0x10 [ 2664.226467] ? mark_lock+0xf5/0x2df0 [ 2664.226804] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2664.227252] ___sys_sendmsg+0xf3/0x170 [ 2664.227617] ? sendmsg_copy_msghdr+0x160/0x160 [ 2664.228014] ? __fget_files+0x2cf/0x520 [ 2664.228355] ? lock_downgrade+0x6d0/0x6d0 [ 2664.228745] ? lock_downgrade+0x6d0/0x6d0 [ 2664.229106] ? __fget_files+0x2f8/0x520 [ 2664.229453] ? __fget_light+0xea/0x290 [ 2664.229822] __sys_sendmmsg+0x195/0x470 [ 2664.230179] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2664.230553] ? lock_downgrade+0x6d0/0x6d0 [ 2664.230946] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2664.231359] ? wait_for_completion_io+0x270/0x270 [ 2664.231805] ? rcu_read_lock_any_held+0x75/0xa0 [ 2664.232198] ? vfs_write+0x354/0xb10 [ 2664.232526] ? fput_many+0x2f/0x1a0 [ 2664.232867] ? ksys_write+0x1a9/0x260 [ 2664.233194] ? __ia32_sys_read+0xb0/0xb0 [ 2664.233555] __x64_sys_sendmmsg+0x99/0x100 [ 2664.233942] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2664.234394] do_syscall_64+0x33/0x40 [ 2664.234731] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2664.235179] RIP: 0033:0x7f7b32767b19 [ 2664.235501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2664.237097] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2664.237758] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2664.238377] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2664.238995] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2664.239621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2664.240237] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 [ 2664.240883] CPU: 1 PID: 11502 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2664.241528] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2664.242252] Call Trace: [ 2664.242492] dump_stack+0x107/0x167 [ 2664.242820] should_fail.cold+0x5/0xa [ 2664.243149] ? __alloc_skb+0x6d/0x5b0 [ 2664.243482] should_failslab+0x5/0x20 [ 2664.243809] kmem_cache_alloc_node+0x55/0x330 [ 2664.244196] __alloc_skb+0x6d/0x5b0 [ 2664.244519] __ip_append_data+0x2930/0x3310 [ 2664.244898] ? raw_destroy+0x30/0x30 [ 2664.245225] ? ip_finish_output+0x330/0x330 [ 2664.245596] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2664.246030] ? memcpy+0x39/0x60 [ 2664.246339] ? raw_destroy+0x30/0x30 [ 2664.246658] ip_append_data+0x114/0x1a0 [ 2664.247001] raw_sendmsg+0xaa6/0x29d0 [ 2664.247333] ? dst_output+0x170/0x170 [ 2664.247659] ? __lock_acquire+0x1657/0x5b00 [ 2664.248035] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2664.248477] ? SOFTIRQ_verbose+0x10/0x10 [ 2664.248822] ? create_object.isra.0+0x3ad/0xa20 [ 2664.249223] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2664.249654] ? find_held_lock+0x2c/0x110 [ 2664.250017] ? trace_hardirqs_on+0x5b/0x180 [ 2664.250408] ? dst_output+0x170/0x170 [ 2664.250754] inet_sendmsg+0x11d/0x140 [ 2664.251078] ? inet_send_prepare+0x540/0x540 [ 2664.251451] __sock_sendmsg+0x13c/0x190 [ 2664.251789] ____sys_sendmsg+0x334/0x870 [ 2664.252141] ? sock_write_iter+0x3d0/0x3d0 [ 2664.252514] ? do_recvmmsg+0x6d0/0x6d0 [ 2664.252860] ? SOFTIRQ_verbose+0x10/0x10 [ 2664.253202] ? mark_lock+0xf5/0x2df0 [ 2664.253521] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2664.253965] ___sys_sendmsg+0xf3/0x170 [ 2664.254315] ? sendmsg_copy_msghdr+0x160/0x160 [ 2664.254705] ? __fget_files+0x2cf/0x520 [ 2664.255041] ? lock_downgrade+0x6d0/0x6d0 [ 2664.255401] ? lock_downgrade+0x6d0/0x6d0 [ 2664.255778] ? __fget_files+0x2f8/0x520 [ 2664.256120] ? __fget_light+0xea/0x290 [ 2664.256457] __sys_sendmmsg+0x195/0x470 [ 2664.256798] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2664.257162] ? lock_downgrade+0x6d0/0x6d0 [ 2664.257529] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2664.257937] ? wait_for_completion_io+0x270/0x270 [ 2664.258362] ? rcu_read_lock_any_held+0x75/0xa0 [ 2664.258765] ? vfs_write+0x354/0xb10 [ 2664.259089] ? fput_many+0x2f/0x1a0 [ 2664.259398] ? ksys_write+0x1a9/0x260 [ 2664.259741] ? __ia32_sys_read+0xb0/0xb0 [ 2664.260090] __x64_sys_sendmmsg+0x99/0x100 [ 2664.260448] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2664.260882] do_syscall_64+0x33/0x40 [ 2664.261216] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2664.261668] RIP: 0033:0x7f6f45c0ab19 [ 2664.261988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2664.263516] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2664.264151] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2664.264743] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2664.265357] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2664.265947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2664.266560] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 23:05:19 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, 0x0, 0x10044001) 23:05:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:05:19 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0x4b0, 0x80000001) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:05:19 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0xb, 0x80000001) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = signalfd(r1, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) r3 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f00000009c0)={0x0, 0x0}) tgkill(r4, r6, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r8 = dup3(r1, 0xffffffffffffffff, 0x0) r9 = openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x123000, 0x4c) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r7, &(0x7f0000000180)={r8, r9}) 23:05:19 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001) 23:05:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:05:19 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 59) 23:05:19 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:05:19 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 47) 23:05:19 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001) [ 2664.483253] FAULT_INJECTION: forcing a failure. [ 2664.483253] name failslab, interval 1, probability 0, space 0, times 0 [ 2664.484768] CPU: 0 PID: 11531 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2664.485369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2664.486080] Call Trace: [ 2664.486334] dump_stack+0x107/0x167 [ 2664.486649] should_fail.cold+0x5/0xa [ 2664.486996] ? create_object.isra.0+0x3a/0xa20 [ 2664.487387] should_failslab+0x5/0x20 [ 2664.487714] kmem_cache_alloc+0x5b/0x310 [ 2664.488077] create_object.isra.0+0x3a/0xa20 [ 2664.488451] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2664.488898] kmem_cache_alloc_node+0x169/0x330 [ 2664.489291] __alloc_skb+0x6d/0x5b0 [ 2664.489610] __ip_append_data+0x2930/0x3310 [ 2664.490006] ? raw_destroy+0x30/0x30 [ 2664.490366] ? ip_finish_output+0x330/0x330 [ 2664.490760] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2664.491209] ? memcpy+0x39/0x60 [ 2664.491494] ? raw_destroy+0x30/0x30 [ 2664.491811] ip_append_data+0x114/0x1a0 [ 2664.492170] raw_sendmsg+0xaa6/0x29d0 [ 2664.492527] ? dst_output+0x170/0x170 [ 2664.492875] ? __lock_acquire+0x1657/0x5b00 [ 2664.493286] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2664.493730] ? SOFTIRQ_verbose+0x10/0x10 [ 2664.494072] ? create_object.isra.0+0x3ad/0xa20 [ 2664.494506] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2664.494939] ? find_held_lock+0x2c/0x110 [ 2664.495311] ? trace_hardirqs_on+0x5b/0x180 [ 2664.495683] ? dst_output+0x170/0x170 [ 2664.496016] inet_sendmsg+0x11d/0x140 [ 2664.496355] ? inet_send_prepare+0x540/0x540 [ 2664.496731] __sock_sendmsg+0x13c/0x190 [ 2664.497070] ____sys_sendmsg+0x334/0x870 [ 2664.497433] ? sock_write_iter+0x3d0/0x3d0 [ 2664.497803] ? do_recvmmsg+0x6d0/0x6d0 [ 2664.498153] ? SOFTIRQ_verbose+0x10/0x10 [ 2664.498518] ? mark_lock+0xf5/0x2df0 [ 2664.498851] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2664.499297] ___sys_sendmsg+0xf3/0x170 [ 2664.499643] ? sendmsg_copy_msghdr+0x160/0x160 [ 2664.500035] ? __fget_files+0x2cf/0x520 [ 2664.500373] ? lock_downgrade+0x6d0/0x6d0 [ 2664.500747] ? lock_downgrade+0x6d0/0x6d0 [ 2664.501121] ? __fget_files+0x2f8/0x520 [ 2664.501467] ? __fget_light+0xea/0x290 [ 2664.501819] __sys_sendmmsg+0x195/0x470 [ 2664.502183] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2664.502591] ? lock_downgrade+0x6d0/0x6d0 [ 2664.502970] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2664.503381] ? wait_for_completion_io+0x270/0x270 [ 2664.503806] ? rcu_read_lock_any_held+0x75/0xa0 [ 2664.504200] ? vfs_write+0x354/0xb10 [ 2664.504519] ? fput_many+0x2f/0x1a0 [ 2664.504844] ? ksys_write+0x1a9/0x260 [ 2664.505167] ? __ia32_sys_read+0xb0/0xb0 [ 2664.505519] __x64_sys_sendmmsg+0x99/0x100 [ 2664.505891] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2664.506338] do_syscall_64+0x33/0x40 [ 2664.506658] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2664.507120] RIP: 0033:0x7f7b32767b19 [ 2664.507438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2664.509021] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2664.509662] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2664.510309] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2664.510916] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2664.511542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2664.512162] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 [ 2664.564108] FAULT_INJECTION: forcing a failure. [ 2664.564108] name failslab, interval 1, probability 0, space 0, times 0 [ 2664.565205] CPU: 1 PID: 11539 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2664.565788] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2664.566500] Call Trace: [ 2664.566743] dump_stack+0x107/0x167 [ 2664.567058] should_fail.cold+0x5/0xa [ 2664.567404] ? create_object.isra.0+0x3a/0xa20 [ 2664.567797] should_failslab+0x5/0x20 [ 2664.568126] kmem_cache_alloc+0x5b/0x310 [ 2664.568479] create_object.isra.0+0x3a/0xa20 [ 2664.568855] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2664.569292] kmem_cache_alloc_node+0x169/0x330 [ 2664.569693] __alloc_skb+0x6d/0x5b0 [ 2664.570013] __ip_append_data+0x2930/0x3310 [ 2664.570419] ? raw_destroy+0x30/0x30 [ 2664.570748] ? ip_finish_output+0x330/0x330 [ 2664.571115] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2664.571547] ? memcpy+0x39/0x60 [ 2664.571835] ? raw_destroy+0x30/0x30 [ 2664.572152] ip_append_data+0x114/0x1a0 [ 2664.572499] raw_sendmsg+0xaa6/0x29d0 [ 2664.572835] ? dst_output+0x170/0x170 [ 2664.573160] ? __lock_acquire+0x1657/0x5b00 [ 2664.573541] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2664.573984] ? SOFTIRQ_verbose+0x10/0x10 [ 2664.574357] ? create_object.isra.0+0x3ad/0xa20 [ 2664.574766] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2664.575202] ? find_held_lock+0x2c/0x110 [ 2664.575560] ? trace_hardirqs_on+0x5b/0x180 [ 2664.575929] ? dst_output+0x170/0x170 [ 2664.576259] inet_sendmsg+0x11d/0x140 [ 2664.576584] ? inet_send_prepare+0x540/0x540 [ 2664.576958] __sock_sendmsg+0x13c/0x190 [ 2664.577299] ____sys_sendmsg+0x334/0x870 [ 2664.577647] ? sock_write_iter+0x3d0/0x3d0 [ 2664.578005] ? do_recvmmsg+0x6d0/0x6d0 [ 2664.578361] ? SOFTIRQ_verbose+0x10/0x10 [ 2664.578707] ? mark_lock+0xf5/0x2df0 [ 2664.579026] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2664.579473] ___sys_sendmsg+0xf3/0x170 [ 2664.579809] ? sendmsg_copy_msghdr+0x160/0x160 [ 2664.580202] ? __fget_files+0x2cf/0x520 [ 2664.580542] ? lock_downgrade+0x6d0/0x6d0 [ 2664.580902] ? lock_downgrade+0x6d0/0x6d0 [ 2664.581259] ? __fget_files+0x2f8/0x520 [ 2664.581607] ? __fget_light+0xea/0x290 [ 2664.581947] __sys_sendmmsg+0x195/0x470 [ 2664.582317] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2664.582685] ? lock_downgrade+0x6d0/0x6d0 [ 2664.583054] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2664.583472] ? wait_for_completion_io+0x270/0x270 [ 2664.583884] ? rcu_read_lock_any_held+0x75/0xa0 [ 2664.584278] ? vfs_write+0x354/0xb10 [ 2664.584598] ? fput_many+0x2f/0x1a0 [ 2664.584911] ? ksys_write+0x1a9/0x260 [ 2664.585237] ? __ia32_sys_read+0xb0/0xb0 [ 2664.585590] __x64_sys_sendmmsg+0x99/0x100 [ 2664.585953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2664.586410] do_syscall_64+0x33/0x40 [ 2664.586729] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2664.587168] RIP: 0033:0x7f6f45c0ab19 [ 2664.587489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2664.589025] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2664.589669] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2664.590281] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2664.590881] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2664.591481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2664.592078] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 23:05:34 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000200)=""/242) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x83, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ebfffffffe, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x5, 0xe9, 0x9, 0x400, 0x5, 0xffffffff}) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) 23:05:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0x870, 0x80000001) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:05:34 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001) 23:05:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:05:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) 23:05:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080), 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:05:34 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 48) [ 2679.662875] FAULT_INJECTION: forcing a failure. [ 2679.662875] name failslab, interval 1, probability 0, space 0, times 0 [ 2679.663992] CPU: 0 PID: 11554 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2679.664576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2679.665272] Call Trace: [ 2679.665507] dump_stack+0x107/0x167 [ 2679.665820] should_fail.cold+0x5/0xa [ 2679.666161] should_failslab+0x5/0x20 [ 2679.666501] __kmalloc_node_track_caller+0x74/0x3b0 [ 2679.666929] ? __ip_append_data+0x2930/0x3310 [ 2679.667317] __alloc_skb+0xb1/0x5b0 [ 2679.667634] __ip_append_data+0x2930/0x3310 [ 2679.668016] ? raw_destroy+0x30/0x30 [ 2679.668345] ? ip_finish_output+0x330/0x330 [ 2679.668721] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2679.669154] ? memcpy+0x39/0x60 [ 2679.669441] ? raw_destroy+0x30/0x30 [ 2679.669763] ip_append_data+0x114/0x1a0 [ 2679.670112] raw_sendmsg+0xaa6/0x29d0 [ 2679.670467] ? dst_output+0x170/0x170 [ 2679.670793] ? __lock_acquire+0x1657/0x5b00 [ 2679.671171] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2679.671618] ? SOFTIRQ_verbose+0x10/0x10 [ 2679.671961] ? create_object.isra.0+0x3ad/0xa20 [ 2679.672365] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2679.672797] ? find_held_lock+0x2c/0x110 [ 2679.673158] ? dst_output+0x170/0x170 [ 2679.673484] inet_sendmsg+0x11d/0x140 [ 2679.673805] ? inet_send_prepare+0x540/0x540 [ 2679.674183] __sock_sendmsg+0x13c/0x190 [ 2679.674531] ____sys_sendmsg+0x334/0x870 [ 2679.674879] ? sock_write_iter+0x3d0/0x3d0 [ 2679.675233] ? do_recvmmsg+0x6d0/0x6d0 [ 2679.675565] ? SOFTIRQ_verbose+0x10/0x10 [ 2679.675906] ? mark_lock+0xf5/0x2df0 [ 2679.676226] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2679.676670] ___sys_sendmsg+0xf3/0x170 [ 2679.677003] ? sendmsg_copy_msghdr+0x160/0x160 [ 2679.677394] ? __fget_files+0x2cf/0x520 [ 2679.677738] ? lock_downgrade+0x6d0/0x6d0 [ 2679.678093] ? mark_lock+0xf5/0x2df0 [ 2679.678422] ? lock_downgrade+0x6d0/0x6d0 [ 2679.678778] ? __fget_files+0x2f8/0x520 [ 2679.679121] ? __fget_light+0xea/0x290 [ 2679.679456] __sys_sendmmsg+0x195/0x470 [ 2679.679800] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2679.680166] ? lock_downgrade+0x6d0/0x6d0 [ 2679.680534] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2679.680941] ? vfs_write+0x88b/0xb10 [ 2679.681258] ? vfs_write+0x5cc/0xb10 [ 2679.681579] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2679.682022] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2679.682492] ? trace_hardirqs_on+0x5b/0x180 [ 2679.682857] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2679.683326] __x64_sys_sendmmsg+0x99/0x100 [ 2679.683685] do_syscall_64+0x33/0x40 [ 2679.684000] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2679.684428] RIP: 0033:0x7f6f45c0ab19 [ 2679.684745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2679.686291] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2679.686929] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2679.687519] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2679.688110] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2679.688700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2679.689290] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 [ 2679.704333] FAULT_INJECTION: forcing a failure. [ 2679.704333] name failslab, interval 1, probability 0, space 0, times 0 [ 2679.705725] CPU: 0 PID: 11550 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2679.706321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2679.707012] Call Trace: [ 2679.707241] dump_stack+0x107/0x167 [ 2679.707551] should_fail.cold+0x5/0xa [ 2679.707881] should_failslab+0x5/0x20 [ 2679.708205] __kmalloc_node_track_caller+0x74/0x3b0 [ 2679.708626] ? __ip_append_data+0x2930/0x3310 [ 2679.709010] __alloc_skb+0xb1/0x5b0 [ 2679.709324] __ip_append_data+0x2930/0x3310 [ 2679.709700] ? raw_destroy+0x30/0x30 [ 2679.710026] ? ip_finish_output+0x330/0x330 [ 2679.710404] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2679.710833] ? memcpy+0x39/0x60 [ 2679.711117] ? raw_destroy+0x30/0x30 [ 2679.711434] ip_append_data+0x114/0x1a0 [ 2679.711779] raw_sendmsg+0xaa6/0x29d0 [ 2679.712114] ? dst_output+0x170/0x170 [ 2679.712438] ? __lock_acquire+0x1657/0x5b00 [ 2679.712823] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2679.713265] ? SOFTIRQ_verbose+0x10/0x10 [ 2679.713608] ? create_object.isra.0+0x3ad/0xa20 [ 2679.714013] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2679.714464] ? find_held_lock+0x2c/0x110 [ 2679.714820] ? trace_hardirqs_on+0x5b/0x180 [ 2679.715188] ? dst_output+0x170/0x170 [ 2679.715514] inet_sendmsg+0x11d/0x140 [ 2679.715837] ? inet_send_prepare+0x540/0x540 [ 2679.716208] __sock_sendmsg+0x13c/0x190 [ 2679.716546] ____sys_sendmsg+0x334/0x870 [ 2679.716893] ? sock_write_iter+0x3d0/0x3d0 [ 2679.717250] ? do_recvmmsg+0x6d0/0x6d0 [ 2679.717584] ? SOFTIRQ_verbose+0x10/0x10 [ 2679.717927] ? mark_lock+0xf5/0x2df0 [ 2679.718271] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2679.718714] ___sys_sendmsg+0xf3/0x170 [ 2679.719045] ? sendmsg_copy_msghdr+0x160/0x160 [ 2679.719432] ? __fget_files+0x2cf/0x520 [ 2679.719768] ? lock_downgrade+0x6d0/0x6d0 [ 2679.720123] ? lock_downgrade+0x6d0/0x6d0 [ 2679.720479] ? __fget_files+0x2f8/0x520 [ 2679.720822] ? __fget_light+0xea/0x290 [ 2679.721158] __sys_sendmmsg+0x195/0x470 [ 2679.721500] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2679.721863] ? lock_downgrade+0x6d0/0x6d0 [ 2679.722242] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2679.722656] ? wait_for_completion_io+0x270/0x270 [ 2679.723064] ? rcu_read_lock_any_held+0x75/0xa0 [ 2679.723454] ? vfs_write+0x354/0xb10 [ 2679.723771] ? fput_many+0x2f/0x1a0 [ 2679.724083] ? ksys_write+0x1a9/0x260 [ 2679.724407] ? __ia32_sys_read+0xb0/0xb0 [ 2679.724762] __x64_sys_sendmmsg+0x99/0x100 [ 2679.725121] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2679.725554] do_syscall_64+0x33/0x40 [ 2679.725871] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2679.726314] RIP: 0033:0x7f7b32767b19 [ 2679.726632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2679.728162] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2679.728809] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2679.729405] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2679.730002] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2679.730608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2679.731203] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:05:34 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 60) 23:05:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000002) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:05:34 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001) 23:05:34 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xa, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x0, 0x0}) tgkill(0x0, r3, 0x0) r4 = getpid() r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r5, &(0x7f0000000080)=""/65, 0x41) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r6, &(0x7f0000000080)=""/65, 0x41) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r5, &(0x7f0000000000)={0xffffffffffffffff, r6, 0x6c}) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) 23:05:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:05:49 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001) 23:05:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:05:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000003) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:05:49 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40005e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x38, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x68004, 0x102) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r2, 0x402, 0x80000006) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x183882, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x4, 0x0, 0x2b000000, 0x0, 0x9}, 0x0, 0x400e, r4, 0x2) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x0, 0x2, 0x7fff, 0x1, 0x8000, 0xffffffffffffffff}) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x34}}, 0x1c) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:05:49 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 49) 23:05:50 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 61) 23:05:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:05:50 executing program 3: r0 = syz_io_uring_setup(0x6916, &(0x7f0000000180)={0x0, 0xd285, 0x4, 0x3, 0x35b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000200)) fcntl$setsig(r0, 0xa, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000001) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r4, 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x509000, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000040)=0x1) 23:05:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:05:50 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001) [ 2694.899060] FAULT_INJECTION: forcing a failure. [ 2694.899060] name failslab, interval 1, probability 0, space 0, times 0 [ 2694.899078] CPU: 0 PID: 11600 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2694.899087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2694.899092] Call Trace: [ 2694.899114] dump_stack+0x107/0x167 [ 2694.899132] should_fail.cold+0x5/0xa [ 2694.899151] ? create_object.isra.0+0x3a/0xa20 23:05:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) [ 2694.899170] should_failslab+0x5/0x20 [ 2694.899186] kmem_cache_alloc+0x5b/0x310 [ 2694.899208] create_object.isra.0+0x3a/0xa20 [ 2694.899223] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2694.899244] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2694.899261] ? __ip_append_data+0x2930/0x3310 [ 2694.899284] __alloc_skb+0xb1/0x5b0 [ 2694.899304] __ip_append_data+0x2930/0x3310 [ 2694.899334] ? raw_destroy+0x30/0x30 [ 2694.899358] ? ip_finish_output+0x330/0x330 [ 2694.899374] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2694.899390] ? memcpy+0x39/0x60 [ 2694.899406] ? raw_destroy+0x30/0x30 [ 2694.899424] ip_append_data+0x114/0x1a0 [ 2694.899450] raw_sendmsg+0xaa6/0x29d0 [ 2694.899479] ? dst_output+0x170/0x170 [ 2694.899495] ? __lock_acquire+0x1657/0x5b00 [ 2694.899528] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2694.899542] ? SOFTIRQ_verbose+0x10/0x10 [ 2694.899556] ? create_object.isra.0+0x3ad/0xa20 [ 2694.899586] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2694.899600] ? find_held_lock+0x2c/0x110 [ 2694.899630] ? trace_hardirqs_on+0x5b/0x180 [ 2694.899649] ? dst_output+0x170/0x170 [ 2694.899668] inet_sendmsg+0x11d/0x140 23:05:50 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001) 23:05:50 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 50) [ 2694.899683] ? inet_send_prepare+0x540/0x540 [ 2694.899698] __sock_sendmsg+0x13c/0x190 [ 2694.899714] ____sys_sendmsg+0x334/0x870 [ 2694.899733] ? sock_write_iter+0x3d0/0x3d0 23:05:50 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 62) [ 2694.899747] ? do_recvmmsg+0x6d0/0x6d0 23:05:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:05:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) [ 2694.899766] ? SOFTIRQ_verbose+0x10/0x10 [ 2694.899780] ? mark_lock+0xf5/0x2df0 [ 2694.899798] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2694.899819] ___sys_sendmsg+0xf3/0x170 [ 2694.899836] ? sendmsg_copy_msghdr+0x160/0x160 [ 2694.899858] ? __fget_files+0x2cf/0x520 [ 2694.899874] ? lock_downgrade+0x6d0/0x6d0 [ 2694.899895] ? lock_downgrade+0x6d0/0x6d0 [ 2694.899918] ? __fget_files+0x2f8/0x520 [ 2694.899942] ? __fget_light+0xea/0x290 [ 2694.899966] __sys_sendmmsg+0x195/0x470 [ 2694.899988] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2694.900003] ? lock_downgrade+0x6d0/0x6d0 [ 2694.900039] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2694.900059] ? wait_for_completion_io+0x270/0x270 [ 2694.900078] ? rcu_read_lock_any_held+0x75/0xa0 [ 2694.900092] ? vfs_write+0x354/0xb10 23:05:50 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001300000008000300", @ANYRESHEX=r1, @ANYBLOB="06001200000000000e0006000802110000000000ec17a90c9ab7af3d16"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="ffdf0000", @ANYRES16=0x0, @ANYBLOB="200029bd7000fbdbdf255d00000008000300", @ANYRES32=r8, @ANYBLOB="0800a500010000000800a500010000000800a50001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4410}, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000180)) [ 2694.900109] ? fput_many+0x2f/0x1a0 [ 2694.900126] ? ksys_write+0x1a9/0x260 [ 2694.900141] ? __ia32_sys_read+0xb0/0xb0 [ 2694.900165] __x64_sys_sendmmsg+0x99/0x100 [ 2694.900181] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2694.900195] do_syscall_64+0x33/0x40 [ 2694.900211] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2694.900223] RIP: 0033:0x7f7b32767b19 [ 2694.900241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2694.900252] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2694.900270] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2694.900279] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2694.900289] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2694.900298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2694.900308] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 [ 2694.910304] FAULT_INJECTION: forcing a failure. [ 2694.910304] name failslab, interval 1, probability 0, space 0, times 0 [ 2694.910319] CPU: 0 PID: 11599 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2694.910328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2694.910333] Call Trace: [ 2694.910348] dump_stack+0x107/0x167 [ 2694.910365] should_fail.cold+0x5/0xa [ 2694.910381] ? create_object.isra.0+0x3a/0xa20 [ 2694.910398] should_failslab+0x5/0x20 [ 2694.910416] kmem_cache_alloc+0x5b/0x310 [ 2694.910438] create_object.isra.0+0x3a/0xa20 [ 2694.910453] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2694.910475] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2694.910489] ? __ip_append_data+0x2930/0x3310 [ 2694.910510] __alloc_skb+0xb1/0x5b0 [ 2694.910531] __ip_append_data+0x2930/0x3310 [ 2694.910560] ? raw_destroy+0x30/0x30 [ 2694.910589] ? ip_finish_output+0x330/0x330 [ 2694.910605] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2694.910621] ? memcpy+0x39/0x60 [ 2694.910640] ? raw_destroy+0x30/0x30 [ 2694.910655] ip_append_data+0x114/0x1a0 [ 2694.910682] raw_sendmsg+0xaa6/0x29d0 [ 2694.910712] ? dst_output+0x170/0x170 [ 2694.910725] ? __lock_acquire+0x1657/0x5b00 [ 2694.910757] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2694.910772] ? SOFTIRQ_verbose+0x10/0x10 [ 2694.910785] ? create_object.isra.0+0x3ad/0xa20 [ 2694.910813] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2694.910826] ? find_held_lock+0x2c/0x110 [ 2694.910855] ? trace_hardirqs_on+0x5b/0x180 [ 2694.910874] ? dst_output+0x170/0x170 [ 2694.910892] inet_sendmsg+0x11d/0x140 [ 2694.910906] ? inet_send_prepare+0x540/0x540 [ 2694.910920] __sock_sendmsg+0x13c/0x190 [ 2694.910936] ____sys_sendmsg+0x334/0x870 [ 2694.910954] ? sock_write_iter+0x3d0/0x3d0 [ 2694.910967] ? do_recvmmsg+0x6d0/0x6d0 [ 2694.910986] ? SOFTIRQ_verbose+0x10/0x10 [ 2694.911000] ? mark_lock+0xf5/0x2df0 [ 2694.911019] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2694.911040] ___sys_sendmsg+0xf3/0x170 [ 2694.911058] ? sendmsg_copy_msghdr+0x160/0x160 [ 2694.911077] ? __fget_files+0x2cf/0x520 [ 2694.911092] ? lock_downgrade+0x6d0/0x6d0 [ 2694.911113] ? lock_downgrade+0x6d0/0x6d0 [ 2694.911136] ? __fget_files+0x2f8/0x520 [ 2694.911159] ? __fget_light+0xea/0x290 [ 2694.911183] __sys_sendmmsg+0x195/0x470 [ 2694.911204] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2694.911220] ? lock_downgrade+0x6d0/0x6d0 [ 2694.911253] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2694.911274] ? wait_for_completion_io+0x270/0x270 [ 2694.911292] ? rcu_read_lock_any_held+0x75/0xa0 [ 2694.911304] ? vfs_write+0x354/0xb10 [ 2694.911320] ? fput_many+0x2f/0x1a0 [ 2694.911336] ? ksys_write+0x1a9/0x260 [ 2694.911352] ? __ia32_sys_read+0xb0/0xb0 [ 2694.911375] __x64_sys_sendmmsg+0x99/0x100 [ 2694.911390] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2694.911403] do_syscall_64+0x33/0x40 [ 2694.911417] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2694.911427] RIP: 0033:0x7f6f45c0ab19 [ 2694.911441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2694.911450] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2694.911466] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2694.911475] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2694.911484] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2694.911493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2694.911503] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 [ 2695.114099] FAULT_INJECTION: forcing a failure. [ 2695.114099] name failslab, interval 1, probability 0, space 0, times 0 [ 2695.158769] CPU: 0 PID: 11616 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2695.158782] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2695.158787] Call Trace: [ 2695.158807] dump_stack+0x107/0x167 [ 2695.160784] should_fail.cold+0x5/0xa [ 2695.161147] ? create_object.isra.0+0x3a/0xa20 [ 2695.161576] should_failslab+0x5/0x20 [ 2695.161939] kmem_cache_alloc+0x5b/0x310 [ 2695.162347] create_object.isra.0+0x3a/0xa20 [ 2695.162757] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2695.163232] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2695.163699] ? __ip_append_data+0x2930/0x3310 [ 2695.164130] __alloc_skb+0xb1/0x5b0 [ 2695.164481] __ip_append_data+0x2930/0x3310 [ 2695.164901] ? raw_destroy+0x30/0x30 [ 2695.165267] ? ip_finish_output+0x330/0x330 [ 2695.165676] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2695.166146] ? memcpy+0x39/0x60 [ 2695.166488] ? raw_destroy+0x30/0x30 [ 2695.166837] ip_append_data+0x114/0x1a0 [ 2695.167214] raw_sendmsg+0xaa6/0x29d0 [ 2695.167586] ? dst_output+0x170/0x170 [ 2695.167943] ? __lock_acquire+0x1657/0x5b00 [ 2695.168361] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2695.168860] ? SOFTIRQ_verbose+0x10/0x10 [ 2695.169235] ? create_object.isra.0+0x3ad/0xa20 [ 2695.169689] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2695.170168] ? find_held_lock+0x2c/0x110 [ 2695.170587] ? trace_hardirqs_on+0x5b/0x180 [ 2695.170995] ? dst_output+0x170/0x170 [ 2695.171350] inet_sendmsg+0x11d/0x140 [ 2695.171707] ? inet_send_prepare+0x540/0x540 [ 2695.172121] __sock_sendmsg+0x13c/0x190 [ 2695.172493] ____sys_sendmsg+0x334/0x870 [ 2695.172876] ? sock_write_iter+0x3d0/0x3d0 [ 2695.173271] ? do_recvmmsg+0x6d0/0x6d0 [ 2695.173641] ? SOFTIRQ_verbose+0x10/0x10 [ 2695.174020] ? mark_lock+0xf5/0x2df0 [ 2695.174393] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2695.174888] ___sys_sendmsg+0xf3/0x170 [ 2695.175266] ? sendmsg_copy_msghdr+0x160/0x160 [ 2695.175695] ? __fget_files+0x2cf/0x520 [ 2695.176068] ? lock_downgrade+0x6d0/0x6d0 [ 2695.176460] ? lock_downgrade+0x6d0/0x6d0 [ 2695.176852] ? __fget_files+0x2f8/0x520 [ 2695.177234] ? __fget_light+0xea/0x290 [ 2695.177611] __sys_sendmmsg+0x195/0x470 [ 2695.177989] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2695.178433] ? lock_downgrade+0x6d0/0x6d0 [ 2695.178845] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2695.179297] ? wait_for_completion_io+0x270/0x270 [ 2695.179748] ? rcu_read_lock_any_held+0x75/0xa0 [ 2695.180175] ? vfs_write+0x354/0xb10 [ 2695.180524] ? fput_many+0x2f/0x1a0 [ 2695.180860] ? ksys_write+0x1a9/0x260 [ 2695.181217] ? __ia32_sys_read+0xb0/0xb0 [ 2695.181606] __x64_sys_sendmmsg+0x99/0x100 [ 2695.182000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2695.182499] do_syscall_64+0x33/0x40 [ 2695.182848] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2695.183315] RIP: 0033:0x7f7b32767b19 [ 2695.183664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2695.185250] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2695.185952] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2695.186623] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2695.187265] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2695.187914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2695.188556] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:05:50 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001) 23:05:50 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000004) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:05:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:05:50 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001) 23:05:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) [ 2695.242370] FAULT_INJECTION: forcing a failure. [ 2695.242370] name failslab, interval 1, probability 0, space 0, times 0 [ 2695.243917] CPU: 1 PID: 11614 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2695.244562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2695.245317] Call Trace: [ 2695.245572] dump_stack+0x107/0x167 [ 2695.245929] should_fail.cold+0x5/0xa [ 2695.246315] ? create_object.isra.0+0x3a/0xa20 [ 2695.246757] should_failslab+0x5/0x20 [ 2695.247127] kmem_cache_alloc+0x5b/0x310 [ 2695.247510] create_object.isra.0+0x3a/0xa20 [ 2695.247931] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2695.248420] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2695.248886] ? __ip_append_data+0x2930/0x3310 [ 2695.249270] __alloc_skb+0xb1/0x5b0 [ 2695.249606] __ip_append_data+0x2930/0x3310 [ 2695.250018] ? raw_destroy+0x30/0x30 [ 2695.250388] ? ip_finish_output+0x330/0x330 [ 2695.250802] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2695.251270] ? memcpy+0x39/0x60 [ 2695.251584] ? raw_destroy+0x30/0x30 [ 2695.251945] ip_append_data+0x114/0x1a0 [ 2695.252328] raw_sendmsg+0xaa6/0x29d0 [ 2695.252701] ? dst_output+0x170/0x170 [ 2695.253069] ? __lock_acquire+0x1657/0x5b00 [ 2695.253496] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2695.253984] ? SOFTIRQ_verbose+0x10/0x10 [ 2695.254381] ? create_object.isra.0+0x3ad/0xa20 [ 2695.254829] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2695.255316] ? find_held_lock+0x2c/0x110 [ 2695.255712] ? trace_hardirqs_on+0x5b/0x180 [ 2695.256121] ? dst_output+0x170/0x170 [ 2695.256494] inet_sendmsg+0x11d/0x140 [ 2695.256854] ? inet_send_prepare+0x540/0x540 [ 2695.257277] __sock_sendmsg+0x13c/0x190 [ 2695.257653] ____sys_sendmsg+0x334/0x870 [ 2695.258035] ? sock_write_iter+0x3d0/0x3d0 [ 2695.258451] ? do_recvmmsg+0x6d0/0x6d0 [ 2695.258820] ? SOFTIRQ_verbose+0x10/0x10 [ 2695.259197] ? mark_lock+0xf5/0x2df0 [ 2695.259544] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2695.260037] ___sys_sendmsg+0xf3/0x170 [ 2695.260409] ? sendmsg_copy_msghdr+0x160/0x160 [ 2695.260845] ? __fget_files+0x2cf/0x520 [ 2695.261225] ? lock_downgrade+0x6d0/0x6d0 [ 2695.261617] ? lock_downgrade+0x6d0/0x6d0 [ 2695.262014] ? __fget_files+0x2f8/0x520 [ 2695.262422] ? __fget_light+0xea/0x290 [ 2695.262797] __sys_sendmmsg+0x195/0x470 [ 2695.263182] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2695.263582] ? lock_downgrade+0x6d0/0x6d0 [ 2695.263990] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2695.264451] ? wait_for_completion_io+0x270/0x270 [ 2695.264903] ? rcu_read_lock_any_held+0x75/0xa0 [ 2695.265334] ? vfs_write+0x354/0xb10 [ 2695.265684] ? fput_many+0x2f/0x1a0 [ 2695.266020] ? ksys_write+0x1a9/0x260 [ 2695.266400] ? __ia32_sys_read+0xb0/0xb0 [ 2695.266787] __x64_sys_sendmmsg+0x99/0x100 [ 2695.267177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2695.267651] do_syscall_64+0x33/0x40 [ 2695.267998] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2695.268466] RIP: 0033:0x7f6f45c0ab19 [ 2695.268818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2695.270476] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2695.271165] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2695.271808] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2695.272456] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2695.273109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2695.273754] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 23:05:50 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000001580), 0x76b3ab55, 0x107280) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000015c0)='net/ip_vs\x00') sendfile(r1, r2, &(0x7f0000001600)=0x5, 0x800) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x7, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r4, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) 23:05:50 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)}], 0x1}, 0x10044001) 23:05:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:05:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:06:05 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 63) 23:06:05 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 51) [ 2710.394146] FAULT_INJECTION: forcing a failure. [ 2710.394146] name failslab, interval 1, probability 0, space 0, times 0 [ 2710.416814] CPU: 1 PID: 11658 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2710.417499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2710.418315] Call Trace: [ 2710.418598] dump_stack+0x107/0x167 [ 2710.418982] should_fail.cold+0x5/0xa [ 2710.419386] ? create_object.isra.0+0x3a/0xa20 [ 2710.419866] should_failslab+0x5/0x20 [ 2710.420262] kmem_cache_alloc+0x5b/0x310 [ 2710.420690] create_object.isra.0+0x3a/0xa20 [ 2710.421149] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2710.421681] kmem_cache_alloc_node+0x169/0x330 [ 2710.422164] __alloc_skb+0x6d/0x5b0 [ 2710.422551] __ip_append_data+0x2930/0x3310 [ 2710.423010] ? raw_destroy+0x30/0x30 [ 2710.423403] ? ip_finish_output+0x330/0x330 [ 2710.423856] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2710.424385] ? memcpy+0x39/0x60 [ 2710.424733] ? raw_destroy+0x30/0x30 [ 2710.425123] ip_append_data+0x114/0x1a0 [ 2710.425542] raw_sendmsg+0xaa6/0x29d0 [ 2710.425949] ? dst_output+0x170/0x170 [ 2710.426350] ? __lock_acquire+0x1657/0x5b00 [ 2710.426813] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2710.427361] ? SOFTIRQ_verbose+0x10/0x10 [ 2710.427782] ? create_object.isra.0+0x3ad/0xa20 [ 2710.428282] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2710.428822] ? find_held_lock+0x2c/0x110 [ 2710.429259] ? trace_hardirqs_on+0x5b/0x180 [ 2710.429713] ? dst_output+0x170/0x170 23:06:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r2, &(0x7f0000000080)=""/65, 0x41) pread64(r2, &(0x7f0000000000)=""/4, 0x4, 0x7) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) 23:06:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:06:05 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)}], 0x1}, 0x10044001) 23:06:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:06:05 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000005) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:06:05 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x400]}, 0x8) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x9, &(0x7f00000008c0)=[{&(0x7f0000000240)="7e29ec8118eb8b3352cbce8b39ae1319fb765b631aad52cd26f4391164146b88b17c60d1a7f281e07e52dab0c3abfaad4a6d900b3aad73fb52835c4805a4fbd3a9", 0x41, 0x3}, {&(0x7f00000002c0)="f2fb7a57a6fe646a44bfda589fb4aa923f049d969c0b0f1b4e445a3d961373ddf2c9bd09fafd50ac873899e827e3f606ca39ad2e2b792f2b78058bd5863e8e47a956b666609ba71c65fb45383da5cbc5da5159fa94081347b69d1dd374ec30ca635c90c0e364702c3a3cad2e894c086c478a7bdac04dd2df566821d3520982589f2b60c0d02fa925cc1965154d90b61f2720ff5bad7272677f09717c834899ae0582648e361091b9e1692cdc7031f20c9327d8b81786", 0xb6, 0x200}, {&(0x7f0000000380)="f44d89918282c4047b619c9c3a4312e29c2ea78ee9a94172f6b0413ec312af55e658e5005bc1ba0582f936c374d750d51b654190c1dd0dd26288473c7b36a8f03620871dfcf6d7813663a82082b2e8b5b6daa3a3fc6e0c60b90a2515e5d99b4a7691cc0c", 0x64, 0x4}, {&(0x7f0000000400)="e42e383bd57e633190e8ae029d2ef9de9c62178b3480ff1f893d81424137407ff8c7bc30e9e9c1f5343e1c807f8dfb25ede44cd9e6dd573847fb18ae", 0x3c, 0x85}, {&(0x7f0000000440)="145a3aeb4fa31a7ac97c9a7e656c65e33d983c7defd7231320d50cb8f7cd356847e1c97019edc849fbaa5fdf273644dab4630b7e6fa65d940c2ce0c524379b79708d89519d95a0f5be7ceeb90d", 0x4d, 0x3}, {&(0x7f00000004c0)="bbd74e7f668c9d459c5f5804f7a0a7ea7e9a2bd09e3210d9b37fe3365cb30d5c75b3354e0dda56058b2ab49bdb2fd371a497597856d82df312029d38ab2ed01d31a00b40bda8467643dd5a749295e6a9a717b018ff604f29396d3e1b0881a92edcab81265c2f66892f932b69716acadd7146f7eb7e5bd40d8b21b91b53d03ee15494a9afe89c89e9d7108b8687035c678fe17d16eaf86a1e79121be7dce43b4dda3c81eac44dd57d8d99f76b26e1f4cfe30728ca590ef462ba89174640dd1843e64cf3c702011582a648626bae77456aa868074f8b2660e23f355b7d119d972fd0b495e5aef6ef971ccc010ab405bd061278baa44aaa4a", 0xf7, 0x5}, {&(0x7f00000005c0)="1e49350106cc30fa2a1c4359a59c07e8ea12b808aa2ed5cfad7198a5e1b0a4230068bbad43519db89726274335035e7cb36909e8259cce174bd388d3c463a15e9462a8b429125abf04096444f5aacbd2078834b7e0530b66ae1269cf424fc11b26692b6c1c2b7a9cfd896d4c50db4ab01092d81e1d78d69e6e299cdfe812c2566a269f2b4c79e4b41f48e4dcf6d4809461ffbf61670b382fd805207f00c1a70e21585e6662b4799219ecd061c8d2c1808838bbe79d3af4ea62bb5629e46dfdf2ed275a46d4073d95f2229af55e", 0xcd, 0x4}, {&(0x7f00000006c0)="ea22c0e09e7899317ce26bcd0182ecebaa3e900b1f289e701f443e07d1d64c513422e0d3e4d4e4f6b3de61ed4cb81fc083843e6fcec058a25e7cc016b86eed507ccf49ca798f88a83de3344366dae9dc1cca03e288a53ecd0d28926d93195584f73ffbfc97be5c6c1dea6669fb220f667c32c9aedc6f0b234c34f12aaf31f848aae78f487911a69304541902cac260823747dfa9ab4b72c2d339ef6906a404573cba5e8b76b0095183ac8e580c85450e6d2b522da3f953517ac44195c70ebef8a4a35212a8314b8214a20251b292a0cba125b37fa61ce27af392568eb8c96f0e7f6214c9bc53590e", 0xe8, 0x4}, {&(0x7f00000007c0)="3d0dfa6a5b73924e829255d7c8cf5e6e5131526312a37e445310b266e953c2959b98d2be4aca758824b803e6c73591646a019537fa29983bba57fc297a54ab13ce3bf96fb651726ddb62d9bf56bc30c0478adc9232d1894a70e99e59d85a9ebbe1177fd15f4d20d7eb13eb5b7aae0f42f02ba7f164c4c8db994a1fc6299c64ceea69a536ea94b48b5e76d2ef236f0d9bca0bc7dc13621680728829010f74e533fe15dae2b965bc6a4c2f0b3c041582cb0ab10d178d1a43f05373775defd2c15248a8d973f6b19df33f54e22941c1166e6baa3b439d002ccd17b41c23d5f86fc3e70bff62", 0xe4, 0xd5}], 0x4000, &(0x7f00000009c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x78, 0x36, 0x70, 0x67]}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}], [{@subj_type={'subj_type', 0x3d, '/proc/stat\x00'}}, {@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x94B*+'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@measure}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@subj_user={'subj_user', 0x3d, '/proc/sys/net/ipv4/tcp_wmem\x00'}}]}) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000b00)={{r0}, 0x9, &(0x7f0000000a80)=[0xcb1, 0x10001, 0xfaf8, 0x2, 0x8156, 0x80, 0x0, 0x7, 0xc317], 0xffff, 0x4, [0x4, 0x4, 0x7fffffff, 0x658]}) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) [ 2710.430118] inet_sendmsg+0x11d/0x140 [ 2710.446537] ? inet_send_prepare+0x540/0x540 [ 2710.447026] __sock_sendmsg+0x13c/0x190 [ 2710.447466] ____sys_sendmsg+0x334/0x870 [ 2710.447917] ? sock_write_iter+0x3d0/0x3d0 [ 2710.448364] ? do_recvmmsg+0x6d0/0x6d0 [ 2710.448789] ? SOFTIRQ_verbose+0x10/0x10 [ 2710.449237] ? mark_lock+0xf5/0x2df0 [ 2710.449654] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2710.450217] ___sys_sendmsg+0xf3/0x170 [ 2710.450645] ? sendmsg_copy_msghdr+0x160/0x160 [ 2710.451142] ? __fget_files+0x2cf/0x520 [ 2710.451596] ? lock_downgrade+0x6d0/0x6d0 [ 2710.452072] ? lock_downgrade+0x6d0/0x6d0 [ 2710.452537] ? __fget_files+0x2f8/0x520 [ 2710.452979] ? __fget_light+0xea/0x290 [ 2710.453418] __sys_sendmmsg+0x195/0x470 [ 2710.453868] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2710.454341] ? lock_downgrade+0x6d0/0x6d0 [ 2710.454804] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2710.455328] ? wait_for_completion_io+0x270/0x270 [ 2710.455852] ? rcu_read_lock_any_held+0x75/0xa0 [ 2710.456360] ? vfs_write+0x354/0xb10 [ 2710.456762] ? fput_many+0x2f/0x1a0 [ 2710.457182] ? ksys_write+0x1a9/0x260 [ 2710.457607] ? __ia32_sys_read+0xb0/0xb0 [ 2710.458067] __x64_sys_sendmmsg+0x99/0x100 [ 2710.458524] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2710.459094] do_syscall_64+0x33/0x40 [ 2710.459506] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2710.460058] RIP: 0033:0x7f7b32767b19 [ 2710.460467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2710.462413] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2710.463255] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2710.464049] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2710.464828] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2710.465590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2710.466355] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 [ 2710.495029] tmpfs: Bad value for 'nr_inodes' 23:06:05 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000006) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) [ 2710.525221] tmpfs: Unknown parameter '”b¨´)Z¿ dDõªËÒˆ4·àS f®iÏBOÁ&i+l+zœý‰mLPÛJ°’ØxÖžn)œßèÂVj&Ÿ+Lyä´HäÜöÔ€”aÿ¿ag 8/Ø ' [ 2710.527015] FAULT_INJECTION: forcing a failure. [ 2710.527015] name failslab, interval 1, probability 0, space 0, times 0 [ 2710.529421] CPU: 1 PID: 11660 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2710.530184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2710.530970] Call Trace: [ 2710.531223] dump_stack+0x107/0x167 [ 2710.531568] should_fail.cold+0x5/0xa [ 2710.531929] ? create_object.isra.0+0x3a/0xa20 [ 2710.532356] should_failslab+0x5/0x20 [ 2710.532715] kmem_cache_alloc+0x5b/0x310 [ 2710.533099] create_object.isra.0+0x3a/0xa20 [ 2710.533510] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2710.533987] kmem_cache_alloc_node+0x169/0x330 [ 2710.534436] __alloc_skb+0x6d/0x5b0 [ 2710.534788] __ip_append_data+0x2930/0x3310 [ 2710.535200] ? trace_hardirqs_on+0x5b/0x180 [ 2710.535602] ? raw_destroy+0x30/0x30 [ 2710.535962] ? ip_finish_output+0x330/0x330 [ 2710.536362] ? memcpy+0x29/0x60 [ 2710.536676] ? memcpy+0x39/0x60 [ 2710.536993] ? raw_destroy+0x30/0x30 [ 2710.537345] ip_append_data+0x114/0x1a0 [ 2710.537725] raw_sendmsg+0xaa6/0x29d0 [ 2710.538099] ? dst_output+0x170/0x170 [ 2710.538480] ? __lock_acquire+0x1657/0x5b00 [ 2710.538951] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2710.539520] ? SOFTIRQ_verbose+0x10/0x10 [ 2710.539970] ? create_object.isra.0+0x3ad/0xa20 [ 2710.540480] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2710.541024] ? find_held_lock+0x2c/0x110 [ 2710.541470] ? trace_hardirqs_on+0x5b/0x180 [ 2710.541955] ? dst_output+0x170/0x170 [ 2710.542385] inet_sendmsg+0x11d/0x140 [ 2710.542792] ? inet_send_prepare+0x540/0x540 [ 2710.543275] __sock_sendmsg+0x13c/0x190 [ 2710.543701] ____sys_sendmsg+0x334/0x870 [ 2710.544145] ? sock_write_iter+0x3d0/0x3d0 [ 2710.544617] ? do_recvmmsg+0x6d0/0x6d0 [ 2710.545056] ? SOFTIRQ_verbose+0x10/0x10 [ 2710.545483] ? mark_lock+0xf5/0x2df0 [ 2710.545901] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2710.546474] ___sys_sendmsg+0xf3/0x170 [ 2710.546894] ? sendmsg_copy_msghdr+0x160/0x160 [ 2710.547404] ? __fget_files+0x2cf/0x520 [ 2710.547842] ? lock_downgrade+0x6d0/0x6d0 [ 2710.548299] ? lock_downgrade+0x6d0/0x6d0 [ 2710.548768] ? __fget_files+0x2f8/0x520 [ 2710.549215] ? __fget_light+0xea/0x290 [ 2710.549645] __sys_sendmmsg+0x195/0x470 [ 2710.550083] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2710.550557] ? lock_downgrade+0x6d0/0x6d0 [ 2710.551018] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2710.551542] ? wait_for_completion_io+0x270/0x270 [ 2710.552067] ? rcu_read_lock_any_held+0x75/0xa0 [ 2710.552575] ? vfs_write+0x354/0xb10 [ 2710.552993] ? fput_many+0x2f/0x1a0 [ 2710.553356] ? ksys_write+0x1a9/0x260 [ 2710.553713] ? __ia32_sys_read+0xb0/0xb0 [ 2710.554100] __x64_sys_sendmmsg+0x99/0x100 [ 2710.554500] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2710.554976] do_syscall_64+0x33/0x40 [ 2710.555328] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2710.555802] RIP: 0033:0x7f6f45c0ab19 [ 2710.556154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2710.557806] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2710.558516] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2710.559160] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2710.559812] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2710.560462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2710.561110] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 23:06:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:06:05 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x404d8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f00000001c0)={0x4e, 0x28, [0x1, 0x65be, 0x0, 0x7f], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 23:06:20 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 52) 23:06:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:06:20 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3a3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:06:20 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000007) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:06:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, 0x0, 0x10044001) 23:06:20 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 64) 23:06:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4839, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_config_ext={0x40, 0x9}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x4, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r3, 0x2) ioctl$CDROM_DEBUG(r3, 0x5330, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) 23:06:20 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)}], 0x1}, 0x10044001) [ 2724.937396] FAULT_INJECTION: forcing a failure. [ 2724.937396] name failslab, interval 1, probability 0, space 0, times 0 [ 2724.938895] CPU: 1 PID: 11707 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2724.939501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2724.940236] Call Trace: [ 2724.940487] dump_stack+0x107/0x167 [ 2724.940818] should_fail.cold+0x5/0xa [ 2724.941171] should_failslab+0x5/0x20 [ 2724.941519] __kmalloc_node_track_caller+0x74/0x3b0 [ 2724.941966] ? __ip_append_data+0x2930/0x3310 [ 2724.942382] __alloc_skb+0xb1/0x5b0 [ 2724.942723] __ip_append_data+0x2930/0x3310 [ 2724.943102] ? raw_destroy+0x30/0x30 [ 2724.943430] ? ip_finish_output+0x330/0x330 [ 2724.943800] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2724.944231] ? memcpy+0x39/0x60 [ 2724.944519] ? raw_destroy+0x30/0x30 [ 2724.944839] ip_append_data+0x114/0x1a0 [ 2724.945186] raw_sendmsg+0xaa6/0x29d0 [ 2724.945524] ? dst_output+0x170/0x170 [ 2724.945851] ? __lock_acquire+0x1657/0x5b00 [ 2724.946232] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2724.946691] ? SOFTIRQ_verbose+0x10/0x10 [ 2724.947044] ? create_object.isra.0+0x3ad/0xa20 [ 2724.947453] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2724.947910] ? find_held_lock+0x2c/0x110 [ 2724.948269] ? trace_hardirqs_on+0x5b/0x180 [ 2724.948652] ? dst_output+0x170/0x170 [ 2724.948990] inet_sendmsg+0x11d/0x140 [ 2724.949325] ? inet_send_prepare+0x540/0x540 [ 2724.949721] __sock_sendmsg+0x13c/0x190 [ 2724.950085] ____sys_sendmsg+0x334/0x870 [ 2724.950450] ? sock_write_iter+0x3d0/0x3d0 [ 2724.950828] ? do_recvmmsg+0x6d0/0x6d0 [ 2724.951172] ? SOFTIRQ_verbose+0x10/0x10 [ 2724.951531] ? mark_lock+0xf5/0x2df0 [ 2724.951865] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2724.952328] ___sys_sendmsg+0xf3/0x170 [ 2724.952682] ? sendmsg_copy_msghdr+0x160/0x160 [ 2724.953100] ? __fget_files+0x2cf/0x520 [ 2724.953461] ? lock_downgrade+0x6d0/0x6d0 [ 2724.953838] ? lock_downgrade+0x6d0/0x6d0 [ 2724.954206] ? __fget_files+0x2f8/0x520 [ 2724.954595] ? __fget_light+0xea/0x290 [ 2724.954945] __sys_sendmmsg+0x195/0x470 [ 2724.955290] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2724.955674] ? lock_downgrade+0x6d0/0x6d0 [ 2724.956055] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2724.956529] ? wait_for_completion_io+0x270/0x270 [ 2724.956934] FAULT_INJECTION: forcing a failure. [ 2724.956934] name failslab, interval 1, probability 0, space 0, times 0 [ 2724.957884] ? rcu_read_lock_any_held+0x75/0xa0 [ 2724.958276] ? vfs_write+0x354/0xb10 [ 2724.958622] ? fput_many+0x2f/0x1a0 [ 2724.958943] ? ksys_write+0x1a9/0x260 [ 2724.959270] ? __ia32_sys_read+0xb0/0xb0 [ 2724.959633] __x64_sys_sendmmsg+0x99/0x100 [ 2724.960004] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2724.960442] do_syscall_64+0x33/0x40 [ 2724.960781] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2724.961217] RIP: 0033:0x7f7b32767b19 [ 2724.961543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2724.963134] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2724.963801] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2724.964404] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2724.965025] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2724.965639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2724.966247] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 [ 2724.966913] CPU: 0 PID: 11704 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2724.967676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2724.968367] Call Trace: [ 2724.968675] dump_stack+0x107/0x167 [ 2724.969000] should_fail.cold+0x5/0xa [ 2724.969333] should_failslab+0x5/0x20 [ 2724.969713] __kmalloc_node_track_caller+0x74/0x3b0 [ 2724.970139] ? __ip_append_data+0x2930/0x3310 [ 2724.970606] __alloc_skb+0xb1/0x5b0 [ 2724.970920] __ip_append_data+0x2930/0x3310 [ 2724.971297] ? raw_destroy+0x30/0x30 [ 2724.971701] ? ip_finish_output+0x330/0x330 [ 2724.972072] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2724.972559] ? memcpy+0x39/0x60 [ 2724.972848] ? raw_destroy+0x30/0x30 [ 2724.973164] ip_append_data+0x114/0x1a0 [ 2724.973561] raw_sendmsg+0xaa6/0x29d0 [ 2724.973914] ? dst_output+0x170/0x170 [ 2724.974244] ? __lock_acquire+0x1657/0x5b00 [ 2724.974703] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2724.975144] ? SOFTIRQ_verbose+0x10/0x10 [ 2724.975557] ? create_object.isra.0+0x3ad/0xa20 [ 2724.975979] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2724.976411] ? find_held_lock+0x2c/0x110 [ 2724.976824] ? trace_hardirqs_on+0x5b/0x180 [ 2724.977191] ? dst_output+0x170/0x170 [ 2724.977569] inet_sendmsg+0x11d/0x140 [ 2724.977893] ? inet_send_prepare+0x540/0x540 [ 2724.978264] __sock_sendmsg+0x13c/0x190 [ 2724.978683] ____sys_sendmsg+0x334/0x870 [ 2724.979034] ? sock_write_iter+0x3d0/0x3d0 [ 2724.979392] ? do_recvmmsg+0x6d0/0x6d0 [ 2724.979803] ? SOFTIRQ_verbose+0x10/0x10 [ 2724.980148] ? mark_lock+0xf5/0x2df0 [ 2724.980468] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2724.980970] ___sys_sendmsg+0xf3/0x170 [ 2724.981302] ? sendmsg_copy_msghdr+0x160/0x160 [ 2724.981745] ? __fget_files+0x2cf/0x520 [ 2724.982084] ? lock_downgrade+0x6d0/0x6d0 [ 2724.982471] ? lock_downgrade+0x6d0/0x6d0 [ 2724.982881] ? __fget_files+0x2f8/0x520 [ 2724.983226] ? __fget_light+0xea/0x290 [ 2724.983640] __sys_sendmmsg+0x195/0x470 [ 2724.983982] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2724.984345] ? lock_downgrade+0x6d0/0x6d0 [ 2724.984774] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2724.985184] ? wait_for_completion_io+0x270/0x270 [ 2724.985645] ? rcu_read_lock_any_held+0x75/0xa0 [ 2724.986035] ? vfs_write+0x354/0xb10 [ 2724.986350] ? fput_many+0x2f/0x1a0 [ 2724.986742] ? ksys_write+0x1a9/0x260 [ 2724.987069] ? __ia32_sys_read+0xb0/0xb0 [ 2724.987419] __x64_sys_sendmmsg+0x99/0x100 [ 2724.987853] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2724.988288] do_syscall_64+0x33/0x40 [ 2724.988678] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2724.989111] RIP: 0033:0x7f6f45c0ab19 [ 2724.989427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2724.991074] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2724.991788] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2724.992390] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2724.993041] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2724.993690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 23:06:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000180)={0x1, 0x9, 0x15, &(0x7f0000000000)=""/21}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) [ 2724.994302] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 23:06:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:06:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, 0x0, 0x10044001) 23:06:20 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':', 0x1}], 0x1}, 0x10044001) 23:06:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:06:20 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000009) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:06:20 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000004, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r5, 0x2) write$binfmt_elf64(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c4608d402030600000000000000030003000100000024020000000000004000000000000000ee0100000000000001000000090038000100619d81009603040000000900000004000000000000000300000000000000ff070000000000000200000000000000ff7f000000000000000000000000000034ed00a685d190c264cba23de84ff1c2e01ca06eea907d1b3b33337b7cd9a48173cdc49ce429e07a8e94cc5a2034c570b312610d7ae753154b33f3a100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/1716], 0x6b4) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r6 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) mknodat$loop(r1, &(0x7f0000000180)='./file0\x00', 0x100, 0x1) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:06:34 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x4}, 0x80280, 0x80000000007, 0x2, 0x0, 0x374ec00000002, 0x9, 0x0, 0x0, 0x3f, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r3 = inotify_init() ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000000)=0x8) 23:06:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r2, 0x2) ioctl$TCFLSH(r2, 0x540b, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:06:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x8000000a) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:06:34 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 65) 23:06:34 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':', 0x1}], 0x1}, 0x10044001) 23:06:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, 0x0, 0x10044001) 23:06:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:06:34 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 53) [ 2739.424407] FAULT_INJECTION: forcing a failure. [ 2739.424407] name failslab, interval 1, probability 0, space 0, times 0 [ 2739.425801] CPU: 1 PID: 11747 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2739.426354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2739.427074] Call Trace: [ 2739.427307] dump_stack+0x107/0x167 [ 2739.427621] should_fail.cold+0x5/0xa [ 2739.427936] ? create_object.isra.0+0x3a/0xa20 [ 2739.428304] should_failslab+0x5/0x20 [ 2739.428619] kmem_cache_alloc+0x5b/0x310 [ 2739.428968] create_object.isra.0+0x3a/0xa20 [ 2739.429334] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2739.429768] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2739.430193] ? __ip_append_data+0x2930/0x3310 [ 2739.430584] __alloc_skb+0xb1/0x5b0 [ 2739.430888] __ip_append_data+0x2930/0x3310 [ 2739.431261] ? raw_destroy+0x30/0x30 [ 2739.431585] ? ip_finish_output+0x330/0x330 [ 2739.431956] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2739.432381] ? memcpy+0x39/0x60 [ 2739.432672] ? raw_destroy+0x30/0x30 [ 2739.432973] ip_append_data+0x114/0x1a0 [ 2739.433306] raw_sendmsg+0xaa6/0x29d0 [ 2739.433648] ? dst_output+0x170/0x170 [ 2739.433959] ? __lock_acquire+0x1657/0x5b00 [ 2739.434112] FAULT_INJECTION: forcing a failure. [ 2739.434112] name failslab, interval 1, probability 0, space 0, times 0 [ 2739.434320] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2739.434339] ? SOFTIRQ_verbose+0x10/0x10 [ 2739.436060] ? create_object.isra.0+0x3ad/0xa20 [ 2739.436446] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2739.436872] ? find_held_lock+0x2c/0x110 [ 2739.437212] ? trace_hardirqs_on+0x5b/0x180 [ 2739.437574] ? dst_output+0x170/0x170 [ 2739.437892] inet_sendmsg+0x11d/0x140 [ 2739.438199] ? inet_send_prepare+0x540/0x540 [ 2739.438578] __sock_sendmsg+0x13c/0x190 [ 2739.438907] ____sys_sendmsg+0x334/0x870 [ 2739.439238] ? sock_write_iter+0x3d0/0x3d0 [ 2739.439590] ? do_recvmmsg+0x6d0/0x6d0 [ 2739.439913] ? SOFTIRQ_verbose+0x10/0x10 [ 2739.440241] ? mark_lock+0xf5/0x2df0 [ 2739.440555] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2739.440987] ___sys_sendmsg+0xf3/0x170 [ 2739.441304] ? sendmsg_copy_msghdr+0x160/0x160 [ 2739.441697] ? __fget_files+0x2cf/0x520 [ 2739.442019] ? lock_downgrade+0x6d0/0x6d0 [ 2739.442358] ? lock_downgrade+0x6d0/0x6d0 [ 2739.442736] ? __fget_files+0x2f8/0x520 [ 2739.443064] ? __fget_light+0xea/0x290 [ 2739.443385] __sys_sendmmsg+0x195/0x470 [ 2739.443733] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2739.444081] ? lock_downgrade+0x6d0/0x6d0 [ 2739.444431] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2739.444840] ? wait_for_completion_io+0x270/0x270 [ 2739.445232] ? rcu_read_lock_any_held+0x75/0xa0 [ 2739.445620] ? vfs_write+0x354/0xb10 [ 2739.445925] ? fput_many+0x2f/0x1a0 [ 2739.446220] ? ksys_write+0x1a9/0x260 [ 2739.446550] ? __ia32_sys_read+0xb0/0xb0 [ 2739.446896] __x64_sys_sendmmsg+0x99/0x100 [ 2739.447238] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2739.447666] do_syscall_64+0x33/0x40 [ 2739.447968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2739.448379] RIP: 0033:0x7f7b32767b19 [ 2739.448700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2739.450170] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2739.450810] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2739.451376] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2739.451962] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2739.452538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2739.453114] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 [ 2739.453726] CPU: 0 PID: 11756 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2739.454343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2739.455060] Call Trace: [ 2739.455295] dump_stack+0x107/0x167 [ 2739.455618] should_fail.cold+0x5/0xa [ 2739.455952] ? create_object.isra.0+0x3a/0xa20 [ 2739.456344] should_failslab+0x5/0x20 [ 2739.456671] kmem_cache_alloc+0x5b/0x310 [ 2739.457020] create_object.isra.0+0x3a/0xa20 [ 2739.457395] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2739.457830] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2739.458260] ? __ip_append_data+0x2930/0x3310 [ 2739.458660] __alloc_skb+0xb1/0x5b0 [ 2739.458974] __ip_append_data+0x2930/0x3310 [ 2739.459351] ? raw_destroy+0x30/0x30 [ 2739.459678] ? ip_finish_output+0x330/0x330 [ 2739.460043] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2739.460473] ? memcpy+0x39/0x60 [ 2739.460757] ? raw_destroy+0x30/0x30 [ 2739.461073] ip_append_data+0x114/0x1a0 [ 2739.461423] raw_sendmsg+0xaa6/0x29d0 [ 2739.461756] ? dst_output+0x170/0x170 [ 2739.462080] ? __lock_acquire+0x1657/0x5b00 [ 2739.462469] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2739.462915] ? SOFTIRQ_verbose+0x10/0x10 [ 2739.463257] ? create_object.isra.0+0x3ad/0xa20 [ 2739.463661] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2739.464092] ? find_held_lock+0x2c/0x110 [ 2739.464454] ? trace_hardirqs_on+0x5b/0x180 [ 2739.464823] ? dst_output+0x170/0x170 [ 2739.465149] inet_sendmsg+0x11d/0x140 [ 2739.465473] ? inet_send_prepare+0x540/0x540 [ 2739.465864] __sock_sendmsg+0x13c/0x190 [ 2739.466219] ____sys_sendmsg+0x334/0x870 [ 2739.466597] ? sock_write_iter+0x3d0/0x3d0 [ 2739.466978] ? do_recvmmsg+0x6d0/0x6d0 [ 2739.467331] ? SOFTIRQ_verbose+0x10/0x10 [ 2739.467676] ? mark_lock+0xf5/0x2df0 [ 2739.467994] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2739.468438] ___sys_sendmsg+0xf3/0x170 [ 2739.468770] ? sendmsg_copy_msghdr+0x160/0x160 [ 2739.469159] ? __fget_files+0x2cf/0x520 [ 2739.469496] ? lock_downgrade+0x6d0/0x6d0 [ 2739.469850] ? lock_downgrade+0x6d0/0x6d0 [ 2739.470206] ? __fget_files+0x2f8/0x520 [ 2739.470575] ? __fget_light+0xea/0x290 [ 2739.470911] __sys_sendmmsg+0x195/0x470 [ 2739.471249] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2739.471612] ? lock_downgrade+0x6d0/0x6d0 [ 2739.471975] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2739.472382] ? wait_for_completion_io+0x270/0x270 [ 2739.472789] ? rcu_read_lock_any_held+0x75/0xa0 [ 2739.473177] ? vfs_write+0x354/0xb10 [ 2739.473493] ? fput_many+0x2f/0x1a0 [ 2739.473801] ? ksys_write+0x1a9/0x260 [ 2739.474121] ? __ia32_sys_read+0xb0/0xb0 [ 2739.474477] __x64_sys_sendmmsg+0x99/0x100 [ 2739.474840] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2739.475270] do_syscall_64+0x33/0x40 [ 2739.475585] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2739.476031] RIP: 0033:0x7f6f45c0ab19 [ 2739.476367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 23:06:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001) [ 2739.477934] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2739.478582] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2739.479173] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2739.479766] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2739.480356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2739.480947] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 23:06:34 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':', 0x1}], 0x1}, 0x10044001) 23:06:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000010) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:06:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001) 23:06:34 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000180)=""/133) r3 = socket$inet6_udp(0xa, 0x2, 0x0) lseek(r3, 0x9, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0xc0, 0x0) sendfile(r4, r5, &(0x7f0000000280)=0x3ff, 0x4) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) 23:06:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}, 0x1, 0x0, 0x0, 0x200400d0}, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/65, 0x41) read(0xffffffffffffffff, &(0x7f0000000240)=""/164, 0xa4) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r5, 0x2) ioctl$VT_SETMODE(r5, 0x5602, &(0x7f0000000180)={0xf3, 0x5, 0x1ff, 0x0, 0x1ff}) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:06:51 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0x2}], 0x1}, 0x0) 23:06:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:06:51 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000002c0)=""/90, 0x5a}, {&(0x7f0000000340)=""/13, 0xd}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000000440)=""/79, 0x4f}], 0x6, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x2103) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) fcntl$setstatus(r6, 0x4, 0x42000) ioctl$TIOCL_SETVESABLANK(r5, 0x541c, &(0x7f0000000600)) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) close(0xffffffffffffffff) 23:06:51 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000063) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:06:51 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 66) 23:06:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001) 23:06:51 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 54) 23:06:51 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000001) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x143100, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000200)=0x5a) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r5, 0x2) linkat(r5, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x600) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="012d3f027f98"], 0x6) syz_open_pts(r1, 0x4200) r6 = signalfd4(r5, &(0x7f0000000280)={[0x4]}, 0x8, 0x800) write$tcp_mem(r5, &(0x7f00000002c0)={0x0, 0x20, 0xa7d8, 0x20, 0x14}, 0x48) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000180)={0x24, 0x8, 0x4, 0x81, 0x9, "00805ae3988e0bb6"}) signalfd(r4, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) [ 2756.810819] FAULT_INJECTION: forcing a failure. [ 2756.810819] name failslab, interval 1, probability 0, space 0, times 0 [ 2756.812027] CPU: 1 PID: 11794 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2756.812688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2756.813467] Call Trace: [ 2756.813738] dump_stack+0x107/0x167 [ 2756.814097] should_fail.cold+0x5/0xa [ 2756.814475] ? __alloc_skb+0x6d/0x5b0 [ 2756.814886] should_failslab+0x5/0x20 [ 2756.815271] kmem_cache_alloc_node+0x55/0x330 [ 2756.815734] __alloc_skb+0x6d/0x5b0 [ 2756.816089] __ip_append_data+0x2930/0x3310 [ 2756.816524] ? raw_destroy+0x30/0x30 [ 2756.816900] ? ip_finish_output+0x330/0x330 [ 2756.817320] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2756.817830] ? memcpy+0x39/0x60 [ 2756.818169] ? raw_destroy+0x30/0x30 23:06:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) [ 2756.818533] ip_append_data+0x114/0x1a0 [ 2756.818956] raw_sendmsg+0xaa6/0x29d0 [ 2756.819352] ? dst_output+0x170/0x170 [ 2756.819739] ? __lock_acquire+0x1657/0x5b00 [ 2756.820180] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2756.820684] ? SOFTIRQ_verbose+0x10/0x10 [ 2756.821073] ? create_object.isra.0+0x3ad/0xa20 [ 2756.821547] ? selinux_socket_post_create+0x7f0/0x7f0 23:06:52 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0x2}], 0x1}, 0x0) [ 2756.822041] ? find_held_lock+0x2c/0x110 [ 2756.822736] ? trace_hardirqs_on+0x5b/0x180 [ 2756.823155] ? dst_output+0x170/0x170 [ 2756.823531] inet_sendmsg+0x11d/0x140 [ 2756.823900] ? inet_send_prepare+0x540/0x540 [ 2756.824343] __sock_sendmsg+0x13c/0x190 [ 2756.824748] ____sys_sendmsg+0x334/0x870 [ 2756.825146] ? sock_write_iter+0x3d0/0x3d0 [ 2756.825549] ? do_recvmmsg+0x6d0/0x6d0 [ 2756.826028] ? SOFTIRQ_verbose+0x10/0x10 [ 2756.826420] ? mark_lock+0xf5/0x2df0 [ 2756.826804] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2756.827316] ___sys_sendmsg+0xf3/0x170 [ 2756.827697] ? sendmsg_copy_msghdr+0x160/0x160 [ 2756.828143] ? __fget_files+0x2cf/0x520 [ 2756.828527] ? lock_downgrade+0x6d0/0x6d0 [ 2756.828935] ? lock_downgrade+0x6d0/0x6d0 [ 2756.829345] ? __fget_files+0x2f8/0x520 [ 2756.829740] ? __fget_light+0xea/0x290 [ 2756.830125] __sys_sendmmsg+0x195/0x470 [ 2756.830517] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2756.830968] ? lock_downgrade+0x6d0/0x6d0 [ 2756.831389] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2756.831856] ? wait_for_completion_io+0x270/0x270 [ 2756.832325] ? rcu_read_lock_any_held+0x75/0xa0 [ 2756.832771] ? vfs_write+0x354/0xb10 [ 2756.833133] ? fput_many+0x2f/0x1a0 [ 2756.833488] ? ksys_write+0x1a9/0x260 [ 2756.833859] ? __ia32_sys_read+0xb0/0xb0 [ 2756.834262] __x64_sys_sendmmsg+0x99/0x100 [ 2756.834695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2756.835194] do_syscall_64+0x33/0x40 [ 2756.835558] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2756.836055] RIP: 0033:0x7f7b32767b19 [ 2756.836409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2756.837910] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2756.838457] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2756.839026] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2756.839537] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2756.840062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2756.840569] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 [ 2756.858131] FAULT_INJECTION: forcing a failure. [ 2756.858131] name failslab, interval 1, probability 0, space 0, times 0 [ 2756.859297] CPU: 1 PID: 11796 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2756.859800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2756.860408] Call Trace: [ 2756.860605] dump_stack+0x107/0x167 [ 2756.860893] should_fail.cold+0x5/0xa [ 2756.861173] ? __alloc_skb+0x6d/0x5b0 [ 2756.861457] should_failslab+0x5/0x20 [ 2756.861734] kmem_cache_alloc_node+0x55/0x330 [ 2756.862095] __alloc_skb+0x6d/0x5b0 [ 2756.862385] __ip_append_data+0x2930/0x3310 [ 2756.862741] ? raw_destroy+0x30/0x30 [ 2756.863039] ? ip_finish_output+0x330/0x330 [ 2756.863353] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2756.863723] ? memcpy+0x39/0x60 [ 2756.863974] ? raw_destroy+0x30/0x30 [ 2756.864247] ip_append_data+0x114/0x1a0 [ 2756.864546] raw_sendmsg+0xaa6/0x29d0 [ 2756.864848] ? dst_output+0x170/0x170 [ 2756.865142] ? __lock_acquire+0x1657/0x5b00 [ 2756.865466] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2756.865855] ? SOFTIRQ_verbose+0x10/0x10 [ 2756.866150] ? create_object.isra.0+0x3ad/0xa20 [ 2756.866496] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2756.866911] ? find_held_lock+0x2c/0x110 [ 2756.867225] ? dst_output+0x170/0x170 [ 2756.867504] inet_sendmsg+0x11d/0x140 [ 2756.867786] ? inet_send_prepare+0x540/0x540 [ 2756.868113] __sock_sendmsg+0x13c/0x190 [ 2756.868403] ____sys_sendmsg+0x334/0x870 [ 2756.868700] ? sock_write_iter+0x3d0/0x3d0 [ 2756.869027] ? do_recvmmsg+0x6d0/0x6d0 [ 2756.869312] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2756.869693] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2756.870096] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2756.870493] ___sys_sendmsg+0xf3/0x170 [ 2756.870795] ? sendmsg_copy_msghdr+0x160/0x160 [ 2756.871142] ? __fget_files+0x2cf/0x520 [ 2756.871433] ? lock_downgrade+0x6d0/0x6d0 [ 2756.871744] ? __fget_files+0x2f8/0x520 [ 2756.872050] ? __fget_light+0xea/0x290 [ 2756.872338] __sys_sendmmsg+0x195/0x470 [ 2756.872640] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2756.872976] ? lock_downgrade+0x6d0/0x6d0 [ 2756.873290] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2756.873640] ? wait_for_completion_io+0x270/0x270 [ 2756.874005] ? ksys_write+0x181/0x260 [ 2756.874297] ? fput_many+0x2f/0x1a0 [ 2756.874587] ? ksys_write+0x1a9/0x260 [ 2756.874909] ? __ia32_sys_read+0xb0/0xb0 [ 2756.875213] __x64_sys_sendmmsg+0x99/0x100 [ 2756.875520] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2756.875901] do_syscall_64+0x33/0x40 [ 2756.876178] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2756.876550] RIP: 0033:0x7f6f45c0ab19 [ 2756.876828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2756.878157] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2756.878730] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2756.879248] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2756.879762] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2756.880279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2756.880813] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 [ 2756.881059] tmpfs: Unknown parameter ' [ 2756.881059] ' [ 2756.934042] tmpfs: Unknown parameter ' [ 2756.934042] ' 23:06:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001) 23:06:52 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r2, &(0x7f0000000080)=""/65, 0x41) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000005, 0x20010, r2, 0x93cdb000) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) 23:06:52 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0x2}], 0x1}, 0x0) 23:06:52 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 55) 23:06:52 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800001b8) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:06:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) [ 2756.990049] FAULT_INJECTION: forcing a failure. [ 2756.990049] name failslab, interval 1, probability 0, space 0, times 0 [ 2756.991257] CPU: 1 PID: 11816 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2756.991841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2756.992545] Call Trace: [ 2756.992790] dump_stack+0x107/0x167 [ 2756.993104] should_fail.cold+0x5/0xa [ 2756.993433] ? create_object.isra.0+0x3a/0xa20 [ 2756.993825] should_failslab+0x5/0x20 [ 2756.994151] kmem_cache_alloc+0x5b/0x310 [ 2756.994502] create_object.isra.0+0x3a/0xa20 [ 2756.994908] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2756.995338] kmem_cache_alloc_node+0x169/0x330 [ 2756.995731] __alloc_skb+0x6d/0x5b0 [ 2756.996050] __ip_append_data+0x2930/0x3310 [ 2756.996431] ? raw_destroy+0x30/0x30 [ 2756.996755] ? ip_finish_output+0x330/0x330 [ 2756.997119] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2756.997546] ? memcpy+0x39/0x60 [ 2756.997830] ? raw_destroy+0x30/0x30 [ 2756.998145] ip_append_data+0x114/0x1a0 [ 2756.998491] raw_sendmsg+0xaa6/0x29d0 [ 2756.998854] ? dst_output+0x170/0x170 [ 2756.999179] ? __lock_acquire+0x1657/0x5b00 [ 2756.999564] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2757.000006] ? SOFTIRQ_verbose+0x10/0x10 [ 2757.000350] ? create_object.isra.0+0x3ad/0xa20 [ 2757.000758] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2757.001192] ? find_held_lock+0x2c/0x110 [ 2757.001541] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2757.001988] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2757.002456] ? dst_output+0x170/0x170 [ 2757.002809] inet_sendmsg+0x11d/0x140 [ 2757.003133] ? inet_send_prepare+0x540/0x540 [ 2757.003505] __sock_sendmsg+0x13c/0x190 [ 2757.003846] ____sys_sendmsg+0x334/0x870 [ 2757.004193] ? sock_write_iter+0x3d0/0x3d0 [ 2757.004553] ? do_recvmmsg+0x6d0/0x6d0 [ 2757.004887] ? SOFTIRQ_verbose+0x10/0x10 [ 2757.005241] ___sys_sendmsg+0xf3/0x170 [ 2757.005580] ? sendmsg_copy_msghdr+0x160/0x160 [ 2757.005972] ? __fget_files+0x2cf/0x520 [ 2757.006310] ? lock_downgrade+0x6d0/0x6d0 [ 2757.006704] ? __fget_files+0x2f8/0x520 [ 2757.007050] ? __fget_light+0xea/0x290 [ 2757.007393] __sys_sendmmsg+0x195/0x470 [ 2757.007736] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2757.008119] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2757.008487] ? clockevents_program_event+0x131/0x360 [ 2757.008919] ? tick_program_event+0xa8/0x140 [ 2757.009296] ? hrtimer_interrupt+0x771/0x9b0 [ 2757.009683] __x64_sys_sendmmsg+0x99/0x100 [ 2757.010041] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2757.010481] do_syscall_64+0x33/0x40 [ 2757.010825] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2757.011253] RIP: 0033:0x7f6f45c0ab19 [ 2757.011568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2757.013097] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2757.013738] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2757.014332] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2757.014956] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2757.015552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2757.016147] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 23:06:52 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 67) 23:06:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001) [ 2757.091870] FAULT_INJECTION: forcing a failure. [ 2757.091870] name failslab, interval 1, probability 0, space 0, times 0 [ 2757.092976] CPU: 1 PID: 11827 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2757.093588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2757.094307] Call Trace: [ 2757.094546] dump_stack+0x107/0x167 [ 2757.094894] should_fail.cold+0x5/0xa [ 2757.095222] ? create_object.isra.0+0x3a/0xa20 [ 2757.095636] should_failslab+0x5/0x20 [ 2757.095966] kmem_cache_alloc+0x5b/0x310 [ 2757.096315] create_object.isra.0+0x3a/0xa20 [ 2757.096690] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2757.097125] kmem_cache_alloc_node+0x169/0x330 [ 2757.097518] __alloc_skb+0x6d/0x5b0 [ 2757.097834] __ip_append_data+0x2930/0x3310 [ 2757.098212] ? raw_destroy+0x30/0x30 [ 2757.098539] ? ip_finish_output+0x330/0x330 [ 2757.098938] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2757.099367] ? memcpy+0x39/0x60 [ 2757.099658] ? raw_destroy+0x30/0x30 [ 2757.099974] ip_append_data+0x114/0x1a0 [ 2757.100320] raw_sendmsg+0xaa6/0x29d0 [ 2757.100659] ? dst_output+0x170/0x170 [ 2757.100983] ? __lock_acquire+0x1657/0x5b00 [ 2757.101362] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2757.101804] ? SOFTIRQ_verbose+0x10/0x10 [ 2757.102148] ? create_object.isra.0+0x3ad/0xa20 [ 2757.102562] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2757.103015] ? find_held_lock+0x2c/0x110 [ 2757.103373] ? trace_hardirqs_on+0x5b/0x180 [ 2757.103743] ? dst_output+0x170/0x170 [ 2757.104068] inet_sendmsg+0x11d/0x140 [ 2757.104392] ? inet_send_prepare+0x540/0x540 [ 2757.104764] __sock_sendmsg+0x13c/0x190 [ 2757.105103] ____sys_sendmsg+0x334/0x870 [ 2757.105451] ? sock_write_iter+0x3d0/0x3d0 [ 2757.105814] ? do_recvmmsg+0x6d0/0x6d0 [ 2757.106146] ? SOFTIRQ_verbose+0x10/0x10 [ 2757.106491] ? mark_lock+0xf5/0x2df0 [ 2757.106850] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2757.107295] ___sys_sendmsg+0xf3/0x170 [ 2757.107629] ? sendmsg_copy_msghdr+0x160/0x160 [ 2757.108021] ? __fget_files+0x2cf/0x520 [ 2757.108360] ? lock_downgrade+0x6d0/0x6d0 [ 2757.108724] ? lock_downgrade+0x6d0/0x6d0 [ 2757.109082] ? __fget_files+0x2f8/0x520 [ 2757.109429] ? __fget_light+0xea/0x290 [ 2757.109766] __sys_sendmmsg+0x195/0x470 [ 2757.110110] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2757.110478] ? lock_downgrade+0x6d0/0x6d0 [ 2757.110882] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2757.111293] ? wait_for_completion_io+0x270/0x270 [ 2757.111711] ? rcu_read_lock_any_held+0x75/0xa0 [ 2757.112104] ? vfs_write+0x354/0xb10 [ 2757.112422] ? fput_many+0x2f/0x1a0 [ 2757.112733] ? ksys_write+0x1a9/0x260 [ 2757.113057] ? __ia32_sys_read+0xb0/0xb0 [ 2757.113408] __x64_sys_sendmmsg+0x99/0x100 [ 2757.113767] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2757.114198] do_syscall_64+0x33/0x40 [ 2757.114514] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2757.114978] RIP: 0033:0x7f7b32767b19 [ 2757.115296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2757.116878] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2757.117531] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2757.118137] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2757.118783] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2757.119377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2757.119997] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:07:06 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) signalfd4(r2, &(0x7f0000000000)={[0x81]}, 0x8, 0x800) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) r5 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f00000009c0)={0x0, 0x0}) tgkill(r6, r8, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xe6, 0xdc, 0x81, 0x5, 0x0, 0x7, 0x14, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x4010, 0x6, 0x1f6, 0x7, 0x6, 0x3ff, 0x1, 0x0, 0x4506e694, 0x0, 0x1}, r6, 0xf, r4, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) 23:07:06 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 68) 23:07:06 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000002c0)=""/90, 0x5a}, {&(0x7f0000000340)=""/13, 0xd}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000000440)=""/79, 0x4f}], 0x6, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x2103) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) fcntl$setstatus(r6, 0x4, 0x42000) ioctl$TIOCL_SETVESABLANK(r5, 0x541c, &(0x7f0000000600)) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) close(0xffffffffffffffff) 23:07:06 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x1}, 0x80, 0x7, 0x2, 0x8, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:07:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001) 23:07:06 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 56) 23:07:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:07:06 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800003c7) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) [ 2771.545355] tmpfs: Unknown parameter ' [ 2771.545355] ' 23:07:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) [ 2771.564183] FAULT_INJECTION: forcing a failure. [ 2771.564183] name failslab, interval 1, probability 0, space 0, times 0 [ 2771.565353] CPU: 0 PID: 11853 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2771.566026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2771.570789] Call Trace: [ 2771.570993] dump_stack+0x107/0x167 [ 2771.571258] should_fail.cold+0x5/0xa [ 2771.571541] should_failslab+0x5/0x20 [ 2771.571834] __kmalloc_node_track_caller+0x74/0x3b0 [ 2771.572202] ? __ip_append_data+0x2930/0x3310 [ 2771.572531] __alloc_skb+0xb1/0x5b0 [ 2771.572815] __ip_append_data+0x2930/0x3310 [ 2771.573143] ? raw_destroy+0x30/0x30 [ 2771.573424] ? ip_finish_output+0x330/0x330 [ 2771.573747] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2771.574123] ? memcpy+0x39/0x60 [ 2771.574367] ? raw_destroy+0x30/0x30 [ 2771.574654] ip_append_data+0x114/0x1a0 [ 2771.574963] raw_sendmsg+0xaa6/0x29d0 [ 2771.575253] ? dst_output+0x170/0x170 [ 2771.575534] ? __lock_acquire+0x1657/0x5b00 [ 2771.575865] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2771.576246] ? SOFTIRQ_verbose+0x10/0x10 [ 2771.576542] ? create_object.isra.0+0x3ad/0xa20 [ 2771.576899] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2771.577273] ? find_held_lock+0x2c/0x110 [ 2771.577580] ? trace_hardirqs_on+0x5b/0x180 [ 2771.577902] ? dst_output+0x170/0x170 [ 2771.578180] inet_sendmsg+0x11d/0x140 [ 2771.578460] ? inet_send_prepare+0x540/0x540 [ 2771.578807] __sock_sendmsg+0x13c/0x190 [ 2771.579099] ____sys_sendmsg+0x334/0x870 [ 2771.579400] ? sock_write_iter+0x3d0/0x3d0 [ 2771.579715] ? do_recvmmsg+0x6d0/0x6d0 [ 2771.579998] ? SOFTIRQ_verbose+0x10/0x10 [ 2771.580291] ? mark_lock+0xf5/0x2df0 [ 2771.580613] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2771.581060] ___sys_sendmsg+0xf3/0x170 [ 2771.581393] ? sendmsg_copy_msghdr+0x160/0x160 [ 2771.581806] ? __fget_files+0x2cf/0x520 [ 2771.582147] ? lock_downgrade+0x6d0/0x6d0 [ 2771.582517] ? lock_downgrade+0x6d0/0x6d0 [ 2771.582898] ? __fget_files+0x2f8/0x520 [ 2771.583243] ? __fget_light+0xea/0x290 [ 2771.583600] __sys_sendmmsg+0x195/0x470 [ 2771.583942] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2771.584308] ? lock_downgrade+0x6d0/0x6d0 [ 2771.584697] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2771.585113] ? wait_for_completion_io+0x270/0x270 [ 2771.585523] ? rcu_read_lock_any_held+0x75/0xa0 [ 2771.585932] ? vfs_write+0x354/0xb10 [ 2771.586251] ? fput_many+0x2f/0x1a0 [ 2771.586561] ? ksys_write+0x1a9/0x260 [ 2771.586918] ? __ia32_sys_read+0xb0/0xb0 [ 2771.587271] __x64_sys_sendmmsg+0x99/0x100 [ 2771.587632] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2771.588083] do_syscall_64+0x33/0x40 [ 2771.588401] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2771.588844] RIP: 0033:0x7f6f45c0ab19 [ 2771.589175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2771.590727] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2771.591383] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2771.591980] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2771.592589] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2771.593205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2771.593798] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 23:07:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001) [ 2771.626767] FAULT_INJECTION: forcing a failure. [ 2771.626767] name failslab, interval 1, probability 0, space 0, times 0 [ 2771.627859] CPU: 1 PID: 11850 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2771.628445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2771.629143] Call Trace: [ 2771.629377] dump_stack+0x107/0x167 [ 2771.629693] should_fail.cold+0x5/0xa [ 2771.630028] should_failslab+0x5/0x20 [ 2771.630358] __kmalloc_node_track_caller+0x74/0x3b0 [ 2771.630803] ? __ip_append_data+0x2930/0x3310 [ 2771.631192] __alloc_skb+0xb1/0x5b0 [ 2771.631511] __ip_append_data+0x2930/0x3310 [ 2771.631891] ? raw_destroy+0x30/0x30 [ 2771.632220] ? ip_finish_output+0x330/0x330 [ 2771.632591] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2771.633027] ? memcpy+0x39/0x60 [ 2771.633314] ? raw_destroy+0x30/0x30 [ 2771.633635] ip_append_data+0x114/0x1a0 [ 2771.633984] raw_sendmsg+0xaa6/0x29d0 [ 2771.634321] ? dst_output+0x170/0x170 [ 2771.634659] ? __lock_acquire+0x1657/0x5b00 [ 2771.635126] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2771.635570] ? SOFTIRQ_verbose+0x10/0x10 [ 2771.635917] ? create_object.isra.0+0x3ad/0xa20 [ 2771.636323] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2771.636760] ? find_held_lock+0x2c/0x110 [ 2771.637116] ? trace_hardirqs_on+0x5b/0x180 [ 2771.637485] ? dst_output+0x170/0x170 [ 2771.637814] inet_sendmsg+0x11d/0x140 [ 2771.638140] ? inet_send_prepare+0x540/0x540 [ 2771.638517] __sock_sendmsg+0x13c/0x190 [ 2771.638877] ____sys_sendmsg+0x334/0x870 [ 2771.639226] ? sock_write_iter+0x3d0/0x3d0 [ 2771.639585] ? do_recvmmsg+0x6d0/0x6d0 [ 2771.639921] ? SOFTIRQ_verbose+0x10/0x10 [ 2771.640265] ? mark_lock+0xf5/0x2df0 [ 2771.640587] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2771.641035] ___sys_sendmsg+0xf3/0x170 [ 2771.641369] ? sendmsg_copy_msghdr+0x160/0x160 [ 2771.641763] ? __fget_files+0x2cf/0x520 [ 2771.642103] ? lock_downgrade+0x6d0/0x6d0 [ 2771.642461] ? lock_downgrade+0x6d0/0x6d0 [ 2771.642936] ? __fget_files+0x2f8/0x520 [ 2771.643282] ? __fget_light+0xea/0x290 [ 2771.643620] __sys_sendmmsg+0x195/0x470 [ 2771.643967] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2771.644333] ? lock_downgrade+0x6d0/0x6d0 [ 2771.644703] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2771.645116] ? wait_for_completion_io+0x270/0x270 [ 2771.645529] ? rcu_read_lock_any_held+0x75/0xa0 [ 2771.645923] ? vfs_write+0x354/0xb10 [ 2771.646240] ? fput_many+0x2f/0x1a0 [ 2771.646553] ? ksys_write+0x1a9/0x260 [ 2771.646946] ? __ia32_sys_read+0xb0/0xb0 [ 2771.647300] __x64_sys_sendmmsg+0x99/0x100 [ 2771.647661] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2771.648096] do_syscall_64+0x33/0x40 [ 2771.648423] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2771.648856] RIP: 0033:0x7f7b32767b19 [ 2771.649177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2771.650742] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2771.651386] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2771.651985] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2771.652584] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2771.653182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2771.653781] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:07:06 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x50, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x3, 0x2, 0x1, {0x0, 0x0, r0}}, 0x3) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000040)=0xb, 0x80000001) fchown(r4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r5, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000040)) 23:07:06 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x28000, 0x100) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000240)=ANY=[@ANYBLOB="ff7f"]) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r6, 0x2) ftruncate(r6, 0x6) 23:07:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001) 23:07:21 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 69) 23:07:21 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x3, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x9) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0xb, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) pidfd_getfd(r4, r2, 0x0) signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000180)=0x1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) 23:07:21 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) r3 = openat$incfs(r1, &(0x7f0000000180)='.log\x00', 0x100, 0x8) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = signalfd(r4, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r5, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) r6 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:07:21 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x1}, 0x80, 0x7, 0x2, 0x8, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:07:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:07:21 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800003cd) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:07:21 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 57) 23:07:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:07:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001) [ 2785.943928] FAULT_INJECTION: forcing a failure. [ 2785.943928] name failslab, interval 1, probability 0, space 0, times 0 [ 2785.945217] CPU: 0 PID: 11880 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2785.945803] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2785.946502] Call Trace: [ 2785.946743] dump_stack+0x107/0x167 [ 2785.947068] should_fail.cold+0x5/0xa [ 2785.947401] ? create_object.isra.0+0x3a/0xa20 [ 2785.947793] should_failslab+0x5/0x20 [ 2785.948120] kmem_cache_alloc+0x5b/0x310 [ 2785.948471] create_object.isra.0+0x3a/0xa20 [ 2785.948846] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2785.949282] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2785.949717] ? __ip_append_data+0x2930/0x3310 [ 2785.950107] __alloc_skb+0xb1/0x5b0 [ 2785.950425] __ip_append_data+0x2930/0x3310 [ 2785.950818] ? raw_destroy+0x30/0x30 [ 2785.951149] ? ip_finish_output+0x330/0x330 [ 2785.951519] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2785.951951] ? memcpy+0x39/0x60 [ 2785.952238] ? raw_destroy+0x30/0x30 [ 2785.952557] ip_append_data+0x114/0x1a0 [ 2785.952906] raw_sendmsg+0xaa6/0x29d0 [ 2785.953243] ? dst_output+0x170/0x170 [ 2785.953571] ? __lock_acquire+0x1657/0x5b00 [ 2785.953955] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2785.954412] ? SOFTIRQ_verbose+0x10/0x10 [ 2785.954763] ? create_object.isra.0+0x3ad/0xa20 [ 2785.955172] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2785.955610] ? find_held_lock+0x2c/0x110 [ 2785.955967] ? trace_hardirqs_on+0x5b/0x180 [ 2785.956338] ? dst_output+0x170/0x170 [ 2785.956667] inet_sendmsg+0x11d/0x140 [ 2785.956992] ? inet_send_prepare+0x540/0x540 [ 2785.957367] __sock_sendmsg+0x13c/0x190 [ 2785.957709] ____sys_sendmsg+0x334/0x870 [ 2785.958057] ? sock_write_iter+0x3d0/0x3d0 [ 2785.958417] ? do_recvmmsg+0x6d0/0x6d0 [ 2785.958761] ? SOFTIRQ_verbose+0x10/0x10 [ 2785.959112] ? mark_lock+0xf5/0x2df0 [ 2785.959433] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2785.959885] ___sys_sendmsg+0xf3/0x170 [ 2785.960222] ? sendmsg_copy_msghdr+0x160/0x160 [ 2785.960616] ? __fget_files+0x2cf/0x520 [ 2785.960955] ? lock_downgrade+0x6d0/0x6d0 [ 2785.961314] ? lock_downgrade+0x6d0/0x6d0 [ 2785.961673] ? __fget_files+0x2f8/0x520 [ 2785.962022] ? __fget_light+0xea/0x290 [ 2785.962361] __sys_sendmmsg+0x195/0x470 [ 2785.962706] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2785.963090] ? lock_downgrade+0x6d0/0x6d0 [ 2785.963460] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2785.963873] ? wait_for_completion_io+0x270/0x270 [ 2785.964284] ? rcu_read_lock_any_held+0x75/0xa0 [ 2785.964678] ? vfs_write+0x354/0xb10 [ 2785.964996] ? fput_many+0x2f/0x1a0 [ 2785.965308] ? ksys_write+0x1a9/0x260 [ 2785.965647] ? __ia32_sys_read+0xb0/0xb0 [ 2785.966001] __x64_sys_sendmmsg+0x99/0x100 [ 2785.966378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2785.966848] do_syscall_64+0x33/0x40 [ 2785.967180] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2785.967640] RIP: 0033:0x7f7b32767b19 [ 2785.967958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2785.969494] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2785.970140] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2785.970766] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2785.971368] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2785.971985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2785.972592] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 [ 2785.980849] FAULT_INJECTION: forcing a failure. [ 2785.980849] name failslab, interval 1, probability 0, space 0, times 0 [ 2785.982107] CPU: 0 PID: 11891 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2785.982698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2785.983407] Call Trace: [ 2785.983635] dump_stack+0x107/0x167 [ 2785.983951] should_fail.cold+0x5/0xa [ 2785.984281] ? create_object.isra.0+0x3a/0xa20 [ 2785.984673] should_failslab+0x5/0x20 [ 2785.984999] kmem_cache_alloc+0x5b/0x310 [ 2785.985352] create_object.isra.0+0x3a/0xa20 [ 2785.985728] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2785.986163] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2785.986591] ? __ip_append_data+0x2930/0x3310 [ 2785.986994] __alloc_skb+0xb1/0x5b0 [ 2785.987309] __ip_append_data+0x2930/0x3310 [ 2785.987687] ? raw_destroy+0x30/0x30 [ 2785.988013] ? ip_finish_output+0x330/0x330 [ 2785.988380] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2785.988811] ? memcpy+0x39/0x60 [ 2785.989096] ? raw_destroy+0x30/0x30 [ 2785.989414] ip_append_data+0x114/0x1a0 [ 2785.989778] raw_sendmsg+0xaa6/0x29d0 [ 2785.990132] ? dst_output+0x170/0x170 [ 2785.990460] ? __lock_acquire+0x1657/0x5b00 [ 2785.990870] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2785.991326] ? SOFTIRQ_verbose+0x10/0x10 [ 2785.991688] ? create_object.isra.0+0x3ad/0xa20 [ 2785.992097] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2785.992534] ? find_held_lock+0x2c/0x110 [ 2785.992891] ? trace_hardirqs_on+0x5b/0x180 [ 2785.993261] ? dst_output+0x170/0x170 [ 2785.993588] inet_sendmsg+0x11d/0x140 [ 2785.993915] ? inet_send_prepare+0x540/0x540 [ 2785.994309] __sock_sendmsg+0x13c/0x190 [ 2785.994667] ____sys_sendmsg+0x334/0x870 [ 2785.995034] ? sock_write_iter+0x3d0/0x3d0 [ 2785.995393] ? do_recvmmsg+0x6d0/0x6d0 [ 2785.995735] ? SOFTIRQ_verbose+0x10/0x10 [ 2785.996089] ? mark_lock+0xf5/0x2df0 [ 2785.996412] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2785.996860] ___sys_sendmsg+0xf3/0x170 [ 2785.997194] ? sendmsg_copy_msghdr+0x160/0x160 [ 2785.997593] ? __fget_files+0x2cf/0x520 [ 2785.997942] ? lock_downgrade+0x6d0/0x6d0 [ 2785.998301] ? lock_downgrade+0x6d0/0x6d0 [ 2785.998662] ? __fget_files+0x2f8/0x520 [ 2785.999028] ? __fget_light+0xea/0x290 [ 2785.999369] __sys_sendmmsg+0x195/0x470 [ 2785.999716] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2786.000101] ? lock_downgrade+0x6d0/0x6d0 [ 2786.000472] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2786.000897] ? wait_for_completion_io+0x270/0x270 [ 2786.001307] ? rcu_read_lock_any_held+0x75/0xa0 [ 2786.001700] ? vfs_write+0x354/0xb10 [ 2786.002020] ? fput_many+0x2f/0x1a0 [ 2786.002333] ? ksys_write+0x1a9/0x260 [ 2786.002660] ? __ia32_sys_read+0xb0/0xb0 [ 2786.003038] __x64_sys_sendmmsg+0x99/0x100 [ 2786.003405] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2786.003857] do_syscall_64+0x33/0x40 [ 2786.004186] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2786.004635] RIP: 0033:0x7f6f45c0ab19 [ 2786.004956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2786.006502] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2786.007171] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2786.007782] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2786.008395] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2786.009001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2786.009599] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 23:07:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)}], 0x1}, 0x10044001) 23:07:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:07:21 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r0, 0x2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000001) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x84, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) 23:07:21 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r7, &(0x7f0000000080)=""/65, 0x41) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200c02, 0x0) ppoll(&(0x7f0000000240)=[{r1, 0x2001}, {r4, 0x100}, {r6, 0x4410}, {r7, 0xd8}, {r8, 0x8}], 0x5, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)={[0x10000]}, 0x8) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) splice(r5, &(0x7f0000000300)=0x9, 0xffffffffffffffff, &(0x7f0000000340)=0x6, 0x5, 0xc) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:07:21 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800003d4) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:07:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:07:21 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) signalfd4(r2, &(0x7f0000000000)={[0x81]}, 0x8, 0x800) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) r5 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f00000009c0)={0x0, 0x0}) tgkill(r6, r8, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xe6, 0xdc, 0x81, 0x5, 0x0, 0x7, 0x14, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x4010, 0x6, 0x1f6, 0x7, 0x6, 0x3ff, 0x1, 0x0, 0x4506e694, 0x0, 0x1}, r6, 0xf, r4, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) 23:07:21 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 70) 23:07:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)}], 0x1}, 0x10044001) 23:07:21 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x40, 0x3, 0x83, 0x0, 0x100000001, 0x40, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0xffff}, 0x10299, 0xffffffff80000001, 0x2, 0x7, 0x8a, 0x4, 0xd3d, 0x0, 0x8, 0x0, 0x9}, r0, 0xffffffffffffffff, r0, 0x8) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) 23:07:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) [ 2786.247304] FAULT_INJECTION: forcing a failure. [ 2786.247304] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2786.248711] CPU: 0 PID: 11926 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2786.249295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2786.249995] Call Trace: [ 2786.250230] dump_stack+0x107/0x167 [ 2786.250547] should_fail.cold+0x5/0xa [ 2786.250902] __alloc_pages_nodemask+0x182/0x600 [ 2786.251304] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2786.251832] alloc_pages_current+0x187/0x280 [ 2786.252209] allocate_slab+0x26f/0x380 [ 2786.252548] ___slab_alloc+0x470/0x700 [ 2786.252888] ? __ip_append_data+0x2930/0x3310 [ 2786.253289] ? __kmalloc_node_track_caller+0x393/0x3b0 [ 2786.253735] __kmalloc_node_track_caller+0x393/0x3b0 [ 2786.254176] ? __ip_append_data+0x2930/0x3310 [ 2786.254568] __alloc_skb+0xb1/0x5b0 [ 2786.254904] __ip_append_data+0x2930/0x3310 [ 2786.255286] ? raw_destroy+0x30/0x30 [ 2786.255626] ? ip_finish_output+0x330/0x330 [ 2786.255999] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2786.256433] ? memcpy+0x39/0x60 [ 2786.256726] ? raw_destroy+0x30/0x30 [ 2786.257043] ip_append_data+0x114/0x1a0 [ 2786.257394] raw_sendmsg+0xaa6/0x29d0 [ 2786.257740] ? dst_output+0x170/0x170 [ 2786.258069] ? __lock_acquire+0x1657/0x5b00 [ 2786.258455] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2786.258916] ? SOFTIRQ_verbose+0x10/0x10 [ 2786.259268] ? create_object.isra.0+0x3ad/0xa20 [ 2786.259686] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2786.260125] ? find_held_lock+0x2c/0x110 [ 2786.260492] ? trace_hardirqs_on+0x5b/0x180 [ 2786.260872] ? dst_output+0x170/0x170 [ 2786.261210] inet_sendmsg+0x11d/0x140 [ 2786.261543] ? inet_send_prepare+0x540/0x540 [ 2786.261924] __sock_sendmsg+0x13c/0x190 [ 2786.262269] ____sys_sendmsg+0x334/0x870 [ 2786.262627] ? sock_write_iter+0x3d0/0x3d0 [ 2786.263005] ? do_recvmmsg+0x6d0/0x6d0 [ 2786.263342] ? SOFTIRQ_verbose+0x10/0x10 [ 2786.263692] ? mark_lock+0xf5/0x2df0 [ 2786.264013] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2786.264466] ___sys_sendmsg+0xf3/0x170 [ 2786.264800] ? sendmsg_copy_msghdr+0x160/0x160 [ 2786.265196] ? __fget_files+0x2cf/0x520 [ 2786.265539] ? lock_downgrade+0x6d0/0x6d0 [ 2786.265899] ? lock_downgrade+0x6d0/0x6d0 [ 2786.266259] ? __fget_files+0x2f8/0x520 [ 2786.266606] ? __fget_light+0xea/0x290 [ 2786.266965] __sys_sendmmsg+0x195/0x470 [ 2786.267313] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2786.267680] ? lock_downgrade+0x6d0/0x6d0 [ 2786.268049] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2786.268462] ? wait_for_completion_io+0x270/0x270 [ 2786.268874] ? rcu_read_lock_any_held+0x75/0xa0 [ 2786.269268] ? vfs_write+0x354/0xb10 [ 2786.269588] ? fput_many+0x2f/0x1a0 [ 2786.269900] ? ksys_write+0x1a9/0x260 [ 2786.270226] ? __ia32_sys_read+0xb0/0xb0 [ 2786.270580] __x64_sys_sendmmsg+0x99/0x100 [ 2786.270975] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2786.271413] do_syscall_64+0x33/0x40 [ 2786.271733] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2786.272169] RIP: 0033:0x7f7b32767b19 [ 2786.272490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2786.274031] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2786.274680] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2786.275294] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2786.275892] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2786.276490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2786.277087] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:07:21 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 58) 23:07:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)}], 0x1}, 0x10044001) [ 2786.346394] FAULT_INJECTION: forcing a failure. [ 2786.346394] name failslab, interval 1, probability 0, space 0, times 0 [ 2786.347524] CPU: 0 PID: 11935 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2786.348108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2786.348806] Call Trace: [ 2786.349040] dump_stack+0x107/0x167 [ 2786.349355] should_fail.cold+0x5/0xa [ 2786.349684] ? create_object.isra.0+0x3a/0xa20 [ 2786.350079] should_failslab+0x5/0x20 [ 2786.350409] kmem_cache_alloc+0x5b/0x310 [ 2786.350770] create_object.isra.0+0x3a/0xa20 [ 2786.351155] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2786.351595] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2786.352026] ? __ip_append_data+0x2930/0x3310 [ 2786.352419] __alloc_skb+0xb1/0x5b0 [ 2786.352738] __ip_append_data+0x2930/0x3310 [ 2786.353121] ? raw_destroy+0x30/0x30 [ 2786.353455] ? ip_finish_output+0x330/0x330 [ 2786.353832] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2786.354265] ? memcpy+0x39/0x60 [ 2786.354555] ? raw_destroy+0x30/0x30 [ 2786.354894] ip_append_data+0x114/0x1a0 [ 2786.355247] raw_sendmsg+0xaa6/0x29d0 [ 2786.355591] ? dst_output+0x170/0x170 [ 2786.355921] ? __lock_acquire+0x1657/0x5b00 [ 2786.356307] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2786.356761] ? SOFTIRQ_verbose+0x10/0x10 [ 2786.357105] ? create_object.isra.0+0x3ad/0xa20 [ 2786.357513] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2786.357951] ? find_held_lock+0x2c/0x110 [ 2786.358308] ? trace_hardirqs_on+0x5b/0x180 [ 2786.358681] ? dst_output+0x170/0x170 [ 2786.359027] inet_sendmsg+0x11d/0x140 [ 2786.359356] ? inet_send_prepare+0x540/0x540 [ 2786.359734] __sock_sendmsg+0x13c/0x190 [ 2786.360076] ____sys_sendmsg+0x334/0x870 [ 2786.360426] ? sock_write_iter+0x3d0/0x3d0 [ 2786.360791] ? do_recvmmsg+0x6d0/0x6d0 [ 2786.361128] ? SOFTIRQ_verbose+0x10/0x10 [ 2786.361475] ? mark_lock+0xf5/0x2df0 [ 2786.361797] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2786.362247] ___sys_sendmsg+0xf3/0x170 [ 2786.362581] ? sendmsg_copy_msghdr+0x160/0x160 [ 2786.362993] ? __fget_files+0x2cf/0x520 [ 2786.363335] ? lock_downgrade+0x6d0/0x6d0 [ 2786.363696] ? lock_downgrade+0x6d0/0x6d0 [ 2786.364057] ? __fget_files+0x2f8/0x520 [ 2786.364405] ? __fget_light+0xea/0x290 [ 2786.364745] __sys_sendmmsg+0x195/0x470 [ 2786.365092] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2786.365462] ? lock_downgrade+0x6d0/0x6d0 [ 2786.365830] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2786.366246] ? wait_for_completion_io+0x270/0x270 [ 2786.366662] ? rcu_read_lock_any_held+0x75/0xa0 [ 2786.367072] ? vfs_write+0x354/0xb10 [ 2786.367393] ? fput_many+0x2f/0x1a0 [ 2786.367705] ? ksys_write+0x1a9/0x260 [ 2786.368030] ? __ia32_sys_read+0xb0/0xb0 [ 2786.368382] __x64_sys_sendmmsg+0x99/0x100 [ 2786.368745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2786.369180] do_syscall_64+0x33/0x40 [ 2786.369499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2786.369933] RIP: 0033:0x7f6f45c0ab19 [ 2786.370253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2786.371806] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2786.372448] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2786.373045] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2786.373650] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2786.374248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2786.374863] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 23:07:35 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x7}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r2, 0x2) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @mcast2, 0x3}, 0x1c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000000240)={{r3}, 0x0, 0x18, @unused=[0xfffffffffffffff8, 0x3, 0x9, 0x6257], @name="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"}) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:07:35 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 59) 23:07:35 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 71) 23:07:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:07:35 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800003da) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:07:35 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000002c0)=""/90, 0x5a}, {&(0x7f0000000340)=""/13, 0xd}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000000440)=""/79, 0x4f}], 0x6, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x2103) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) fcntl$setstatus(r6, 0x4, 0x42000) ioctl$TIOCL_SETVESABLANK(r5, 0x541c, &(0x7f0000000600)) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) close(0xffffffffffffffff) 23:07:35 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) 23:07:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':', 0x1}], 0x1}, 0x10044001) 23:07:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':', 0x1}], 0x1}, 0x10044001) [ 2800.327064] tmpfs: Unknown parameter 'º ÁŽQJ‹ðæóŠ{!gÀzoÅåÍî¹?Ì“Æqb£' [ 2800.349029] FAULT_INJECTION: forcing a failure. [ 2800.349029] name failslab, interval 1, probability 0, space 0, times 0 [ 2800.350274] FAULT_INJECTION: forcing a failure. [ 2800.350274] name failslab, interval 1, probability 0, space 0, times 0 [ 2800.351633] CPU: 0 PID: 11952 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2800.351643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2800.351648] Call Trace: [ 2800.351668] dump_stack+0x107/0x167 [ 2800.351685] should_fail.cold+0x5/0xa [ 2800.351703] ? create_object.isra.0+0x3a/0xa20 [ 2800.351721] should_failslab+0x5/0x20 [ 2800.351736] kmem_cache_alloc+0x5b/0x310 [ 2800.351756] create_object.isra.0+0x3a/0xa20 [ 2800.351772] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2800.351792] kmem_cache_alloc_node+0x169/0x330 [ 2800.351815] __alloc_skb+0x6d/0x5b0 [ 2800.351838] __ip_append_data+0x2930/0x3310 [ 2800.351867] ? raw_destroy+0x30/0x30 [ 2800.367281] ? ip_finish_output+0x330/0x330 [ 2800.368228] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2800.369326] ? memcpy+0x39/0x60 [ 2800.370061] ? raw_destroy+0x30/0x30 [ 2800.370889] ip_append_data+0x114/0x1a0 [ 2800.371776] raw_sendmsg+0xaa6/0x29d0 [ 2800.372615] ? dst_output+0x170/0x170 [ 2800.373421] ? __lock_acquire+0x1657/0x5b00 [ 2800.374374] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2800.375542] ? SOFTIRQ_verbose+0x10/0x10 [ 2800.376412] ? create_object.isra.0+0x3ad/0xa20 [ 2800.377437] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2800.378566] ? find_held_lock+0x2c/0x110 [ 2800.379459] ? trace_hardirqs_on+0x5b/0x180 [ 2800.380393] ? dst_output+0x170/0x170 [ 2800.381232] inet_sendmsg+0x11d/0x140 [ 2800.382070] ? inet_send_prepare+0x540/0x540 [ 2800.383041] __sock_sendmsg+0x13c/0x190 [ 2800.383911] ____sys_sendmsg+0x334/0x870 [ 2800.384801] ? sock_write_iter+0x3d0/0x3d0 [ 2800.385722] ? do_recvmmsg+0x6d0/0x6d0 [ 2800.386560] ? SOFTIRQ_verbose+0x10/0x10 [ 2800.387467] ? mark_lock+0xf5/0x2df0 [ 2800.388272] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2800.389407] ___sys_sendmsg+0xf3/0x170 [ 2800.390249] ? sendmsg_copy_msghdr+0x160/0x160 [ 2800.391290] ? __fget_files+0x2cf/0x520 [ 2800.392164] ? lock_downgrade+0x6d0/0x6d0 [ 2800.393076] ? lock_downgrade+0x6d0/0x6d0 [ 2800.393988] ? __fget_files+0x2f8/0x520 [ 2800.394879] ? __fget_light+0xea/0x290 [ 2800.395743] __sys_sendmmsg+0x195/0x470 [ 2800.396615] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2800.397543] ? lock_downgrade+0x6d0/0x6d0 [ 2800.398453] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2800.399525] ? wait_for_completion_io+0x270/0x270 [ 2800.400583] ? rcu_read_lock_any_held+0x75/0xa0 [ 2800.401591] ? vfs_write+0x354/0xb10 [ 2800.402380] ? fput_many+0x2f/0x1a0 [ 2800.403191] ? ksys_write+0x1a9/0x260 [ 2800.404027] ? __ia32_sys_read+0xb0/0xb0 [ 2800.404919] __x64_sys_sendmmsg+0x99/0x100 [ 2800.405841] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2800.406972] do_syscall_64+0x33/0x40 [ 2800.407791] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2800.408898] RIP: 0033:0x7f7b32767b19 [ 2800.409714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2800.413702] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2800.415333] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2800.416893] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2800.418418] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2800.419999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2800.421535] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 [ 2800.423145] CPU: 1 PID: 11955 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2800.423863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2800.424719] Call Trace: [ 2800.425002] dump_stack+0x107/0x167 [ 2800.425388] should_fail.cold+0x5/0xa [ 2800.425788] ? create_object.isra.0+0x3a/0xa20 [ 2800.426268] should_failslab+0x5/0x20 [ 2800.426668] kmem_cache_alloc+0x5b/0x310 [ 2800.427107] create_object.isra.0+0x3a/0xa20 [ 2800.427568] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2800.428106] kmem_cache_alloc_node+0x169/0x330 [ 2800.428594] __alloc_skb+0x6d/0x5b0 [ 2800.429396] __ip_append_data+0x2930/0x3310 [ 2800.429894] ? raw_destroy+0x30/0x30 [ 2800.430776] ? ip_finish_output+0x330/0x330 [ 2800.431253] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2800.432487] ? memcpy+0x39/0x60 [ 2800.432851] ? raw_destroy+0x30/0x30 [ 2800.433721] ip_append_data+0x114/0x1a0 [ 2800.434164] raw_sendmsg+0xaa6/0x29d0 [ 2800.435076] ? dst_output+0x170/0x170 [ 2800.435486] ? __lock_acquire+0x1657/0x5b00 [ 2800.436539] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2800.437097] ? SOFTIRQ_verbose+0x10/0x10 [ 2800.438061] ? create_object.isra.0+0x3ad/0xa20 [ 2800.438569] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2800.439866] ? find_held_lock+0x2c/0x110 [ 2800.440324] ? trace_hardirqs_on+0x5b/0x180 [ 2800.441358] ? dst_output+0x170/0x170 [ 2800.441770] inet_sendmsg+0x11d/0x140 [ 2800.442690] ? inet_send_prepare+0x540/0x540 [ 2800.443170] __sock_sendmsg+0x13c/0x190 [ 2800.444135] ____sys_sendmsg+0x334/0x870 [ 2800.444583] ? sock_write_iter+0x3d0/0x3d0 [ 2800.445609] ? do_recvmmsg+0x6d0/0x6d0 [ 2800.446033] ? SOFTIRQ_verbose+0x10/0x10 [ 2800.447022] ? mark_lock+0xf5/0x2df0 [ 2800.447433] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2800.448695] ___sys_sendmsg+0xf3/0x170 [ 2800.449125] ? sendmsg_copy_msghdr+0x160/0x160 [ 2800.450222] ? __fget_files+0x2cf/0x520 [ 2800.450656] ? lock_downgrade+0x6d0/0x6d0 [ 2800.451670] ? lock_downgrade+0x6d0/0x6d0 [ 2800.452132] ? __fget_files+0x2f8/0x520 [ 2800.453086] ? __fget_light+0xea/0x290 [ 2800.453525] __sys_sendmmsg+0x195/0x470 [ 2800.454490] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2800.454960] ? lock_downgrade+0x6d0/0x6d0 [ 2800.455964] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2800.456487] ? wait_for_completion_io+0x270/0x270 [ 2800.457625] ? rcu_read_lock_any_held+0x75/0xa0 [ 2800.458125] ? vfs_write+0x354/0xb10 [ 2800.459042] ? fput_many+0x2f/0x1a0 [ 2800.459446] ? ksys_write+0x1a9/0x260 [ 2800.460348] ? __ia32_sys_read+0xb0/0xb0 [ 2800.460798] __x64_sys_sendmmsg+0x99/0x100 [ 2800.461816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2800.462371] do_syscall_64+0x33/0x40 [ 2800.463267] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2800.463814] RIP: 0033:0x7f6f45c0ab19 [ 2800.464722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2800.466609] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2800.468362] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2800.470009] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2800.471719] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2800.473410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2800.475107] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 23:07:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) [ 2800.514860] tmpfs: Unknown parameter ' [ 2800.514860] ' 23:07:35 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x602641, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r1, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffff9) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCGPTPEER(r3, 0x5441, 0x4b8b) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000180)=0x4) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:07:50 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r2, &(0x7f0000000140)={[0x5]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:07:50 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 60) 23:07:50 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r7, &(0x7f0000000080)=""/65, 0x41) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200c02, 0x0) ppoll(&(0x7f0000000240)=[{r1, 0x2001}, {r4, 0x100}, {r6, 0x4410}, {r7, 0xd8}, {r8, 0x8}], 0x5, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)={[0x10000]}, 0x8) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) splice(r5, &(0x7f0000000300)=0x9, 0xffffffffffffffff, &(0x7f0000000340)=0x6, 0x5, 0xc) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:07:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':', 0x1}], 0x1}, 0x10044001) 23:07:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, 0x0, 0x10044001) 23:07:50 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800003dc) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:07:50 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 72) 23:07:50 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r2, &(0x7f0000000000)={[0xffdffffffffffbff]}, 0xffffff5d) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x8, 0x1, 0x5, 0x0, 0x0, 0x9, 0x2809, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_config_ext={0x5, 0x81}, 0x40a, 0x9e9, 0x1, 0x7, 0x8000, 0x3, 0x40, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0xffffffffffffffff, 0x9, r3, 0x8) 23:07:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, 0x0, 0x10044001) [ 2815.194327] FAULT_INJECTION: forcing a failure. [ 2815.194327] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2815.195727] CPU: 1 PID: 11992 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2815.196354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2815.197109] Call Trace: [ 2815.197367] dump_stack+0x107/0x167 [ 2815.197714] should_fail.cold+0x5/0xa [ 2815.198074] __alloc_pages_nodemask+0x182/0x600 [ 2815.198502] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2815.199087] alloc_pages_current+0x187/0x280 [ 2815.199503] allocate_slab+0x26f/0x380 [ 2815.199875] ___slab_alloc+0x470/0x700 [ 2815.200260] ? __alloc_skb+0x6d/0x5b0 [ 2815.200629] ? __alloc_skb+0x6d/0x5b0 [ 2815.200987] ? kmem_cache_alloc_node+0x313/0x330 [ 2815.201431] kmem_cache_alloc_node+0x313/0x330 [ 2815.201861] __alloc_skb+0x6d/0x5b0 [ 2815.202206] __ip_append_data+0x2930/0x3310 [ 2815.202622] ? raw_destroy+0x30/0x30 [ 2815.202996] ? ip_finish_output+0x330/0x330 [ 2815.203403] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2815.203873] ? memcpy+0x39/0x60 [ 2815.204188] ? raw_destroy+0x30/0x30 [ 2815.204539] ip_append_data+0x114/0x1a0 [ 2815.204927] raw_sendmsg+0xaa6/0x29d0 [ 2815.205298] ? dst_output+0x170/0x170 [ 2815.205662] ? __lock_acquire+0x1657/0x5b00 [ 2815.206083] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2815.206567] ? SOFTIRQ_verbose+0x10/0x10 [ 2815.206957] ? create_object.isra.0+0x3ad/0xa20 [ 2815.207405] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2815.207883] ? find_held_lock+0x2c/0x110 [ 2815.208279] ? trace_hardirqs_on+0x5b/0x180 [ 2815.208688] ? dst_output+0x170/0x170 [ 2815.209064] inet_sendmsg+0x11d/0x140 [ 2815.209420] ? inet_send_prepare+0x540/0x540 [ 2815.209825] __sock_sendmsg+0x13c/0x190 [ 2815.210207] ____sys_sendmsg+0x334/0x870 [ 2815.210589] ? sock_write_iter+0x3d0/0x3d0 [ 2815.210996] ? do_recvmmsg+0x6d0/0x6d0 [ 2815.211366] ? SOFTIRQ_verbose+0x10/0x10 [ 2815.211745] ? mark_lock+0xf5/0x2df0 [ 2815.212097] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2815.212595] ___sys_sendmsg+0xf3/0x170 [ 2815.212959] ? sendmsg_copy_msghdr+0x160/0x160 [ 2815.213400] ? __fget_files+0x2cf/0x520 [ 2815.213773] ? lock_downgrade+0x6d0/0x6d0 [ 2815.214163] ? lock_downgrade+0x6d0/0x6d0 [ 2815.214556] ? __fget_files+0x2f8/0x520 [ 2815.214950] ? __fget_light+0xea/0x290 [ 2815.215321] __sys_sendmmsg+0x195/0x470 [ 2815.215698] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2815.216096] ? lock_downgrade+0x6d0/0x6d0 [ 2815.216499] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2815.216952] ? wait_for_completion_io+0x270/0x270 [ 2815.217406] ? rcu_read_lock_any_held+0x75/0xa0 [ 2815.217845] ? vfs_write+0x354/0xb10 [ 2815.218192] ? fput_many+0x2f/0x1a0 [ 2815.218533] ? ksys_write+0x1a9/0x260 [ 2815.218910] ? __ia32_sys_read+0xb0/0xb0 [ 2815.219310] __x64_sys_sendmmsg+0x99/0x100 [ 2815.219704] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2815.220181] do_syscall_64+0x33/0x40 [ 2815.220536] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2815.221017] RIP: 0033:0x7f7b32767b19 [ 2815.221366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2815.223030] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2815.223725] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2815.224372] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2815.225026] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2815.225677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2815.226325] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 [ 2815.239378] FAULT_INJECTION: forcing a failure. [ 2815.239378] name failslab, interval 1, probability 0, space 0, times 0 [ 2815.240928] CPU: 1 PID: 11994 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2815.241558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2815.242306] Call Trace: [ 2815.242559] dump_stack+0x107/0x167 [ 2815.242911] should_fail.cold+0x5/0xa [ 2815.243282] should_failslab+0x5/0x20 [ 2815.243637] __kmalloc_node_track_caller+0x74/0x3b0 [ 2815.244097] ? __ip_append_data+0x2930/0x3310 [ 2815.244519] __alloc_skb+0xb1/0x5b0 [ 2815.244872] __ip_append_data+0x2930/0x3310 [ 2815.245278] ? raw_destroy+0x30/0x30 [ 2815.245638] ? ip_finish_output+0x330/0x330 [ 2815.246049] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2815.246516] ? memcpy+0x39/0x60 [ 2815.246830] ? raw_destroy+0x30/0x30 [ 2815.247205] ip_append_data+0x114/0x1a0 [ 2815.247588] raw_sendmsg+0xaa6/0x29d0 [ 2815.247960] ? dst_output+0x170/0x170 [ 2815.248314] ? __lock_acquire+0x1657/0x5b00 [ 2815.248730] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2815.249210] ? SOFTIRQ_verbose+0x10/0x10 [ 2815.249586] ? create_object.isra.0+0x3ad/0xa20 [ 2815.250029] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2815.250513] ? find_held_lock+0x2c/0x110 [ 2815.250914] ? trace_hardirqs_on+0x5b/0x180 [ 2815.251335] ? dst_output+0x170/0x170 [ 2815.251691] inet_sendmsg+0x11d/0x140 [ 2815.252041] ? inet_send_prepare+0x540/0x540 [ 2815.252435] __sock_sendmsg+0x13c/0x190 [ 2815.252801] ____sys_sendmsg+0x334/0x870 [ 2815.253183] ? sock_write_iter+0x3d0/0x3d0 [ 2815.253575] ? do_recvmmsg+0x6d0/0x6d0 [ 2815.253944] ? SOFTIRQ_verbose+0x10/0x10 [ 2815.254319] ? mark_lock+0xf5/0x2df0 [ 2815.254663] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2815.255162] ___sys_sendmsg+0xf3/0x170 [ 2815.255534] ? sendmsg_copy_msghdr+0x160/0x160 [ 2815.255960] ? __fget_files+0x2cf/0x520 [ 2815.256333] ? lock_downgrade+0x6d0/0x6d0 [ 2815.256732] ? lock_downgrade+0x6d0/0x6d0 [ 2815.257120] ? __fget_files+0x2f8/0x520 [ 2815.257500] ? __fget_light+0xea/0x290 [ 2815.257871] __sys_sendmmsg+0x195/0x470 [ 2815.258244] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2815.258645] ? lock_downgrade+0x6d0/0x6d0 [ 2815.259066] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2815.259518] ? wait_for_completion_io+0x270/0x270 [ 2815.259976] ? rcu_read_lock_any_held+0x75/0xa0 [ 2815.260403] ? vfs_write+0x354/0xb10 [ 2815.260755] ? fput_many+0x2f/0x1a0 [ 2815.261104] ? ksys_write+0x1a9/0x260 [ 2815.261458] ? __ia32_sys_read+0xb0/0xb0 [ 2815.261842] __x64_sys_sendmmsg+0x99/0x100 [ 2815.262234] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2815.262705] do_syscall_64+0x33/0x40 [ 2815.263077] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2815.263548] RIP: 0033:0x7f6f45c0ab19 [ 2815.263902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2815.265549] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2815.266243] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 23:07:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, 0x0, 0x10044001) [ 2815.266903] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2815.267549] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 23:07:50 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000001) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x1f, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9e, 0x9, 0x3f, 0x3f, 0x0, 0x6, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x400, 0x6, 0x8, 0x9, 0x8, 0x1, 0x5, 0x0, 0x7, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000004, 0x30, r0, 0x80) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) [ 2815.268160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2815.279463] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 23:07:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0x2}], 0x1}, 0x0) 23:08:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0x2}], 0x1}, 0x0) 23:08:04 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800003e1) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:08:04 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r2, 0x2) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x180000}, 0x8001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x40000000, 0x8a4a12bdb8ac78ac}, 0xfffffffd) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000180)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r7, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000040)) 23:08:04 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 61) 23:08:04 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 73) 23:08:04 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x602641, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r1, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffff9) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCGPTPEER(r3, 0x5441, 0x4b8b) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000180)=0x4) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:08:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001) 23:08:04 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) [ 2829.497879] FAULT_INJECTION: forcing a failure. [ 2829.497879] name failslab, interval 1, probability 0, space 0, times 0 [ 2829.498904] CPU: 0 PID: 12032 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2829.499501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2829.500196] Call Trace: [ 2829.500428] dump_stack+0x107/0x167 [ 2829.500743] should_fail.cold+0x5/0xa [ 2829.501076] should_failslab+0x5/0x20 [ 2829.501404] __kmalloc_node_track_caller+0x74/0x3b0 [ 2829.501829] ? __ip_append_data+0x2930/0x3310 [ 2829.502215] __alloc_skb+0xb1/0x5b0 [ 2829.502530] __ip_append_data+0x2930/0x3310 [ 2829.502908] ? raw_destroy+0x30/0x30 [ 2829.503246] ? ip_finish_output+0x330/0x330 [ 2829.503615] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2829.504045] ? memcpy+0x39/0x60 [ 2829.504332] ? raw_destroy+0x30/0x30 [ 2829.504652] ip_append_data+0x114/0x1a0 [ 2829.504998] raw_sendmsg+0xaa6/0x29d0 [ 2829.505333] ? dst_output+0x170/0x170 [ 2829.505659] ? __lock_acquire+0x1657/0x5b00 [ 2829.506039] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2829.506482] ? SOFTIRQ_verbose+0x10/0x10 [ 2829.506837] ? create_object.isra.0+0x3ad/0xa20 [ 2829.507251] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2829.507687] ? find_held_lock+0x2c/0x110 [ 2829.508050] ? trace_hardirqs_on+0x5b/0x180 [ 2829.508420] ? dst_output+0x170/0x170 [ 2829.508748] inet_sendmsg+0x11d/0x140 [ 2829.509074] ? inet_send_prepare+0x540/0x540 [ 2829.509447] __sock_sendmsg+0x13c/0x190 [ 2829.509787] ____sys_sendmsg+0x334/0x870 [ 2829.510142] ? sock_write_iter+0x3d0/0x3d0 [ 2829.510500] ? do_recvmmsg+0x6d0/0x6d0 [ 2829.510835] ? SOFTIRQ_verbose+0x10/0x10 [ 2829.515201] ? mark_lock+0xf5/0x2df0 [ 2829.515519] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2829.515961] ___sys_sendmsg+0xf3/0x170 [ 2829.516291] ? sendmsg_copy_msghdr+0x160/0x160 [ 2829.516679] ? __fget_files+0x2cf/0x520 [ 2829.517011] ? lock_downgrade+0x6d0/0x6d0 [ 2829.517367] ? lock_downgrade+0x6d0/0x6d0 [ 2829.517719] ? __fget_files+0x2f8/0x520 [ 2829.518059] ? __fget_light+0xea/0x290 [ 2829.518392] __sys_sendmmsg+0x195/0x470 [ 2829.518730] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2829.519111] ? lock_downgrade+0x6d0/0x6d0 [ 2829.519476] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2829.519885] ? wait_for_completion_io+0x270/0x270 [ 2829.520292] ? rcu_read_lock_any_held+0x75/0xa0 [ 2829.520682] ? vfs_write+0x354/0xb10 [ 2829.520996] ? fput_many+0x2f/0x1a0 [ 2829.521304] ? ksys_write+0x1a9/0x260 [ 2829.521627] ? __ia32_sys_read+0xb0/0xb0 [ 2829.521975] __x64_sys_sendmmsg+0x99/0x100 [ 2829.522331] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.522761] do_syscall_64+0x33/0x40 [ 2829.523105] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2829.523534] RIP: 0033:0x7f7b32767b19 [ 2829.523850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.525367] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2829.526002] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2829.526595] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2829.527210] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2829.527808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2829.528402] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 [ 2829.536317] FAULT_INJECTION: forcing a failure. [ 2829.536317] name failslab, interval 1, probability 0, space 0, times 0 [ 2829.537684] CPU: 1 PID: 12020 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2829.538269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2829.538966] Call Trace: [ 2829.539224] dump_stack+0x107/0x167 [ 2829.539546] should_fail.cold+0x5/0xa [ 2829.539882] ? create_object.isra.0+0x3a/0xa20 [ 2829.540284] should_failslab+0x5/0x20 [ 2829.540617] kmem_cache_alloc+0x5b/0x310 [ 2829.540978] create_object.isra.0+0x3a/0xa20 [ 2829.541362] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2829.541809] kmem_cache_alloc_node+0x169/0x330 [ 2829.542207] __alloc_skb+0x6d/0x5b0 [ 2829.542524] __ip_append_data+0x2930/0x3310 [ 2829.542902] ? raw_destroy+0x30/0x30 [ 2829.543256] ? ip_finish_output+0x330/0x330 [ 2829.543626] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2829.544059] ? memcpy+0x39/0x60 [ 2829.544345] ? raw_destroy+0x30/0x30 [ 2829.544663] ip_append_data+0x114/0x1a0 [ 2829.545011] raw_sendmsg+0xaa6/0x29d0 [ 2829.545347] ? dst_output+0x170/0x170 [ 2829.545671] ? __lock_acquire+0x1657/0x5b00 [ 2829.546052] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2829.546496] ? SOFTIRQ_verbose+0x10/0x10 [ 2829.546843] ? create_object.isra.0+0x3ad/0xa20 [ 2829.547271] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2829.547702] ? find_held_lock+0x2c/0x110 [ 2829.548063] ? trace_hardirqs_on+0x5b/0x180 [ 2829.548430] ? dst_output+0x170/0x170 [ 2829.548754] inet_sendmsg+0x11d/0x140 [ 2829.549074] ? inet_send_prepare+0x540/0x540 [ 2829.549444] __sock_sendmsg+0x13c/0x190 [ 2829.549781] ____sys_sendmsg+0x334/0x870 [ 2829.550126] ? sock_write_iter+0x3d0/0x3d0 [ 2829.550481] ? do_recvmmsg+0x6d0/0x6d0 [ 2829.550812] ? SOFTIRQ_verbose+0x10/0x10 [ 2829.551172] ? mark_lock+0xf5/0x2df0 [ 2829.551490] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2829.551935] ___sys_sendmsg+0xf3/0x170 [ 2829.552268] ? sendmsg_copy_msghdr+0x160/0x160 [ 2829.552656] ? __fget_files+0x2cf/0x520 [ 2829.552992] ? lock_downgrade+0x6d0/0x6d0 [ 2829.553348] ? lock_downgrade+0x6d0/0x6d0 [ 2829.553703] ? __fget_files+0x2f8/0x520 [ 2829.554045] ? __fget_light+0xea/0x290 [ 2829.554380] __sys_sendmmsg+0x195/0x470 [ 2829.554720] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2829.555106] ? lock_downgrade+0x6d0/0x6d0 [ 2829.555471] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2829.555880] ? wait_for_completion_io+0x270/0x270 [ 2829.556290] ? rcu_read_lock_any_held+0x75/0xa0 [ 2829.556682] ? vfs_write+0x354/0xb10 [ 2829.556998] ? fput_many+0x2f/0x1a0 [ 2829.557308] ? ksys_write+0x1a9/0x260 [ 2829.557633] ? __ia32_sys_read+0xb0/0xb0 [ 2829.557984] __x64_sys_sendmmsg+0x99/0x100 [ 2829.558349] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.558782] do_syscall_64+0x33/0x40 [ 2829.559119] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2829.559549] RIP: 0033:0x7f6f45c0ab19 [ 2829.559865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.561398] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2829.562037] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2829.562633] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2829.563254] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2829.563846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2829.564438] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 23:08:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001) 23:08:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0x2}], 0x1}, 0x0) 23:08:04 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x9, 0x7f) 23:08:04 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r5, 0x2) ioctl$VT_DISALLOCATE(r5, 0x5608) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:08:04 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:08:04 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800003e7) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:08:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001) 23:08:04 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 74) 23:08:04 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 62) [ 2829.747953] FAULT_INJECTION: forcing a failure. [ 2829.747953] name failslab, interval 1, probability 0, space 0, times 0 [ 2829.749073] CPU: 1 PID: 12054 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2829.749652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2829.750343] Call Trace: [ 2829.750582] dump_stack+0x107/0x167 [ 2829.750895] should_fail.cold+0x5/0xa [ 2829.751245] should_failslab+0x5/0x20 [ 2829.751569] __kmalloc_node_track_caller+0x74/0x3b0 [ 2829.751990] ? __ip_append_data+0x2930/0x3310 [ 2829.752375] __alloc_skb+0xb1/0x5b0 [ 2829.752689] __ip_append_data+0x2930/0x3310 [ 2829.753066] ? raw_destroy+0x30/0x30 [ 2829.753393] ? ip_finish_output+0x330/0x330 [ 2829.753759] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2829.754186] ? memcpy+0x39/0x60 [ 2829.754469] ? raw_destroy+0x30/0x30 [ 2829.754785] ip_append_data+0x114/0x1a0 [ 2829.755142] raw_sendmsg+0xaa6/0x29d0 [ 2829.755474] ? dst_output+0x170/0x170 [ 2829.755797] ? __lock_acquire+0x1657/0x5b00 [ 2829.756173] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2829.756613] ? SOFTIRQ_verbose+0x10/0x10 [ 2829.756956] ? create_object.isra.0+0x3ad/0xa20 [ 2829.757360] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2829.757792] ? find_held_lock+0x2c/0x110 [ 2829.758147] ? trace_hardirqs_on+0x5b/0x180 [ 2829.758514] ? dst_output+0x170/0x170 [ 2829.758839] inet_sendmsg+0x11d/0x140 [ 2829.759178] ? inet_send_prepare+0x540/0x540 [ 2829.759549] __sock_sendmsg+0x13c/0x190 [ 2829.759889] ____sys_sendmsg+0x334/0x870 [ 2829.760235] ? sock_write_iter+0x3d0/0x3d0 [ 2829.760594] ? do_recvmmsg+0x6d0/0x6d0 [ 2829.760926] ? SOFTIRQ_verbose+0x10/0x10 [ 2829.761268] ? mark_lock+0xf5/0x2df0 [ 2829.761588] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2829.762033] ___sys_sendmsg+0xf3/0x170 [ 2829.762365] ? sendmsg_copy_msghdr+0x160/0x160 [ 2829.762754] ? __fget_files+0x2cf/0x520 [ 2829.763104] ? lock_downgrade+0x6d0/0x6d0 [ 2829.763458] ? lock_downgrade+0x6d0/0x6d0 [ 2829.763814] ? __fget_files+0x2f8/0x520 [ 2829.764162] ? __fget_light+0xea/0x290 [ 2829.764500] __sys_sendmmsg+0x195/0x470 [ 2829.764842] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2829.765206] ? lock_downgrade+0x6d0/0x6d0 [ 2829.765571] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2829.765982] ? wait_for_completion_io+0x270/0x270 [ 2829.766392] ? rcu_read_lock_any_held+0x75/0xa0 [ 2829.766788] ? vfs_write+0x354/0xb10 [ 2829.767126] ? fput_many+0x2f/0x1a0 [ 2829.767437] ? ksys_write+0x1a9/0x260 [ 2829.767761] ? __ia32_sys_read+0xb0/0xb0 [ 2829.768110] __x64_sys_sendmmsg+0x99/0x100 [ 2829.768469] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.768901] do_syscall_64+0x33/0x40 [ 2829.769215] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2829.769645] RIP: 0033:0x7f7b32767b19 [ 2829.769961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.771503] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2829.772142] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2829.772737] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2829.773332] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2829.773926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2829.774521] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:08:04 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:08:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001) [ 2829.817071] FAULT_INJECTION: forcing a failure. [ 2829.817071] name failslab, interval 1, probability 0, space 0, times 0 [ 2829.818130] CPU: 0 PID: 12057 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2829.818710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2829.819414] Call Trace: [ 2829.819646] dump_stack+0x107/0x167 [ 2829.819958] should_fail.cold+0x5/0xa [ 2829.820284] ? create_object.isra.0+0x3a/0xa20 [ 2829.820681] should_failslab+0x5/0x20 [ 2829.821007] kmem_cache_alloc+0x5b/0x310 [ 2829.821357] create_object.isra.0+0x3a/0xa20 [ 2829.821730] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2829.822164] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2829.822594] ? __ip_append_data+0x2930/0x3310 [ 2829.822988] __alloc_skb+0xb1/0x5b0 [ 2829.823309] __ip_append_data+0x2930/0x3310 [ 2829.823688] ? raw_destroy+0x30/0x30 [ 2829.824016] ? ip_finish_output+0x330/0x330 [ 2829.824384] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2829.824814] ? memcpy+0x39/0x60 [ 2829.825100] ? raw_destroy+0x30/0x30 [ 2829.825418] ip_append_data+0x114/0x1a0 [ 2829.825765] raw_sendmsg+0xaa6/0x29d0 [ 2829.826102] ? dst_output+0x170/0x170 [ 2829.826427] ? __lock_acquire+0x1657/0x5b00 [ 2829.826812] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2829.827269] ? SOFTIRQ_verbose+0x10/0x10 [ 2829.827616] ? create_object.isra.0+0x3ad/0xa20 [ 2829.828022] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2829.828458] ? find_held_lock+0x2c/0x110 [ 2829.828816] ? trace_hardirqs_on+0x5b/0x180 [ 2829.829186] ? dst_output+0x170/0x170 [ 2829.829515] inet_sendmsg+0x11d/0x140 [ 2829.829845] ? inet_send_prepare+0x540/0x540 [ 2829.830219] __sock_sendmsg+0x13c/0x190 [ 2829.830560] ____sys_sendmsg+0x334/0x870 [ 2829.830910] ? sock_write_iter+0x3d0/0x3d0 [ 2829.831281] ? do_recvmmsg+0x6d0/0x6d0 [ 2829.831616] ? SOFTIRQ_verbose+0x10/0x10 [ 2829.831963] ? mark_lock+0xf5/0x2df0 [ 2829.832284] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2829.832740] ___sys_sendmsg+0xf3/0x170 [ 2829.833075] ? sendmsg_copy_msghdr+0x160/0x160 [ 2829.833467] ? __fget_files+0x2cf/0x520 [ 2829.833808] ? lock_downgrade+0x6d0/0x6d0 [ 2829.834164] ? lock_downgrade+0x6d0/0x6d0 [ 2829.834523] ? __fget_files+0x2f8/0x520 [ 2829.834869] ? __fget_light+0xea/0x290 [ 2829.835223] __sys_sendmmsg+0x195/0x470 [ 2829.835565] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2829.835936] ? lock_downgrade+0x6d0/0x6d0 [ 2829.836302] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2829.836713] ? wait_for_completion_io+0x270/0x270 [ 2829.837123] ? rcu_read_lock_any_held+0x75/0xa0 [ 2829.837514] ? vfs_write+0x354/0xb10 [ 2829.837833] ? fput_many+0x2f/0x1a0 [ 2829.838145] ? ksys_write+0x1a9/0x260 [ 2829.838470] ? __ia32_sys_read+0xb0/0xb0 [ 2829.838822] __x64_sys_sendmmsg+0x99/0x100 [ 2829.839201] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.839635] do_syscall_64+0x33/0x40 [ 2829.839951] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2829.840382] RIP: 0033:0x7f6f45c0ab19 [ 2829.840700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.842231] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2829.842876] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2829.843490] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2829.844089] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2829.844689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2829.845289] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 23:08:05 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:08:05 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000002c0)=""/90, 0x5a}, {&(0x7f0000000340)=""/13, 0xd}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000000440)=""/79, 0x4f}], 0x6, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x2103) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) fcntl$setstatus(r6, 0x4, 0x42000) ioctl$TIOCL_SETVESABLANK(r5, 0x541c, &(0x7f0000000600)) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) close(0xffffffffffffffff) 23:08:05 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:08:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x139804, 0x0) dup2(0xffffffffffffffff, r3) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) flock(r4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x7, 0x6, 0x5, 0x2}, {0x6, 0x22, 0x20, 0x5}]}) 23:08:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001) 23:08:05 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800003eb) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) [ 2829.913239] tmpfs: Unknown parameter ' [ 2829.913239] ' [ 2830.144153] audit: type=1326 audit(1727824085.321:137): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12068 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83ae7c1b19 code=0x0 23:08:19 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 75) 23:08:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001) 23:08:19 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r0, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'veth0_to_bridge\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000001) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, 0xffffffffffffffff, 0x2) sendfile(r5, 0xffffffffffffffff, 0x0, 0x7) r6 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) copy_file_range(r6, 0x0, r4, 0x0, 0x6, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) 23:08:19 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800003f2) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:08:19 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 63) 23:08:19 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) 23:08:19 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/ldiscs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x1, 0x6, 0x4, 0x7f, 0x0, 0x3ff, 0x800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0xf6e984e08249bd6f, @perf_config_ext={0x400000, 0x8001}, 0x20, 0xa2, 0x5fc7, 0x1, 0x4, 0x8001, 0x200, 0x0, 0x9, 0x0, 0x3336}, 0xffffffffffffffff, 0x2, r1, 0x9) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$setflags(r1, 0x2, 0x1) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) splice(r3, &(0x7f0000000280)=0x80000000, r2, &(0x7f00000002c0)=0x1, 0x8, 0x7) close(0xffffffffffffffff) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r5, 0x2) fsetxattr$security_selinux(r5, &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:08:19 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0x63, 0x80000001) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) [ 2844.055180] FAULT_INJECTION: forcing a failure. [ 2844.055180] name failslab, interval 1, probability 0, space 0, times 0 [ 2844.056444] CPU: 1 PID: 12091 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2844.057073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2844.057832] Call Trace: [ 2844.058092] dump_stack+0x107/0x167 [ 2844.058439] should_fail.cold+0x5/0xa [ 2844.058802] ? create_object.isra.0+0x3a/0xa20 [ 2844.059248] should_failslab+0x5/0x20 [ 2844.059606] kmem_cache_alloc+0x5b/0x310 [ 2844.059993] create_object.isra.0+0x3a/0xa20 [ 2844.060405] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2844.060881] kmem_cache_alloc_node+0x169/0x330 [ 2844.061316] __alloc_skb+0x6d/0x5b0 [ 2844.061668] __ip_append_data+0x2930/0x3310 [ 2844.062084] ? raw_destroy+0x30/0x30 [ 2844.062449] ? ip_finish_output+0x330/0x330 [ 2844.062856] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2844.063347] ? memcpy+0x39/0x60 [ 2844.063664] ? raw_destroy+0x30/0x30 [ 2844.063912] FAULT_INJECTION: forcing a failure. [ 2844.063912] name failslab, interval 1, probability 0, space 0, times 0 [ 2844.064004] ip_append_data+0x114/0x1a0 [ 2844.065220] raw_sendmsg+0xaa6/0x29d0 [ 2844.065577] ? dst_output+0x170/0x170 [ 2844.065914] ? __lock_acquire+0x1657/0x5b00 [ 2844.066300] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2844.066773] ? SOFTIRQ_verbose+0x10/0x10 [ 2844.067130] ? create_object.isra.0+0x3ad/0xa20 [ 2844.067565] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2844.068009] ? find_held_lock+0x2c/0x110 [ 2844.068369] ? trace_hardirqs_on+0x5b/0x180 [ 2844.068769] ? dst_output+0x170/0x170 [ 2844.069100] inet_sendmsg+0x11d/0x140 [ 2844.069434] ? inet_send_prepare+0x540/0x540 [ 2844.069829] __sock_sendmsg+0x13c/0x190 [ 2844.070407] ____sys_sendmsg+0x334/0x870 [ 2844.071198] ? sock_write_iter+0x3d0/0x3d0 [ 2844.071974] ? do_recvmmsg+0x6d0/0x6d0 [ 2844.072693] ? SOFTIRQ_verbose+0x10/0x10 [ 2844.073400] ? mark_lock+0xf5/0x2df0 [ 2844.074085] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2844.075030] ___sys_sendmsg+0xf3/0x170 [ 2844.075905] ? sendmsg_copy_msghdr+0x160/0x160 [ 2844.076735] ? __fget_files+0x2cf/0x520 [ 2844.077423] ? lock_downgrade+0x6d0/0x6d0 [ 2844.078169] ? lock_downgrade+0x6d0/0x6d0 [ 2844.078926] ? __fget_files+0x2f8/0x520 [ 2844.079799] ? __fget_light+0xea/0x290 [ 2844.080502] __sys_sendmmsg+0x195/0x470 [ 2844.081217] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2844.082010] ? lock_downgrade+0x6d0/0x6d0 [ 2844.082788] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2844.083832] ? wait_for_completion_io+0x270/0x270 [ 2844.084714] ? rcu_read_lock_any_held+0x75/0xa0 [ 2844.085547] ? vfs_write+0x354/0xb10 [ 2844.086209] ? fput_many+0x2f/0x1a0 [ 2844.086883] ? ksys_write+0x1a9/0x260 [ 2844.087737] ? __ia32_sys_read+0xb0/0xb0 [ 2844.088457] __x64_sys_sendmmsg+0x99/0x100 [ 2844.089216] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2844.090147] do_syscall_64+0x33/0x40 [ 2844.090833] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2844.091951] RIP: 0033:0x7f7b32767b19 [ 2844.092628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2844.096172] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2844.097552] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2844.098839] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2844.100398] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2844.101708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2844.102985] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 [ 2844.104657] CPU: 0 PID: 12101 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2844.105376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2844.106224] Call Trace: [ 2844.106510] dump_stack+0x107/0x167 [ 2844.106889] should_fail.cold+0x5/0xa [ 2844.107259] ? create_object.isra.0+0x3a/0xa20 [ 2844.107648] should_failslab+0x5/0x20 [ 2844.107980] kmem_cache_alloc+0x5b/0x310 [ 2844.108343] create_object.isra.0+0x3a/0xa20 [ 2844.108725] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2844.109166] kmem_cache_alloc_node+0x169/0x330 [ 2844.109569] __alloc_skb+0x6d/0x5b0 [ 2844.109895] __ip_append_data+0x2930/0x3310 [ 2844.110282] ? raw_destroy+0x30/0x30 [ 2844.110622] ? ip_finish_output+0x330/0x330 [ 2844.110998] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2844.111455] ? memcpy+0x39/0x60 [ 2844.111738] ? raw_destroy+0x30/0x30 [ 2844.112067] ip_append_data+0x114/0x1a0 [ 2844.112425] raw_sendmsg+0xaa6/0x29d0 [ 2844.112774] ? dst_output+0x170/0x170 [ 2844.113109] ? __lock_acquire+0x1657/0x5b00 [ 2844.113501] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2844.113959] ? SOFTIRQ_verbose+0x10/0x10 [ 2844.114312] ? create_object.isra.0+0x3ad/0xa20 [ 2844.114728] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2844.115185] ? find_held_lock+0x2c/0x110 [ 2844.115556] ? trace_hardirqs_on+0x5b/0x180 [ 2844.115941] ? dst_output+0x170/0x170 [ 2844.116277] inet_sendmsg+0x11d/0x140 [ 2844.116610] ? inet_send_prepare+0x540/0x540 [ 2844.116990] __sock_sendmsg+0x13c/0x190 [ 2844.117340] ____sys_sendmsg+0x334/0x870 [ 2844.117700] ? sock_write_iter+0x3d0/0x3d0 [ 2844.118066] ? do_recvmmsg+0x6d0/0x6d0 [ 2844.118410] ? SOFTIRQ_verbose+0x10/0x10 [ 2844.118764] ? mark_lock+0xf5/0x2df0 [ 2844.119100] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2844.119562] ___sys_sendmsg+0xf3/0x170 [ 2844.119880] ? sendmsg_copy_msghdr+0x160/0x160 [ 2844.120281] ? __fget_files+0x2cf/0x520 [ 2844.120632] ? lock_downgrade+0x6d0/0x6d0 [ 2844.121003] ? lock_downgrade+0x6d0/0x6d0 [ 2844.121373] ? __fget_files+0x2f8/0x520 [ 2844.121734] ? __fget_light+0xea/0x290 [ 2844.122085] __sys_sendmmsg+0x195/0x470 [ 2844.122441] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2844.122829] ? lock_downgrade+0x6d0/0x6d0 [ 2844.123221] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2844.123663] ? wait_for_completion_io+0x270/0x270 [ 2844.124079] ? rcu_read_lock_any_held+0x75/0xa0 [ 2844.124486] ? vfs_write+0x354/0xb10 [ 2844.124814] ? fput_many+0x2f/0x1a0 [ 2844.125136] ? ksys_write+0x1a9/0x260 [ 2844.125576] ? __ia32_sys_read+0xb0/0xb0 [ 2844.125942] __x64_sys_sendmmsg+0x99/0x100 [ 2844.126514] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2844.126963] do_syscall_64+0x33/0x40 [ 2844.127308] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2844.127744] RIP: 0033:0x7f6f45c0ab19 [ 2844.128073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2844.129610] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2844.130258] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2844.130863] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2844.131485] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2844.132091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2844.132698] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 23:08:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001) 23:08:19 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) 23:08:19 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$CDROMRESET(r1, 0x5312) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/28, 0x1c}, {&(0x7f0000000240)=""/130, 0x82}], 0x2) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:08:34 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) fchown(r0, r2, 0xee00) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) 23:08:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x3, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000380)={0x3, &(0x7f0000000300)=[{0xba0, 0x6f, &(0x7f0000000180)="a39e8e8d9ae92847631dcd4884da581c05039d89e094b683c349bd6208e8b92ec31953045a4bf472c9a2adb22c5e31c86f3cadb9229219c4a1a1251aac847b6457dd8e23674fd6910dd8d2fe2aac72966bf823b12c12b31b58146e48ff92908f337174b4eb5105d9c18e5c83a6d430"}, {0x80, 0x0, &(0x7f0000000240), 0x0, 0x1}, {0x7, 0x52, &(0x7f0000000280)="b063e4481d2270cffe6b74963bfff9c22628150d3745dea28d987890d91058ac841cfd03d5fe908fdf04da9bc71f9d9d35d51128989c940e40b42e9c5ba9afbac5f6a531d40f19dc6938b7abc176b92e849e", 0x1}]}) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r4, 0x2) connect$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x5fa, @none, 0x72ac, 0x1}, 0xe) r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:08:34 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 64) 23:08:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001) 23:08:34 executing program 3: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004880)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000240)}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/201, 0xc9}, {&(0x7f00000003c0)=""/154, 0x9a}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="cfa6a738f93a21da000000000100000002000800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xe8}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/186, 0xba}], 0x2, &(0x7f0000001740)}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001840)=""/89, 0x59}], 0x1, &(0x7f0000001900)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001980), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a00)=""/4, 0x4}, {&(0x7f0000001a40)=""/63, 0x3f}, {&(0x7f0000001a80)=""/64, 0x40}, {&(0x7f0000001ac0)=""/158, 0x9e}, {&(0x7f0000001b80)=""/222, 0xde}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/249, 0xf9}], 0x7, &(0x7f0000001e80)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}}, {{&(0x7f0000001ec0)=@abs, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001f40)=""/129, 0x81}, {&(0x7f0000002000)=""/6, 0x6}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000002040)=""/2, 0x2}], 0x4, &(0x7f00000020c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002100)=@abs, 0x6e, &(0x7f0000002580)=[{&(0x7f0000002180)=""/188, 0xbc}, {&(0x7f0000002240)=""/239, 0xef}, {&(0x7f0000002340)=""/118, 0x76}, {&(0x7f00000023c0)=""/158, 0x9e}, {&(0x7f0000002480)=""/217, 0xd9}], 0x5, &(0x7f0000004740)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}], 0x6, 0x100, &(0x7f0000002600)={0x0, 0x3938700}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r0, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x1, 0x2, 0x0, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000040)=0xb, 0x80000001) fchown(r3, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000004e40)=[{&(0x7f0000004a00)=""/223, 0xdf}, {&(0x7f0000004b00)=""/173, 0xad}, {&(0x7f0000004bc0)=""/183, 0xb7}, {&(0x7f0000004c80)=""/133, 0x85}, {&(0x7f0000004d40)=""/220, 0xdc}, {&(0x7f0000002680)=""/123, 0x7b}], 0x6) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r4, 0x2) perf_event_open(&(0x7f0000004f00)={0x5, 0x80, 0x5, 0xff, 0x3, 0xff, 0x0, 0x84e8, 0x2901, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000004ec0), 0xe}, 0x52040, 0xffff, 0x8, 0x4, 0x8001, 0x4, 0xff01, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x3, r4, 0x8) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x29010, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x1, 0x0, 0x42}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r5, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000040)) r6 = open(&(0x7f0000000000)='./file0\x00', 0xa00, 0x2) ioctl$TIOCGPTPEER(r6, 0x5441, 0x6) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000240), &(0x7f0000002640)=0xc) 23:08:34 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = signalfd(r1, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r2, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) 23:08:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800003f4) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:08:34 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 76) [ 2859.159926] FAULT_INJECTION: forcing a failure. [ 2859.159926] name failslab, interval 1, probability 0, space 0, times 0 [ 2859.161316] CPU: 1 PID: 12140 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2859.161913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2859.162616] Call Trace: [ 2859.162851] dump_stack+0x107/0x167 [ 2859.163176] should_fail.cold+0x5/0xa [ 2859.163540] ? create_object.isra.0+0x3a/0xa20 [ 2859.163930] should_failslab+0x5/0x20 [ 2859.164255] kmem_cache_alloc+0x5b/0x310 [ 2859.164602] create_object.isra.0+0x3a/0xa20 [ 2859.164972] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2859.165404] kmem_cache_alloc_node+0x169/0x330 [ 2859.165795] __alloc_skb+0x6d/0x5b0 [ 2859.166111] __ip_append_data+0x2930/0x3310 [ 2859.166488] ? raw_destroy+0x30/0x30 [ 2859.166811] ? ip_finish_output+0x330/0x330 [ 2859.167193] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2859.167648] ? memcpy+0x39/0x60 [ 2859.167932] ? raw_destroy+0x30/0x30 [ 2859.168248] ip_append_data+0x114/0x1a0 [ 2859.168593] raw_sendmsg+0xaa6/0x29d0 [ 2859.168926] ? dst_output+0x170/0x170 [ 2859.169250] ? __lock_acquire+0x1657/0x5b00 [ 2859.169629] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2859.170070] ? SOFTIRQ_verbose+0x10/0x10 [ 2859.170412] ? create_object.isra.0+0x3ad/0xa20 [ 2859.170832] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2859.171317] ? find_held_lock+0x2c/0x110 [ 2859.171690] ? trace_hardirqs_on+0x5b/0x180 [ 2859.172057] ? dst_output+0x170/0x170 [ 2859.172389] inet_sendmsg+0x11d/0x140 [ 2859.172729] ? inet_send_prepare+0x540/0x540 [ 2859.173113] __sock_sendmsg+0x13c/0x190 [ 2859.173465] ____sys_sendmsg+0x334/0x870 [ 2859.173827] ? sock_write_iter+0x3d0/0x3d0 [ 2859.174197] ? do_recvmmsg+0x6d0/0x6d0 [ 2859.174538] ? SOFTIRQ_verbose+0x10/0x10 [ 2859.174883] ? mark_lock+0xf5/0x2df0 [ 2859.175232] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2859.175686] ___sys_sendmsg+0xf3/0x170 [ 2859.176018] ? sendmsg_copy_msghdr+0x160/0x160 [ 2859.176408] ? __fget_files+0x2cf/0x520 [ 2859.176748] ? lock_downgrade+0x6d0/0x6d0 [ 2859.177106] ? lock_downgrade+0x6d0/0x6d0 [ 2859.177478] ? __fget_files+0x2f8/0x520 [ 2859.177834] ? __fget_light+0xea/0x290 [ 2859.178183] __sys_sendmmsg+0x195/0x470 [ 2859.178533] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2859.178906] ? lock_downgrade+0x6d0/0x6d0 [ 2859.183316] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2859.183726] ? wait_for_completion_io+0x270/0x270 [ 2859.184134] ? rcu_read_lock_any_held+0x75/0xa0 [ 2859.184524] ? vfs_write+0x354/0xb10 [ 2859.184841] ? fput_many+0x2f/0x1a0 [ 2859.185150] ? ksys_write+0x1a9/0x260 [ 2859.185474] ? __ia32_sys_read+0xb0/0xb0 [ 2859.185822] __x64_sys_sendmmsg+0x99/0x100 [ 2859.186180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2859.186625] do_syscall_64+0x33/0x40 [ 2859.186943] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2859.187394] RIP: 0033:0x7f7b32767b19 [ 2859.187727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2859.189264] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2859.189904] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2859.190500] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2859.191096] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2859.191751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2859.192353] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:08:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001) [ 2859.205718] FAULT_INJECTION: forcing a failure. [ 2859.205718] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2859.206859] CPU: 0 PID: 12131 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2859.207459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2859.208150] Call Trace: [ 2859.208383] dump_stack+0x107/0x167 [ 2859.208698] should_fail.cold+0x5/0xa [ 2859.209031] __alloc_pages_nodemask+0x182/0x600 [ 2859.209429] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2859.209951] alloc_pages_current+0x187/0x280 [ 2859.210329] allocate_slab+0x26f/0x380 [ 2859.210665] ___slab_alloc+0x470/0x700 [ 2859.211001] ? __alloc_skb+0x6d/0x5b0 [ 2859.211348] ? lock_is_held_type+0xd2/0x110 [ 2859.211719] ? __alloc_skb+0x6d/0x5b0 [ 2859.212048] ? kmem_cache_alloc_node+0x313/0x330 [ 2859.212450] kmem_cache_alloc_node+0x313/0x330 [ 2859.212843] __alloc_skb+0x6d/0x5b0 [ 2859.213166] __ip_append_data+0x2930/0x3310 [ 2859.213545] ? raw_destroy+0x30/0x30 [ 2859.213872] ? ip_finish_output+0x330/0x330 [ 2859.214239] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2859.214670] ? memcpy+0x39/0x60 [ 2859.214954] ? raw_destroy+0x30/0x30 [ 2859.215298] ip_append_data+0x114/0x1a0 [ 2859.215647] raw_sendmsg+0xaa6/0x29d0 [ 2859.215985] ? dst_output+0x170/0x170 [ 2859.216311] ? __lock_acquire+0x1657/0x5b00 [ 2859.216692] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2859.217142] ? SOFTIRQ_verbose+0x10/0x10 [ 2859.217490] ? create_object.isra.0+0x3ad/0xa20 [ 2859.217896] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2859.218332] ? find_held_lock+0x2c/0x110 [ 2859.218690] ? trace_hardirqs_on+0x5b/0x180 [ 2859.219065] ? dst_output+0x170/0x170 [ 2859.219428] inet_sendmsg+0x11d/0x140 [ 2859.219755] ? inet_send_prepare+0x540/0x540 [ 2859.220132] __sock_sendmsg+0x13c/0x190 [ 2859.220474] ____sys_sendmsg+0x334/0x870 [ 2859.220828] ? sock_write_iter+0x3d0/0x3d0 [ 2859.221193] ? do_recvmmsg+0x6d0/0x6d0 [ 2859.221532] ? SOFTIRQ_verbose+0x10/0x10 [ 2859.221879] ? mark_lock+0xf5/0x2df0 [ 2859.222201] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2859.222654] ___sys_sendmsg+0xf3/0x170 [ 2859.222991] ? sendmsg_copy_msghdr+0x160/0x160 [ 2859.223416] ? __fget_files+0x2cf/0x520 [ 2859.223758] ? lock_downgrade+0x6d0/0x6d0 [ 2859.224119] ? lock_downgrade+0x6d0/0x6d0 [ 2859.224480] ? __fget_files+0x2f8/0x520 [ 2859.224829] ? __fget_light+0xea/0x290 [ 2859.225169] __sys_sendmmsg+0x195/0x470 [ 2859.225516] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2859.225885] ? lock_downgrade+0x6d0/0x6d0 [ 2859.226260] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2859.226677] ? wait_for_completion_io+0x270/0x270 [ 2859.227092] ? rcu_read_lock_any_held+0x75/0xa0 [ 2859.227511] ? vfs_write+0x354/0xb10 [ 2859.227832] ? fput_many+0x2f/0x1a0 [ 2859.228145] ? ksys_write+0x1a9/0x260 [ 2859.228474] ? __ia32_sys_read+0xb0/0xb0 [ 2859.228829] __x64_sys_sendmmsg+0x99/0x100 [ 2859.229198] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2859.229637] do_syscall_64+0x33/0x40 [ 2859.229958] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2859.230396] RIP: 0033:0x7f6f45c0ab19 [ 2859.230719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2859.232289] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2859.232937] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2859.233540] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2859.234146] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 23:08:34 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = signalfd(r1, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r2, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x3) [ 2859.234748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2859.235381] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 23:08:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xfa, 0x27, 0xff, 0x82, 0x0, 0x5, 0x401, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000300), 0x7}, 0x404, 0x7fffffff, 0x4, 0x2, 0xfff, 0x7, 0x6, 0x0, 0x4, 0x0, 0x9}, 0x0, 0x9, r4, 0x3) r5 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x7, 0x81, 0x1, 0x0, 0x4, 0x9000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x1, 0x7, 0x8, 0x1, 0xfffffffffffffffb, 0x678a, 0x5, 0x0, 0x2, 0x0, 0x4}, 0x0, 0x3, r0, 0x8) fcntl$notify(r5, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r6 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r7, 0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x80489439, &(0x7f0000000180)) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:08:34 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1704, &(0x7f0000000180)={0x0, 0xb738, 0x10, 0x1, 0x1e3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000200)) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000240)={0xa, 0x4e20, 0xdfc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000280)="379ea613ec6cf79db703d5a3f1ad4438be3940e0d0a9342413a5fcd3662fb819ebbce11a0df9c8a55c7d91bd13f7927984ef8113c6effc5aa001d16c19954925a7830aab7b59443a55ec192064d565e48718e6e959a2a41caec6c5723cb2f85109f737ba7edbe64928acf6363e7ab25795edecd7a18bc41ef5ff42c2cfee7f22332ab37038dc595adeea9cc8b035457c91382bade86f7dc8003a2ea8ede48771d80820eb6b8a542dc378964e", 0xac}, {&(0x7f0000000340)="f62eb70c46fcdedc592cbbc68d21319a50ca0ad67cd75f0dfcdf52b9e26eb022afa60f43c1e29d3c30f90722c0c2a015b122c47fa85aac904c515119c93f728e862215f04ff83559b24cfb4073ba60cfaf26712e44eb519d92238320c5b1757945304003278084d2b9016dd284382edc272fa05799b5fb66aae7964ce79b65647a63968799857162b3f6b38422ea25033fcb78f64c6f23de9635900c4aaf266a79d0bb40dfaf78ec1a7c2d262fa6cb10f8bbb9c786ecc2d7a21e75a73940f2fd05da7d8532648f0d74c96aee429899cf8b32bf1edbcdea9bacb53797437b583690c56b85a7", 0xe5}, {&(0x7f0000000440)="8d1c37f7c8db18", 0x7}, {&(0x7f0000000480)="cc313ecbd53b292d3aba09bd505d5b0e15f5808c3db56513483cb3e981b3d5b1481a98ca802dcaef47415c2bfc0354338611cc8b08a1c1c602f1f0db7ff6b78219d6e33276786b45f8a9b31dfea8d184f29c288be5dc2e21879e83c408b617759480ca3acd2ea8b0ca0e514cd0d92098817602dd24b8d9d4befbd715eb8901", 0x7f}, {&(0x7f0000000500)="bdaa745e3c", 0x5}], 0x5, &(0x7f00000005c0)=[@tclass={{0x14}}, @dstopts={{0x188, 0x29, 0x37, {0x2f, 0x2d, '\x00', [@jumbo={0xc2, 0x4, 0xfff}, @calipso={0x7, 0x40, {0x0, 0xe, 0x3, 0x1, [0x9, 0x80000000, 0x8, 0x101, 0x22b, 0x9, 0xe60]}}, @generic={0x1f, 0x69, "f90ce8c2bc97932b2c356af15a28023a2a12547ab3d3e5cbca443cae86a4b1d9c57ddd13cf16010036355d7a35575b9e40fc26a766b58ae06ff1e9f0f2acf7bcb6a2675245cf745b7286de12097e7a2d9bd949c29d1fbb248e9f23c9310a114bab1e377ee6f74aa9e5"}, @ra={0x5, 0x2, 0x401}, @generic={0x0, 0xb0, "3e79a673a09797a57080d9a4de07b3df129fa6b8d5b5b9aafee4ce81db7ca816265b6477573083e620a42a6efe4e62eb21972b8ea16a88379b2f115921e85be7a45744e0e17ca1d3af6e57bbb5f7a962156d7e5294c2bd660ac8b48bb9dd42e12eb613eb3f9770721d57594352180dd0d8876d9102b6f108bf03e21b9e4eb21e601711f0d60945b912336f8995509396ccce819402e472cd73707f49561d048ee02b1d767d12273d6addcc70ff4209aa"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x5c, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x28, {0x0, 0x8, 0x28, 0x5, [0x2, 0x800, 0x2, 0x2]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffa}}, @hopopts_2292={{0x98, 0x29, 0x36, {0x5e, 0xf, '\x00', [@ra={0x5, 0x2, 0x86}, @calipso={0x7, 0x50, {0x0, 0x12, 0xd4, 0xffff, [0x2, 0xe36, 0x100000001, 0x9, 0x101, 0x8, 0xfb, 0x4, 0x2]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @hao={0xc9, 0x10, @private2}, @pad1]}}}], 0x2e0}, 0x8001) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) 23:08:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)}], 0x1}, 0x10044001) 23:08:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) (fail_nth: 1) 23:08:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800003fc) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) [ 2859.313630] FAULT_INJECTION: forcing a failure. [ 2859.313630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2859.316301] CPU: 0 PID: 12155 Comm: syz-executor.5 Not tainted 5.10.226 #1 [ 2859.317832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2859.319687] Call Trace: [ 2859.320245] dump_stack+0x107/0x167 [ 2859.321021] should_fail.cold+0x5/0xa [ 2859.321849] _copy_from_user+0x2e/0x1b0 [ 2859.322726] __copy_msghdr_from_user+0x91/0x4b0 [ 2859.323762] ? __ia32_sys_shutdown+0x80/0x80 [ 2859.324738] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2859.325874] ? SOFTIRQ_verbose+0x10/0x10 [ 2859.326783] ? __lock_acquire+0xbb1/0x5b00 [ 2859.327722] sendmsg_copy_msghdr+0xa1/0x160 [ 2859.328643] ? do_recvmmsg+0x6d0/0x6d0 [ 2859.329475] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2859.330618] ? SOFTIRQ_verbose+0x10/0x10 [ 2859.331506] ? lock_downgrade+0x6d0/0x6d0 [ 2859.332399] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2859.333544] ? SOFTIRQ_verbose+0x10/0x10 [ 2859.334412] ___sys_sendmsg+0xc6/0x170 [ 2859.335282] ? sendmsg_copy_msghdr+0x160/0x160 [ 2859.336275] ? __fget_files+0x2cf/0x520 [ 2859.337123] ? lock_downgrade+0x6d0/0x6d0 [ 2859.338031] ? find_held_lock+0x2c/0x110 [ 2859.338910] ? __fget_files+0x2f8/0x520 [ 2859.339431] ? __fget_light+0xea/0x290 [ 2859.339769] __sys_sendmsg+0xe5/0x1b0 [ 2859.340094] ? __sys_sendmsg_sock+0x40/0x40 [ 2859.340462] ? rcu_read_lock_any_held+0x75/0xa0 [ 2859.340858] ? fput_many+0x2f/0x1a0 [ 2859.341169] ? ksys_write+0x1a9/0x260 [ 2859.341502] ? __ia32_sys_read+0xb0/0xb0 [ 2859.341850] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2859.342294] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2859.342731] ? trace_hardirqs_on+0x5b/0x180 [ 2859.343097] do_syscall_64+0x33/0x40 [ 2859.343465] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2859.343899] RIP: 0033:0x7f8137415b19 [ 2859.344217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2859.345767] RSP: 002b:00007f813498b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2859.346410] RAX: ffffffffffffffda RBX: 00007f8137528f60 RCX: 00007f8137415b19 [ 2859.347009] RDX: 0000000010044001 RSI: 00000000200006c0 RDI: 0000000000000003 [ 2859.347623] RBP: 00007f813498b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2859.348223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2859.348821] R13: 00007ffc5db20daf R14: 00007f813498b300 R15: 0000000000022000 23:08:34 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = signalfd(r1, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r2, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x3) 23:08:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)}], 0x1}, 0x10044001) 23:08:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) (fail_nth: 2) 23:08:48 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 65) [ 2873.375849] FAULT_INJECTION: forcing a failure. [ 2873.375849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2873.376988] CPU: 1 PID: 12175 Comm: syz-executor.5 Not tainted 5.10.226 #1 [ 2873.377607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2873.378342] Call Trace: [ 2873.378586] dump_stack+0x107/0x167 [ 2873.378920] should_fail.cold+0x5/0xa [ 2873.379277] _copy_from_user+0x2e/0x1b0 [ 2873.380208] iovec_from_user+0x141/0x400 [ 2873.381115] __import_iovec+0x67/0x590 [ 2873.381985] ? __ia32_sys_shutdown+0x80/0x80 [ 2873.382961] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2873.384144] import_iovec+0x83/0xb0 [ 2873.384959] sendmsg_copy_msghdr+0x131/0x160 [ 2873.385937] ? do_recvmmsg+0x6d0/0x6d0 [ 2873.386791] ? SOFTIRQ_verbose+0x10/0x10 [ 2873.387695] ? lock_downgrade+0x6d0/0x6d0 [ 2873.388620] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2873.389781] ? SOFTIRQ_verbose+0x10/0x10 [ 2873.390692] ___sys_sendmsg+0xc6/0x170 [ 2873.391562] ? sendmsg_copy_msghdr+0x160/0x160 [ 2873.392576] ? __fget_files+0x2cf/0x520 [ 2873.393455] ? lock_downgrade+0x6d0/0x6d0 [ 2873.394364] ? find_held_lock+0x2c/0x110 23:08:48 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000001c0)={0x7eb8794a78c4655, 0x80, 0x0, 0x7, 0x7, 0x0, 0x0, 0x7, 0x80000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1127, 0x4, @perf_config_ext={0x3f}, 0x10, 0x5, 0x400000, 0x9, 0x3, 0x7f, 0x3, 0x0, 0x2539992c, 0x0, 0x5}, r2, 0x7, 0xffffffffffffffff, 0x2) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x200, 0x8a}}, './file0\x00'}) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r4, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r5, 0x2) readv(r5, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/219, 0xdb}], 0x2) 23:08:48 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = signalfd(r1, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r2, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x3) 23:08:48 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 77) 23:08:48 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x1, 0x88f}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = timerfd_create(0x5, 0x800) r7 = syz_open_dev$hidraw(&(0x7f0000000180), 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000076ca704ee410f6e3", @ANYRES32=r0, @ANYBLOB="00000000010000002e2f66696c653000"]) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x2001}, {r5, 0x1140}, {r3, 0x8}, {r6, 0x400}, {r7, 0x200}, {r8, 0x1000}], 0x6, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)={[0x10000]}, 0x8) r9 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:08:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)}], 0x1}, 0x10044001) 23:08:48 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000405) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) [ 2873.395295] ? __fget_files+0x2f8/0x520 [ 2873.403627] ? __fget_light+0xea/0x290 [ 2873.403984] __sys_sendmsg+0xe5/0x1b0 [ 2873.404326] ? __sys_sendmsg_sock+0x40/0x40 [ 2873.404711] ? rcu_read_lock_any_held+0x75/0xa0 [ 2873.405130] ? fput_many+0x2f/0x1a0 [ 2873.405458] ? ksys_write+0x1a9/0x260 [ 2873.405806] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2873.406434] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2873.406921] ? trace_hardirqs_on+0x5b/0x180 [ 2873.407339] do_syscall_64+0x33/0x40 [ 2873.407695] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2873.408181] RIP: 0033:0x7f8137415b19 [ 2873.408540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2873.410296] RSP: 002b:00007f813498b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2873.411698] RAX: ffffffffffffffda RBX: 00007f8137528f60 RCX: 00007f8137415b19 [ 2873.412718] FAULT_INJECTION: forcing a failure. [ 2873.412718] name failslab, interval 1, probability 0, space 0, times 0 [ 2873.413307] RDX: 0000000010044001 RSI: 00000000200006c0 RDI: 0000000000000003 [ 2873.413322] RBP: 00007f813498b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2873.419003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2873.420585] R13: 00007ffc5db20daf R14: 00007f813498b300 R15: 0000000000022000 [ 2873.422177] CPU: 0 PID: 12178 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2873.423776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2873.425627] Call Trace: [ 2873.426232] dump_stack+0x107/0x167 [ 2873.427051] should_fail.cold+0x5/0xa [ 2873.427915] ? create_object.isra.0+0x3a/0xa20 [ 2873.428933] should_failslab+0x5/0x20 [ 2873.429778] kmem_cache_alloc+0x5b/0x310 [ 2873.430678] create_object.isra.0+0x3a/0xa20 [ 2873.431157] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2873.432297] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2873.432827] ? __ip_append_data+0x2930/0x3310 [ 2873.433827] __alloc_skb+0xb1/0x5b0 [ 2873.434232] __ip_append_data+0x2930/0x3310 [ 2873.435202] ? raw_destroy+0x30/0x30 [ 2873.435605] ? ip_finish_output+0x330/0x330 [ 2873.436559] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2873.437105] ? memcpy+0x39/0x60 [ 2873.437841] ? raw_destroy+0x30/0x30 [ 2873.438240] ip_append_data+0x114/0x1a0 [ 2873.439131] raw_sendmsg+0xaa6/0x29d0 [ 2873.439548] ? dst_output+0x170/0x170 [ 2873.439951] ? __lock_acquire+0x1657/0x5b00 [ 2873.440429] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2873.440973] ? SOFTIRQ_verbose+0x10/0x10 [ 2873.441875] ? create_object.isra.0+0x3ad/0xa20 [ 2873.442367] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2873.443527] ? find_held_lock+0x2c/0x110 [ 2873.443972] ? trace_hardirqs_on+0x5b/0x180 [ 2873.444931] ? dst_output+0x170/0x170 [ 2873.445337] inet_sendmsg+0x11d/0x140 [ 2873.446188] ? inet_send_prepare+0x540/0x540 [ 2873.446639] __sock_sendmsg+0x13c/0x190 [ 2873.447530] ____sys_sendmsg+0x334/0x870 [ 2873.447961] ? sock_write_iter+0x3d0/0x3d0 [ 2873.448908] ? do_recvmmsg+0x6d0/0x6d0 [ 2873.449776] ? SOFTIRQ_verbose+0x10/0x10 [ 2873.450696] ? mark_lock+0xf5/0x2df0 [ 2873.451540] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2873.452726] ___sys_sendmsg+0xf3/0x170 [ 2873.453591] ? sendmsg_copy_msghdr+0x160/0x160 [ 2873.454611] ? __fget_files+0x2cf/0x520 [ 2873.455515] ? lock_downgrade+0x6d0/0x6d0 [ 2873.456007] ? lock_downgrade+0x6d0/0x6d0 [ 2873.471612] ? __fget_files+0x2f8/0x520 [ 2873.471987] ? __fget_light+0xea/0x290 [ 2873.472350] __sys_sendmmsg+0x195/0x470 [ 2873.472710] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2873.473106] ? lock_downgrade+0x6d0/0x6d0 [ 2873.473501] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2873.473945] ? wait_for_completion_io+0x270/0x270 [ 2873.474370] ? rcu_read_lock_any_held+0x75/0xa0 [ 2873.474805] ? vfs_write+0x354/0xb10 [ 2873.475124] ? fput_many+0x2f/0x1a0 [ 2873.475468] ? ksys_write+0x1a9/0x260 [ 2873.475804] ? __ia32_sys_read+0xb0/0xb0 [ 2873.476193] __x64_sys_sendmmsg+0x99/0x100 [ 2873.476562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2873.477051] do_syscall_64+0x33/0x40 [ 2873.477397] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2873.477890] RIP: 0033:0x7f6f45c0ab19 [ 2873.478241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2873.479996] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2873.480658] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2873.481267] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2873.481891] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2873.482530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2873.483145] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 23:08:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':', 0x1}], 0x1}, 0x10044001) 23:08:48 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = signalfd(r1, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r2, 0x402, 0x80000006) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) 23:08:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) (fail_nth: 3) [ 2873.555245] FAULT_INJECTION: forcing a failure. [ 2873.555245] name failslab, interval 1, probability 0, space 0, times 0 [ 2873.557501] FAULT_INJECTION: forcing a failure. [ 2873.557501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2873.557518] CPU: 0 PID: 12198 Comm: syz-executor.5 Not tainted 5.10.226 #1 [ 2873.557525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2873.557530] Call Trace: [ 2873.557549] dump_stack+0x107/0x167 [ 2873.557564] should_fail.cold+0x5/0xa [ 2873.557583] _copy_to_user+0x2e/0x180 [ 2873.557603] simple_read_from_buffer+0xcc/0x160 [ 2873.557621] proc_fail_nth_read+0x198/0x230 [ 2873.557637] ? proc_sessionid_read+0x230/0x230 [ 2873.557653] ? security_file_permission+0xb1/0xe0 [ 2873.557671] ? proc_sessionid_read+0x230/0x230 [ 2873.557684] vfs_read+0x228/0x620 [ 2873.557702] ksys_read+0x12d/0x260 [ 2873.557715] ? vfs_write+0xb10/0xb10 [ 2873.557733] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2873.557747] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2873.557761] do_syscall_64+0x33/0x40 [ 2873.557780] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2873.567306] RIP: 0033:0x7f81373c869c [ 2873.567612] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2873.569055] RSP: 002b:00007f813498b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2873.569668] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f81373c869c [ 2873.570242] RDX: 000000000000000f RSI: 00007f813498b1e0 RDI: 0000000000000004 [ 2873.570822] RBP: 00007f813498b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2873.571411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2873.571990] R13: 00007ffc5db20daf R14: 00007f813498b300 R15: 0000000000022000 [ 2873.572621] CPU: 1 PID: 12188 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2873.573211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2873.573905] Call Trace: [ 2873.574137] dump_stack+0x107/0x167 [ 2873.574451] should_fail.cold+0x5/0xa [ 2873.574778] ? create_object.isra.0+0x3a/0xa20 [ 2873.575169] should_failslab+0x5/0x20 [ 2873.575544] kmem_cache_alloc+0x5b/0x310 [ 2873.575894] create_object.isra.0+0x3a/0xa20 [ 2873.576266] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2873.576700] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2873.577131] ? __ip_append_data+0x2930/0x3310 [ 2873.577518] __alloc_skb+0xb1/0x5b0 [ 2873.577833] __ip_append_data+0x2930/0x3310 [ 2873.578213] ? raw_destroy+0x30/0x30 [ 2873.578541] ? ip_finish_output+0x330/0x330 [ 2873.578907] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2873.579387] ? memcpy+0x39/0x60 [ 2873.579671] ? raw_destroy+0x30/0x30 [ 2873.579988] ip_append_data+0x114/0x1a0 [ 2873.580334] raw_sendmsg+0xaa6/0x29d0 [ 2873.580668] ? dst_output+0x170/0x170 [ 2873.580992] ? __lock_acquire+0x1657/0x5b00 [ 2873.581371] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2873.581811] ? SOFTIRQ_verbose+0x10/0x10 [ 2873.582154] ? create_object.isra.0+0x3ad/0xa20 [ 2873.582560] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2873.582992] ? find_held_lock+0x2c/0x110 [ 2873.583399] ? trace_hardirqs_on+0x5b/0x180 [ 2873.583768] ? dst_output+0x170/0x170 [ 2873.584094] inet_sendmsg+0x11d/0x140 [ 2873.584419] ? inet_send_prepare+0x540/0x540 [ 2873.584792] __sock_sendmsg+0x13c/0x190 [ 2873.585136] ____sys_sendmsg+0x334/0x870 [ 2873.585484] ? sock_write_iter+0x3d0/0x3d0 [ 2873.585842] ? do_recvmmsg+0x6d0/0x6d0 [ 2873.586174] ? SOFTIRQ_verbose+0x10/0x10 [ 2873.586518] ? mark_lock+0xf5/0x2df0 [ 2873.586837] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2873.587325] ___sys_sendmsg+0xf3/0x170 [ 2873.588201] ? sendmsg_copy_msghdr+0x160/0x160 [ 2873.589196] ? __fget_files+0x2cf/0x520 [ 2873.590046] ? lock_downgrade+0x6d0/0x6d0 [ 2873.590948] ? lock_downgrade+0x6d0/0x6d0 [ 2873.591878] ? __fget_files+0x2f8/0x520 [ 2873.592756] ? __fget_light+0xea/0x290 [ 2873.593591] __sys_sendmmsg+0x195/0x470 [ 2873.594447] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2873.595337] ? lock_downgrade+0x6d0/0x6d0 [ 2873.595706] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2873.596119] ? wait_for_completion_io+0x270/0x270 23:08:48 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) r2 = getuid() fchown(r1, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000000)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) [ 2873.596532] ? rcu_read_lock_any_held+0x75/0xa0 [ 2873.607439] ? vfs_write+0x354/0xb10 [ 2873.607756] ? fput_many+0x2f/0x1a0 [ 2873.608067] ? ksys_write+0x1a9/0x260 [ 2873.608393] ? __ia32_sys_read+0xb0/0xb0 [ 2873.608743] __x64_sys_sendmmsg+0x99/0x100 [ 2873.609100] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2873.609535] do_syscall_64+0x33/0x40 [ 2873.609851] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2873.610280] RIP: 0033:0x7f7b32767b19 [ 2873.610607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2873.612156] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2873.612797] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2873.613409] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2873.614017] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2873.614612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 23:08:48 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = signalfd(r1, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r2, 0x402, 0x80000006) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) [ 2873.615208] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:09:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:09:02 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 78) 23:09:02 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 66) 23:09:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = signalfd(r1, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r2, 0x402, 0x80000006) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) 23:09:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':', 0x1}], 0x1}, 0x10044001) 23:09:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000500) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:09:02 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x402, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) 23:09:02 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r4, 0x4, 0x20, 0x2}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) [ 2887.667148] FAULT_INJECTION: forcing a failure. [ 2887.667148] name failslab, interval 1, probability 0, space 0, times 0 [ 2887.671365] CPU: 0 PID: 12221 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2887.673066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2887.675065] Call Trace: [ 2887.675710] dump_stack+0x107/0x167 [ 2887.676614] should_fail.cold+0x5/0xa [ 2887.677519] ? __alloc_skb+0x6d/0x5b0 [ 2887.678476] should_failslab+0x5/0x20 [ 2887.679345] kmem_cache_alloc_node+0x55/0x330 [ 2887.679847] __alloc_skb+0x6d/0x5b0 [ 2887.680764] __ip_append_data+0x2930/0x3310 [ 2887.681830] ? raw_destroy+0x30/0x30 [ 2887.682674] ? ip_finish_output+0x330/0x330 [ 2887.683141] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2887.684413] ? memcpy+0x39/0x60 [ 2887.685219] ? raw_destroy+0x30/0x30 [ 2887.685618] ip_append_data+0x114/0x1a0 [ 2887.686064] raw_sendmsg+0xaa6/0x29d0 [ 2887.687022] ? dst_output+0x170/0x170 [ 2887.687303] FAULT_INJECTION: forcing a failure. [ 2887.687303] name failslab, interval 1, probability 0, space 0, times 0 [ 2887.687873] ? __lock_acquire+0x1657/0x5b00 [ 2887.687908] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2887.687923] ? SOFTIRQ_verbose+0x10/0x10 [ 2887.687937] ? create_object.isra.0+0x3ad/0xa20 [ 2887.687967] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2887.687984] ? find_held_lock+0x2c/0x110 [ 2887.691575] ? trace_hardirqs_on+0x5b/0x180 [ 2887.691974] ? dst_output+0x170/0x170 [ 2887.692333] inet_sendmsg+0x11d/0x140 [ 2887.692675] ? inet_send_prepare+0x540/0x540 [ 2887.693066] __sock_sendmsg+0x13c/0x190 [ 2887.693424] ____sys_sendmsg+0x334/0x870 [ 2887.693787] ? sock_write_iter+0x3d0/0x3d0 [ 2887.694165] ? do_recvmmsg+0x6d0/0x6d0 [ 2887.694512] ? SOFTIRQ_verbose+0x10/0x10 [ 2887.694880] ___sys_sendmsg+0xf3/0x170 [ 2887.695223] ? sendmsg_copy_msghdr+0x160/0x160 [ 2887.695676] ? __fget_files+0x2cf/0x520 [ 2887.696041] ? lock_downgrade+0x6d0/0x6d0 [ 2887.696438] ? __fget_files+0x2f8/0x520 [ 2887.696823] ? __fget_light+0xea/0x290 [ 2887.697179] __sys_sendmmsg+0x195/0x470 [ 2887.697552] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2887.697959] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2887.698352] ? clockevents_program_event+0x131/0x360 [ 2887.698834] ? tick_program_event+0xa8/0x140 [ 2887.699235] ? hrtimer_interrupt+0x771/0x9b0 [ 2887.699682] __x64_sys_sendmmsg+0x99/0x100 [ 2887.700068] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2887.700547] do_syscall_64+0x33/0x40 [ 2887.700897] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2887.701334] RIP: 0033:0x7f7b32767b19 [ 2887.701679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2887.703300] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2887.704016] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2887.704680] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2887.705319] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2887.705949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2887.706573] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 [ 2887.707241] CPU: 1 PID: 12226 Comm: syz-executor.6 Not tainted 5.10.226 #1 [ 2887.707894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2887.708644] Call Trace: [ 2887.708887] dump_stack+0x107/0x167 [ 2887.709224] should_fail.cold+0x5/0xa [ 2887.709580] ? __alloc_skb+0x6d/0x5b0 [ 2887.709937] should_failslab+0x5/0x20 [ 2887.710289] kmem_cache_alloc_node+0x55/0x330 [ 2887.710709] __alloc_skb+0x6d/0x5b0 [ 2887.711056] __ip_append_data+0x2930/0x3310 [ 2887.711486] ? raw_destroy+0x30/0x30 [ 2887.711879] ? ip_finish_output+0x330/0x330 [ 2887.712322] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2887.712837] ? memcpy+0x39/0x60 [ 2887.713150] ? raw_destroy+0x30/0x30 [ 2887.713490] ip_append_data+0x114/0x1a0 [ 2887.713856] raw_sendmsg+0xaa6/0x29d0 [ 2887.714230] ? dst_output+0x170/0x170 [ 2887.714585] ? __lock_acquire+0x1657/0x5b00 [ 2887.715000] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2887.715484] ? SOFTIRQ_verbose+0x10/0x10 [ 2887.715859] ? create_object.isra.0+0x3ad/0xa20 [ 2887.716312] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2887.716783] ? find_held_lock+0x2c/0x110 [ 2887.717180] ? trace_hardirqs_on+0x5b/0x180 [ 2887.717612] ? dst_output+0x170/0x170 [ 2887.717985] inet_sendmsg+0x11d/0x140 [ 2887.718360] ? inet_send_prepare+0x540/0x540 [ 2887.718794] __sock_sendmsg+0x13c/0x190 [ 2887.719185] ____sys_sendmsg+0x334/0x870 [ 2887.719592] ? sock_write_iter+0x3d0/0x3d0 [ 2887.719981] ? do_recvmmsg+0x6d0/0x6d0 [ 2887.720345] ? SOFTIRQ_verbose+0x10/0x10 [ 2887.720724] ? mark_lock+0xf5/0x2df0 [ 2887.721070] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2887.721563] ___sys_sendmsg+0xf3/0x170 [ 2887.721934] ? sendmsg_copy_msghdr+0x160/0x160 [ 2887.722364] ? __fget_files+0x2cf/0x520 [ 2887.722742] ? lock_downgrade+0x6d0/0x6d0 [ 2887.723130] ? lock_downgrade+0x6d0/0x6d0 [ 2887.723541] ? __fget_files+0x2f8/0x520 [ 2887.723958] ? __fget_light+0xea/0x290 [ 2887.724358] __sys_sendmmsg+0x195/0x470 [ 2887.724768] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2887.725210] ? lock_downgrade+0x6d0/0x6d0 [ 2887.725653] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2887.726147] ? wait_for_completion_io+0x270/0x270 [ 2887.726619] ? rcu_read_lock_any_held+0x75/0xa0 [ 2887.727061] ? vfs_write+0x354/0xb10 [ 2887.727432] ? fput_many+0x2f/0x1a0 [ 2887.727795] ? ksys_write+0x1a9/0x260 [ 2887.728172] ? __ia32_sys_read+0xb0/0xb0 [ 2887.728579] __x64_sys_sendmmsg+0x99/0x100 [ 2887.729003] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2887.729500] do_syscall_64+0x33/0x40 [ 2887.729867] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2887.730333] RIP: 0033:0x7f6f45c0ab19 [ 2887.730673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2887.732330] RSP: 002b:00007f6f43180188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2887.733017] RAX: ffffffffffffffda RBX: 00007f6f45d1df60 RCX: 00007f6f45c0ab19 [ 2887.733657] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2887.734301] RBP: 00007f6f431801d0 R08: 0000000000000000 R09: 0000000000000000 [ 2887.734940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2887.735590] R13: 00007ffe7f397f6f R14: 00007f6f43180300 R15: 0000000000022000 23:09:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\n', 0xfffffdef}], 0x1}, 0x10044001) 23:09:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':', 0x1}], 0x1}, 0x10044001) 23:09:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r1, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) 23:09:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007a8) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:09:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0x2}], 0x1}, 0x0) 23:09:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':@', 0xfffffdef}], 0x1}, 0x10044001) 23:09:03 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) 23:09:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1342, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:09:03 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 79) 23:09:03 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000001) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r3, 0x2) copy_file_range(r3, &(0x7f0000000000)=0x1ff, r0, &(0x7f0000000180)=0x1, 0x3, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x2, 0xff, 0x5, 0x7, 0x0, 0x7, 0x1000, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x3b, 0x7}, 0x40, 0x2, 0x9e, 0x8, 0x6, 0x8, 0xfff8, 0x0, 0x8, 0x0, 0xf8}, 0x0, 0x6, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r4, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r5, 0x2) dup2(r5, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340)=0x3, 0x3d3caaa3) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000) dup3(r1, r6, 0x0) [ 2888.076223] FAULT_INJECTION: forcing a failure. [ 2888.076223] name failslab, interval 1, probability 0, space 0, times 0 [ 2888.077287] CPU: 1 PID: 12257 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2888.077868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2888.078558] Call Trace: [ 2888.078791] dump_stack+0x107/0x167 [ 2888.079104] should_fail.cold+0x5/0xa [ 2888.079450] ? create_object.isra.0+0x3a/0xa20 [ 2888.079840] should_failslab+0x5/0x20 [ 2888.080164] kmem_cache_alloc+0x5b/0x310 [ 2888.080514] create_object.isra.0+0x3a/0xa20 [ 2888.080888] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2888.081322] kmem_cache_alloc_node+0x169/0x330 [ 2888.081717] __alloc_skb+0x6d/0x5b0 [ 2888.082035] __ip_append_data+0x2930/0x3310 [ 2888.082414] ? raw_destroy+0x30/0x30 [ 2888.082742] ? ip_finish_output+0x330/0x330 [ 2888.083109] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2888.083550] ? memcpy+0x39/0x60 [ 2888.083836] ? raw_destroy+0x30/0x30 [ 2888.084153] ip_append_data+0x114/0x1a0 [ 2888.084502] raw_sendmsg+0xaa6/0x29d0 [ 2888.084836] ? dst_output+0x170/0x170 [ 2888.085161] ? __lock_acquire+0x1657/0x5b00 [ 2888.085541] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2888.085983] ? SOFTIRQ_verbose+0x10/0x10 [ 2888.086326] ? create_object.isra.0+0x3ad/0xa20 [ 2888.086731] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2888.087164] ? find_held_lock+0x2c/0x110 [ 2888.087542] ? trace_hardirqs_on+0x5b/0x180 [ 2888.087913] ? dst_output+0x170/0x170 [ 2888.088241] inet_sendmsg+0x11d/0x140 [ 2888.088566] ? inet_send_prepare+0x540/0x540 [ 2888.088941] __sock_sendmsg+0x13c/0x190 [ 2888.089281] ____sys_sendmsg+0x334/0x870 [ 2888.089629] ? sock_write_iter+0x3d0/0x3d0 [ 2888.089987] ? do_recvmmsg+0x6d0/0x6d0 [ 2888.090322] ? SOFTIRQ_verbose+0x10/0x10 [ 2888.090667] ? mark_lock+0xf5/0x2df0 [ 2888.090989] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2888.091630] ___sys_sendmsg+0xf3/0x170 [ 2888.092374] ? sendmsg_copy_msghdr+0x160/0x160 [ 2888.093243] ? __fget_files+0x2cf/0x520 [ 2888.093999] ? lock_downgrade+0x6d0/0x6d0 [ 2888.094778] ? lock_downgrade+0x6d0/0x6d0 [ 2888.095628] ? __fget_files+0x2f8/0x520 [ 2888.096355] ? __fget_light+0xea/0x290 [ 2888.097083] __sys_sendmmsg+0x195/0x470 [ 2888.097819] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2888.098642] ? lock_downgrade+0x6d0/0x6d0 [ 2888.099494] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2888.100416] ? wait_for_completion_io+0x270/0x270 [ 2888.101341] ? rcu_read_lock_any_held+0x75/0xa0 [ 2888.102247] ? vfs_write+0x354/0xb10 [ 2888.102965] ? fput_many+0x2f/0x1a0 [ 2888.103534] ? ksys_write+0x1a9/0x260 [ 2888.103890] ? __ia32_sys_read+0xb0/0xb0 [ 2888.104282] __x64_sys_sendmmsg+0x99/0x100 [ 2888.104680] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2888.105156] do_syscall_64+0x33/0x40 [ 2888.105510] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2888.105983] RIP: 0033:0x7f7b32767b19 [ 2888.106335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2888.109093] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2888.110557] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2888.111646] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2888.112301] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2888.112950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2888.113604] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:09:03 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 67) 23:09:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0x2}], 0x1}, 0x0) 23:09:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007ad) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:09:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) ioctl$TCSBRKP(r3, 0x5425, 0xa641) 23:09:03 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:09:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) [ 2902.662156] tmpfs: Unknown parameter ' [ 2902.662156] ' 23:09:17 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000001) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0xc0, 0xfd, 0xe1, 0x7, 0x0, 0x100, 0x408, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0xfffffffffffffbde, 0xffff}, 0x824, 0x3, 0x8, 0x0, 0x5, 0x5, 0x6, 0x0, 0x10001}, 0x0, 0x9, r6, 0x1) setresuid(0xffffffffffffffff, r4, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) socket$nl_sock_diag(0x10, 0x3, 0x4) fchown(r0, r4, r5) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r7, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20040080) 23:09:17 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x1, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) perf_event_open(&(0x7f0000001d80)={0x2, 0xff8d, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xbd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000380)=ANY=[], 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3, 0x4d, 0x7, 0x1, 0x0, 0xff0000000000, 0x10410, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x8000, 0x1}, 0x6aa1, 0x0, 0x7, 0x0, 0xffff, 0x445, 0x4, 0x0, 0x9, 0x0, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0x1) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:09:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007af) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:09:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0x2}], 0x1}, 0x0) 23:09:17 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 80) 23:09:17 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:09:17 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:09:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)="3a02", 0xfffffdef}], 0x1}, 0x10044001) [ 2902.771168] FAULT_INJECTION: forcing a failure. [ 2902.771168] name failslab, interval 1, probability 0, space 0, times 0 [ 2902.772260] CPU: 0 PID: 12302 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2902.772881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2902.773622] Call Trace: [ 2902.773879] dump_stack+0x107/0x167 [ 2902.774225] should_fail.cold+0x5/0xa [ 2902.774586] ? __alloc_skb+0x6d/0x5b0 [ 2902.774938] should_failslab+0x5/0x20 [ 2902.775299] kmem_cache_alloc_node+0x55/0x330 [ 2902.775742] __alloc_skb+0x6d/0x5b0 [ 2902.776092] __ip_append_data+0x2930/0x3310 [ 2902.776511] ? raw_destroy+0x30/0x30 [ 2902.776873] ? ip_finish_output+0x330/0x330 [ 2902.777278] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2902.777746] ? memcpy+0x39/0x60 [ 2902.778062] ? raw_destroy+0x30/0x30 [ 2902.778412] ip_append_data+0x114/0x1a0 [ 2902.778792] raw_sendmsg+0xaa6/0x29d0 [ 2902.779167] ? dst_output+0x170/0x170 [ 2902.779529] ? __lock_acquire+0x1657/0x5b00 [ 2902.779950] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2902.780437] ? SOFTIRQ_verbose+0x10/0x10 [ 2902.780823] ? create_object.isra.0+0x3ad/0xa20 [ 2902.781267] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2902.781740] ? find_held_lock+0x2c/0x110 [ 2902.782131] ? trace_hardirqs_on+0x5b/0x180 [ 2902.782539] ? dst_output+0x170/0x170 [ 2902.782897] inet_sendmsg+0x11d/0x140 [ 2902.783250] ? inet_send_prepare+0x540/0x540 [ 2902.783679] __sock_sendmsg+0x13c/0x190 [ 2902.784053] ____sys_sendmsg+0x334/0x870 [ 2902.784435] ? sock_write_iter+0x3d0/0x3d0 [ 2902.784826] ? do_recvmmsg+0x6d0/0x6d0 [ 2902.785195] ? SOFTIRQ_verbose+0x10/0x10 [ 2902.785571] ? mark_lock+0xf5/0x2df0 [ 2902.785925] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2902.786412] ___sys_sendmsg+0xf3/0x170 [ 2902.786777] ? sendmsg_copy_msghdr+0x160/0x160 [ 2902.787204] ? __fget_files+0x2cf/0x520 [ 2902.787591] ? lock_downgrade+0x6d0/0x6d0 [ 2902.787978] ? lock_downgrade+0x6d0/0x6d0 [ 2902.788374] ? __fget_files+0x2f8/0x520 [ 2902.788745] ? __fget_light+0xea/0x290 [ 2902.789109] __sys_sendmmsg+0x195/0x470 [ 2902.789484] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2902.789883] ? lock_downgrade+0x6d0/0x6d0 [ 2902.790289] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2902.790740] ? wait_for_completion_io+0x270/0x270 [ 2902.791185] ? rcu_read_lock_any_held+0x75/0xa0 [ 2902.791626] ? vfs_write+0x354/0xb10 [ 2902.791954] ? fput_many+0x2f/0x1a0 [ 2902.792267] ? ksys_write+0x1a9/0x260 [ 2902.792591] ? __ia32_sys_read+0xb0/0xb0 [ 2902.792942] __x64_sys_sendmmsg+0x99/0x100 [ 2902.793301] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2902.793737] do_syscall_64+0x33/0x40 [ 2902.794054] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2902.794489] RIP: 0033:0x7f7b32767b19 [ 2902.794808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2902.796438] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2902.797142] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2902.797792] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2902.798446] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2902.799097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2902.799783] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:09:18 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:09:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:09:18 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0xfffffffffffffe01, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:09:18 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x3, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:09:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="828f210adff5e9b2612d1f904275140000001600010d0000000000000000000000002abf602130dee518921acaebb8f21863854449da78f2a2b85aa5dca24954dfefbe91ad98c9a462c13c570a17511f5bff830a3ae3aec4970c61d88b66c61b211967f44f44ae427055cbaac04af32b756eeffd3591ac8a098a343da11179c119d04e4b7c84938d449d9aadd2bd4ed848e32d04bc1f447c0df2fc6df550257c6af90aa78651811a6810aae804c945"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) sendfile(r1, r0, &(0x7f0000000040), 0x5) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r2, 0x20, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}]}, 0x64}}, 0xb9e05a17761e4179) fchown(r0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = epoll_create(0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x3, 0x1, 0x0, {0x0, 0x0, r5}}, 0x0) close(r3) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r6, 0x2) perf_event_open$cgroup(&(0x7f00000002c0)={0x7, 0x80, 0x4, 0x80, 0x40, 0x0, 0x0, 0x8, 0x10002, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f0000000440), 0x8}, 0x40402, 0x0, 0x3, 0x0, 0x20, 0x9, 0x3, 0x0, 0x5ad9, 0x0, 0x6}, r6, 0x9, r3, 0x0) signalfd(r4, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) [ 2902.990856] raw_sendmsg: syz-executor.6 forgot to set AF_INET. Fix it! 23:09:32 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 81) 23:09:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x9, 0x9, 0x5a, 0x16, 0x0, 0x0, 0x40000, 0xd, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0xc3, 0x3c7}, 0x840, 0x3, 0x8, 0x0, 0x100, 0x4, 0x1f, 0x0, 0x5, 0x0, 0x8000000000000000}, 0x0, 0x0, r2, 0x3) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) 23:09:32 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x4, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:09:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:09:32 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007b3) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:09:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) 23:09:32 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007af) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:09:32 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r3, &(0x7f0000000080)=""/65, 0x41) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) r5 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r6, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0xffff8000, 0xd36}}, './file0\x00'}) [ 2917.763149] FAULT_INJECTION: forcing a failure. [ 2917.763149] name failslab, interval 1, probability 0, space 0, times 0 [ 2917.764680] CPU: 1 PID: 12339 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2917.765397] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2917.766811] Call Trace: [ 2917.767274] dump_stack+0x107/0x167 [ 2917.767784] should_fail.cold+0x5/0xa [ 2917.768106] ? create_object.isra.0+0x3a/0xa20 [ 2917.768499] should_failslab+0x5/0x20 [ 2917.768832] kmem_cache_alloc+0x5b/0x310 [ 2917.769196] create_object.isra.0+0x3a/0xa20 [ 2917.769605] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2917.770060] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2917.770502] ? __ip_append_data+0x2930/0x3310 [ 2917.770899] __alloc_skb+0xb1/0x5b0 [ 2917.771233] __ip_append_data+0x2930/0x3310 [ 2917.775664] ? raw_destroy+0x30/0x30 [ 2917.775997] ? ip_finish_output+0x330/0x330 [ 2917.776364] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2917.776814] ? memcpy+0x39/0x60 [ 2917.777098] ? raw_destroy+0x30/0x30 [ 2917.777419] ip_append_data+0x114/0x1a0 [ 2917.777782] raw_sendmsg+0xaa6/0x29d0 [ 2917.778130] ? dst_output+0x170/0x170 [ 2917.778454] ? __lock_acquire+0x1657/0x5b00 [ 2917.778842] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2917.779303] ? SOFTIRQ_verbose+0x10/0x10 [ 2917.779706] ? create_object.isra.0+0x3ad/0xa20 [ 2917.780130] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2917.780587] ? find_held_lock+0x2c/0x110 [ 2917.780966] ? trace_hardirqs_on+0x5b/0x180 [ 2917.781357] ? dst_output+0x170/0x170 [ 2917.781702] inet_sendmsg+0x11d/0x140 [ 2917.782024] ? inet_send_prepare+0x540/0x540 [ 2917.782408] __sock_sendmsg+0x13c/0x190 [ 2917.782746] ____sys_sendmsg+0x334/0x870 [ 2917.783111] ? sock_write_iter+0x3d0/0x3d0 [ 2917.783469] ? do_recvmmsg+0x6d0/0x6d0 [ 2917.783863] ? SOFTIRQ_verbose+0x10/0x10 [ 2917.784208] ? mark_lock+0xf5/0x2df0 [ 2917.784538] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2917.784992] ___sys_sendmsg+0xf3/0x170 [ 2917.785323] ? sendmsg_copy_msghdr+0x160/0x160 [ 2917.785730] ? __fget_files+0x2cf/0x520 [ 2917.786088] ? lock_downgrade+0x6d0/0x6d0 [ 2917.786472] ? lock_downgrade+0x6d0/0x6d0 [ 2917.786842] ? __fget_files+0x2f8/0x520 [ 2917.787199] ? __fget_light+0xea/0x290 [ 2917.787549] __sys_sendmmsg+0x195/0x470 [ 2917.787945] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2917.788323] ? lock_downgrade+0x6d0/0x6d0 [ 2917.788710] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2917.789137] ? wait_for_completion_io+0x270/0x270 [ 2917.789573] ? rcu_read_lock_any_held+0x75/0xa0 [ 2917.789966] ? vfs_write+0x354/0xb10 [ 2917.790288] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2917.790746] ? ksys_write+0x1a9/0x260 [ 2917.791068] ? __ia32_sys_read+0xb0/0xb0 [ 2917.791441] __x64_sys_sendmmsg+0x99/0x100 [ 2917.791864] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2917.792328] do_syscall_64+0x33/0x40 [ 2917.792662] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2917.793115] RIP: 0033:0x7f7b32767b19 [ 2917.793435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2917.795028] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2917.795710] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2917.796306] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2917.796926] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2917.797523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2917.798117] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:09:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="b2314b5b34b1e0c024ced5e374b02661a5953857545e83568eaacc4a05803ff2c06dd3775b32932dbaa2dec88e0365efce75fbea1c86714dc4e685ea652a511d5bc241cf95ab4f7a02c269f0b2a10d97911a41b89c079d8817325aad18ab07d82d9119441972d38042ea1f29739df76e91997864c36f3f528e0c2f0eb3629247d43fc44cec6967245ea8b303f07bbf0d578441f7274b913237a3e5fc4b286922ceee71882e4b7aaed2a1e53eac83513dbb57e84a028a2d418a2ad427c5e91239dce59e3426218addf86e3951debf4e42e7da8bb558503da4f0a9d89c35d687559ae8f5e1412a90356b9d894e770b4e4e6d5b9f3bf07356", 0xf7}], 0x84000, &(0x7f0000000480)=ANY=[@ANYBLOB="282d2f00002f737461740094d2c96d2bde46b7459516f3feff2c2f70726f632f7379732f6e65742f697076342f7463705f776d656f002c6d65617375f05f44a15baa72652c00"]) preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000340)=""/8, 0x8}, {&(0x7f0000000380)=""/110, 0x6e}, {&(0x7f0000000400)=""/24, 0x18}], 0x3, 0x3f, 0x3ff) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) 23:09:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)="3a7f", 0xfffffdef}], 0x1}, 0x10044001) 23:09:33 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x7, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:09:33 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 82) 23:09:33 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:09:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007b5) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:09:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000001) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0xc0, 0xfd, 0xe1, 0x7, 0x0, 0x100, 0x408, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0xfffffffffffffbde, 0xffff}, 0x824, 0x3, 0x8, 0x0, 0x5, 0x5, 0x6, 0x0, 0x10001}, 0x0, 0x9, r6, 0x1) setresuid(0xffffffffffffffff, r4, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) socket$nl_sock_diag(0x10, 0x3, 0x4) fchown(r0, r4, r5) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r7, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20040080) 23:09:33 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) [ 2917.994136] FAULT_INJECTION: forcing a failure. [ 2917.994136] name failslab, interval 1, probability 0, space 0, times 0 [ 2917.997212] CPU: 0 PID: 12371 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2917.998489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2917.999863] Call Trace: [ 2918.000097] dump_stack+0x107/0x167 [ 2918.000447] should_fail.cold+0x5/0xa [ 2918.000833] ? create_object.isra.0+0x3a/0xa20 [ 2918.001247] should_failslab+0x5/0x20 [ 2918.001619] kmem_cache_alloc+0x5b/0x310 [ 2918.001983] create_object.isra.0+0x3a/0xa20 [ 2918.002387] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2918.002876] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2918.003350] ? __ip_append_data+0x2930/0x3310 [ 2918.003854] __alloc_skb+0xb1/0x5b0 [ 2918.004191] __ip_append_data+0x2930/0x3310 [ 2918.004635] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2918.005098] ? raw_destroy+0x30/0x30 [ 2918.005432] ? ip_finish_output+0x330/0x330 [ 2918.005873] ? ip_setup_cork+0x589/0x930 [ 2918.006222] ? raw_destroy+0x30/0x30 [ 2918.006565] ip_append_data+0x114/0x1a0 [ 2918.006968] raw_sendmsg+0xaa6/0x29d0 [ 2918.007312] ? dst_output+0x170/0x170 [ 2918.007749] ? __lock_acquire+0x1657/0x5b00 [ 2918.008157] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2918.008678] ? SOFTIRQ_verbose+0x10/0x10 [ 2918.009032] ? create_object.isra.0+0x3ad/0xa20 [ 2918.009455] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2918.009962] ? find_held_lock+0x2c/0x110 [ 2918.010330] ? trace_hardirqs_on+0x5b/0x180 [ 2918.010766] ? dst_output+0x170/0x170 [ 2918.011098] inet_sendmsg+0x11d/0x140 [ 2918.011457] ? inet_send_prepare+0x540/0x540 [ 2918.011942] __sock_sendmsg+0x13c/0x190 [ 2918.012297] ____sys_sendmsg+0x334/0x870 [ 2918.012702] ? sock_write_iter+0x3d0/0x3d0 [ 2918.013084] ? do_recvmmsg+0x6d0/0x6d0 [ 2918.013431] ? SOFTIRQ_verbose+0x10/0x10 [ 2918.013831] ? mark_lock+0xf5/0x2df0 [ 2918.014174] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2918.014675] ___sys_sendmsg+0xf3/0x170 [ 2918.015034] ? sendmsg_copy_msghdr+0x160/0x160 [ 2918.015431] ? __fget_files+0x2cf/0x520 [ 2918.015856] ? lock_downgrade+0x6d0/0x6d0 [ 2918.016465] ? lock_downgrade+0x6d0/0x6d0 [ 2918.016935] ? __fget_files+0x2f8/0x520 [ 2918.017304] ? __fget_light+0xea/0x290 [ 2918.017708] __sys_sendmmsg+0x195/0x470 [ 2918.018070] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2918.018463] ? lock_downgrade+0x6d0/0x6d0 [ 2918.018880] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2918.019314] ? wait_for_completion_io+0x270/0x270 [ 2918.019813] ? rcu_read_lock_any_held+0x75/0xa0 [ 2918.020215] ? vfs_write+0x354/0xb10 [ 2918.020566] ? fput_many+0x2f/0x1a0 [ 2918.020943] ? ksys_write+0x1a9/0x260 [ 2918.021275] ? __ia32_sys_read+0xb0/0xb0 [ 2918.021717] __x64_sys_sendmmsg+0x99/0x100 [ 2918.022087] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2918.022553] do_syscall_64+0x33/0x40 [ 2918.022926] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2918.023372] RIP: 0033:0x7f7b32767b19 [ 2918.023791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2918.025403] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2918.026119] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2918.026793] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2918.027397] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2918.028090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2918.028746] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:09:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) 23:09:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:09:47 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 83) 23:09:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:09:47 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000001) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) fcntl$dupfd(r1, 0x0, r0) 23:09:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:09:47 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x0, 0x0}) tgkill(0x0, r5, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x5, 0x2a, 0x5, 0x20, 0x0, 0x4, 0x1, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000180), 0x8}, 0x4, 0x2, 0xfe65, 0xb, 0x1, 0x1000, 0x8000, 0x0, 0x9, 0x0, 0x100000001}, 0x0, 0x5, r6, 0x19) 23:09:47 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0xa, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:09:47 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007bb) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:09:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) [ 2932.370675] FAULT_INJECTION: forcing a failure. [ 2932.370675] name failslab, interval 1, probability 0, space 0, times 0 [ 2932.373757] CPU: 1 PID: 12401 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2932.375422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2932.377463] Call Trace: [ 2932.378120] dump_stack+0x107/0x167 [ 2932.378998] should_fail.cold+0x5/0xa [ 2932.379904] ? create_object.isra.0+0x3a/0xa20 [ 2932.381010] should_failslab+0x5/0x20 [ 2932.381928] kmem_cache_alloc+0x5b/0x310 [ 2932.382930] create_object.isra.0+0x3a/0xa20 [ 2932.384024] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2932.385257] kmem_cache_alloc_node+0x169/0x330 [ 2932.386352] __alloc_skb+0x6d/0x5b0 [ 2932.387200] __ip_append_data+0x2930/0x3310 [ 2932.388268] ? raw_destroy+0x30/0x30 [ 2932.389154] ? ip_finish_output+0x330/0x330 [ 2932.390190] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2932.391397] ? memcpy+0x39/0x60 [ 2932.392191] ? raw_destroy+0x30/0x30 [ 2932.393019] ip_append_data+0x114/0x1a0 [ 2932.393945] raw_sendmsg+0xaa6/0x29d0 [ 2932.394877] ? dst_output+0x170/0x170 [ 2932.395784] ? __lock_acquire+0x1657/0x5b00 [ 2932.396798] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2932.397984] ? SOFTIRQ_verbose+0x10/0x10 [ 2932.398919] ? create_object.isra.0+0x3ad/0xa20 [ 2932.400019] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2932.401246] ? find_held_lock+0x2c/0x110 [ 2932.402210] ? trace_hardirqs_on+0x5b/0x180 [ 2932.403211] ? dst_output+0x170/0x170 [ 2932.404103] inet_sendmsg+0x11d/0x140 [ 2932.404998] ? inet_send_prepare+0x540/0x540 [ 2932.406039] __sock_sendmsg+0x13c/0x190 [ 2932.406966] ____sys_sendmsg+0x334/0x870 [ 2932.407916] ? sock_write_iter+0x3d0/0x3d0 [ 2932.408891] ? do_recvmmsg+0x6d0/0x6d0 [ 2932.409826] ? SOFTIRQ_verbose+0x10/0x10 [ 2932.410818] ? mark_lock+0xf5/0x2df0 [ 2932.411745] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2932.412977] ___sys_sendmsg+0xf3/0x170 [ 2932.413885] ? sendmsg_copy_msghdr+0x160/0x160 [ 2932.414943] ? __fget_files+0x2cf/0x520 [ 2932.415868] ? lock_downgrade+0x6d0/0x6d0 [ 2932.416810] ? lock_downgrade+0x6d0/0x6d0 [ 2932.417755] ? __fget_files+0x2f8/0x520 [ 2932.418702] ? __fget_light+0xea/0x290 [ 2932.419673] __sys_sendmmsg+0x195/0x470 [ 2932.420612] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2932.421622] ? lock_downgrade+0x6d0/0x6d0 [ 2932.422658] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2932.423803] ? wait_for_completion_io+0x270/0x270 [ 2932.424932] ? rcu_read_lock_any_held+0x75/0xa0 [ 2932.426051] ? vfs_write+0x354/0xb10 [ 2932.426950] ? fput_many+0x2f/0x1a0 [ 2932.427839] ? ksys_write+0x1a9/0x260 [ 2932.428761] ? __ia32_sys_read+0xb0/0xb0 [ 2932.429765] __x64_sys_sendmmsg+0x99/0x100 [ 2932.430681] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2932.431160] do_syscall_64+0x33/0x40 [ 2932.431509] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2932.431999] RIP: 0033:0x7f7b32767b19 [ 2932.432348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2932.434000] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2932.434702] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2932.435356] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2932.436022] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2932.436667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2932.437317] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:09:47 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:09:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) 23:09:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x8000}, 0x0, 0x0, 0xa, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x40, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x100040, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r0, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, &(0x7f0000000040)=0xb, 0x80000001) fchown(r3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000240), 0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = signalfd(r4, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r1, 0x4, 0x7, 0x8}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2a902, 0x0) close(r5) sendmsg$nl_netfilter(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x44c, 0x13, 0x3, 0x3, 0x70bd2d, 0x25dfdbfd, {0x1, 0x0, 0x8}, [@nested={0xd1, 0x74, 0x0, 0x1, [@typed={0xc, 0x68, 0x0, 0x0, @u64=0x9}, @generic="03279393186dc580ae32b697eadbbbcf6273ff0e41ce1c3d79fae3e03e44d0e7ebbac03a957d2828921105a0752cbc4674abf9de3872d5d98827352b2c1a4ed9f86b42c1277fb89b0f092652a90de00a637b1fd9ae5cca22d5e3b448b91d2df8b467fa2cfc88ba0e9021cdb39fe283ac99732e8e2220ce52e21f", @typed={0x8, 0x84, 0x0, 0x0, @uid}, @typed={0x8, 0x35, 0x0, 0x0, @u32=0x7ff}, @generic="14628efeb7137fbe00727d535f3fd86d6b0cffd39f70baab6563504c6b8a8c862dab463cdfee693f8d26e4a4e4313de0208aed9e2bcf7b"]}, @generic="20e2ed70e2044f90c135c98dd343e10292c73b84aa5647d2d0b8f82322aea90a366cfec1f1deb29e82d0543d9b7218e338aec76d6853a539deb1478a881518795746a9f6431635a3fb3d02cb2332fb4caa7a0d014636694cf9bec5cef316b9666e48c316d07fdeb50f4c751357969b14a10226758712ca692a9c2699e1ed314a232c3553e64af3663600cc582747250499cbbfa7d72da02f841ed83b208c73a631ea2720a78831a7273d84fad4fd880d6e8eda1ca8a874c19fa040ee4755517a6e3dcadc1686872dfd0a8b80b6b172ce7d322248fd6c0cf3cec842d402157a2374ecae8b6e58d71abc2c", @generic="186ac4917351f2118c533b0c968fdc52bf680d41c5dd601c88b73dbc8c8788ac4afbc5da4ddcc770eb61cef1d45226956862e4e4657e9e256fd5dac6392eb8e081295b460e7613da7edbd67226fab35d358195ccf900a40575251ade79614d8b36bd76e817937eb587d058c63b4f11ed03db7db9972032513b557b9bb5b2ecfee6755b8f8b4322855e62ddf297bf9d04e089898177eb821f2bdf2fcf", @nested={0x1d4, 0x65, 0x0, 0x1, [@generic="9357ed36316de0bbb47bf59a3a1c33c97ca7af2fac37db14f10d52716cbdce20e89c3d9803716c333c2d92cc123893bc760ba29de4308bb78ae9dcaf16eea00442a2b3d0fc2ce7df88d2d10eba51d873c5597fbcb0e7d794872cb79dff3883ddc7514ef1046c396518bf3478b41fc4e6900ee3714080894982475e54ca01ea745b3417074f93a65e5238c4159a1420b60ef54060381d297816e197287e3432f39eef665311b950c917b16e8e57f6e1d33f42080b0f1ef64483b8", @typed={0x8, 0x83, 0x0, 0x0, @u32=0xfffffffd}, @typed={0x8, 0x14, 0x0, 0x0, @ipv4=@broadcast}, @generic="f51bca88980d263493d8d59aa8f0acc78d4d350038fce5ad46d55b0f1cc3c23848e454d5c564bde116d2aeb2a89e70a5da0d7a29dd5d8f95f00254a0dc075ef6039b8052", @generic="693dd821c64db0ca6dcd6bda848f31d0f9c1740b8699446db30c92a73dd65eb84c592f39c8eecfefd982f114159f83c68162029c1b3a1e36521d988a8e9a4d2fcec0bcb4825ae23db455d113f3b4d40f632df0d31f8ef575d77935ff84c3ff8e43266f28998546dd4446c742261a6b4074c865229546146f9f83f61ee371b46c962e738b782eda77de884996ddcf4cdbcfd17462716e8383cb651136cb71c71a865eadf1ca6e7284e399f9e20b729f610d32e18f3e49a2f40181d8e841c250bc43cf"]}, @typed={0x8, 0x92, 0x0, 0x0, @ipv4=@loopback}]}, 0x44c}, 0x1, 0x0, 0x0, 0xc805}, 0x4004840) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) r7 = getpid() ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x0, 0x0, 0xffff, 0x1f, r7}) 23:09:47 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:09:47 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:09:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x3) 23:09:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/route\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xcdc2, 0x2, @perf_bp, 0x5020, 0xffff, 0xff, 0x5, 0x1ff, 0x3, 0x2, 0x0, 0x1, 0x0, 0xb536}, 0xffffffffffffffff, 0x1, r2, 0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000200)) signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) 23:09:47 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:09:47 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 84) [ 2932.737187] FAULT_INJECTION: forcing a failure. [ 2932.737187] name failslab, interval 1, probability 0, space 0, times 0 [ 2932.739575] CPU: 0 PID: 12446 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2932.741086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2932.742517] Call Trace: [ 2932.742971] dump_stack+0x107/0x167 [ 2932.743596] should_fail.cold+0x5/0xa [ 2932.744434] should_failslab+0x5/0x20 [ 2932.745075] __kmalloc_node_track_caller+0x74/0x3b0 [ 2932.745912] ? __ip_append_data+0x2930/0x3310 [ 2932.746667] __alloc_skb+0xb1/0x5b0 [ 2932.747281] __ip_append_data+0x2930/0x3310 [ 2932.748150] ? raw_destroy+0x30/0x30 [ 2932.748799] ? ip_finish_output+0x330/0x330 [ 2932.749541] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2932.750414] ? memcpy+0x39/0x60 [ 2932.750984] ? raw_destroy+0x30/0x30 [ 2932.751620] ip_append_data+0x114/0x1a0 [ 2932.752503] raw_sendmsg+0xaa6/0x29d0 [ 2932.753154] ? dst_output+0x170/0x170 [ 2932.753797] ? __lock_acquire+0x1657/0x5b00 [ 2932.754530] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2932.755405] ? SOFTIRQ_verbose+0x10/0x10 [ 2932.756253] ? create_object.isra.0+0x3ad/0xa20 [ 2932.757066] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2932.757950] ? find_held_lock+0x2c/0x110 [ 2932.758658] ? trace_hardirqs_on+0x5b/0x180 [ 2932.759398] ? dst_output+0x170/0x170 [ 2932.760183] inet_sendmsg+0x11d/0x140 [ 2932.760822] ? inet_send_prepare+0x540/0x540 [ 2932.761560] __sock_sendmsg+0x13c/0x190 [ 2932.762222] ____sys_sendmsg+0x334/0x870 [ 2932.762901] ? sock_write_iter+0x3d0/0x3d0 [ 2932.763603] ? do_recvmmsg+0x6d0/0x6d0 [ 2932.764483] ? SOFTIRQ_verbose+0x10/0x10 [ 2932.765182] ? mark_lock+0xf5/0x2df0 [ 2932.765823] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2932.766724] ___sys_sendmsg+0xf3/0x170 [ 2932.767391] ? sendmsg_copy_msghdr+0x160/0x160 [ 2932.768334] ? __fget_files+0x2cf/0x520 [ 2932.769003] ? lock_downgrade+0x6d0/0x6d0 [ 2932.769702] ? lock_downgrade+0x6d0/0x6d0 [ 2932.770400] ? __fget_files+0x2f8/0x520 [ 2932.771069] ? __fget_light+0xea/0x290 [ 2932.771776] __sys_sendmmsg+0x195/0x470 [ 2932.772463] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2932.773208] ? lock_downgrade+0x6d0/0x6d0 [ 2932.773932] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2932.774763] ? wait_for_completion_io+0x270/0x270 [ 2932.775592] ? rcu_read_lock_any_held+0x75/0xa0 [ 2932.776595] ? vfs_write+0x354/0xb10 [ 2932.777221] ? fput_many+0x2f/0x1a0 [ 2932.777832] ? ksys_write+0x1a9/0x260 [ 2932.778467] ? __ia32_sys_read+0xb0/0xb0 [ 2932.779155] __x64_sys_sendmmsg+0x99/0x100 [ 2932.779961] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2932.780867] do_syscall_64+0x33/0x40 [ 2932.781509] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2932.782387] RIP: 0033:0x7f7b32767b19 [ 2932.783025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2932.786901] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2932.788362] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2932.789585] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2932.790807] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2932.792147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2932.793339] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:10:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:10:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007bd) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:10:02 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 85) 23:10:02 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x10, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:10:02 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f00000003c0)={[0x1]}, 0x8) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000380)={0x3b, 0x7, 0x0, 0x8, 0x4}) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r5 = openat$incfs(r4, &(0x7f0000000180)='.pending_reads\x00', 0x280000, 0x83) sendmsg$802154_dgram(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000002c0)={&(0x7f0000000240)="f03b2e222b8bd5382d9f5b1cc38a389498a6284ead22777dfbe18d14a453b8fba350ee33b6050b9a8e304b5c344d5c92731c4a99c9cbbae610e2e3a614b5378abacc2846d6482a929f59411fe85288d9271f55b9bec12a8670a50f3edfcef8cc43eb92c5da057fe15f76557db4a24cfc8deeb603fe1e3ffc34cc", 0x7a}, 0x1, 0x0, 0x0, 0x10}, 0x844) r6 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000340)='numa_maps\x00') syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x40000000000, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) 23:10:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x3) 23:10:02 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:10:02 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x2) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) getgroups(0x7, &(0x7f00000014c0)=[0xee01, 0xee00, 0xee00, 0x0, 0xee01, 0xee00, 0xffffffffffffffff]) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) getresgid(&(0x7f00000010c0), &(0x7f0000001100)=0x0, &(0x7f0000001140)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000001200)={{0x1, 0xee00, r7, 0x0, 0x0, 0x24, 0x2}, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffdd}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001500), 0x4080, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = openat$incfs(r0, &(0x7f0000001540)='.log\x00', 0x400000, 0x40) sendmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000000)="5254ef37b4ee6838c153a058895d7a1f1f8ecf44f7b95d12e40662", 0x1b}, {&(0x7f0000000200)="b20751d61ebc040c8e281db74258c1dcb6bc5c88b5f4d639faa86c53511b5b0d62786fd73a4ae195a8c904f89c2f45633ba04d43eb7f0ddf1ee8829aed2bdd7ac9fc55aee4f14ab335f3f6162cadb994540c2b66e8765b45f1186c515a1a624421c256b65124a668648d522757331c85556943aa1117a1c6e0becc8f83974ce4e74d2d5cd6aa35fc6829151eae6ff25b8912002b87ac4e01a5c5e7881eb6f753d96ae8366f27fcb6029d0c6d1438fb26a6b2543530caa1c1c90e854d15f9c1286992036d78d55a4bfcf05a26f39b6a6bbf915fa698f88e63decde6ac9c3693e3805f6159b0bd168db000e55501f4d38a804dde8f8e3f6850db30ebd45432664b611b8d6510e01614b9741f765f7cf9509a665a0b4037893d4491f1c12192e13cd5feb3d1f255656c971bd508f704b3d517e173f7842d32d26ac99f0f0e9a14d140369bee26020bab243fd63fb14185d6e00c9a0c4b732142de7ac184e1ce9019b27c22e4b8cd1e72582f9f3a5be21b347e316c138d8f20635ec86b2ff85f7d1024b32e93c2b16931dc6694d1609b10d4c98e9e945779709ef25977cd16fd5f9a691cd5b1560762c6db46ff3d778b31b9f9665ee3226227b61461cff89179e68b4481fefd56b38ec9168a9852c68571526ca631987513496a7a35f0381f54ed7563166cdef6eaa709e43e5f35b77cffb094455b736a36310479b99bf0f4a2cbcc752b2310ee1979b5fe996bc080d22dbf987949b58107fb41e9928a6be58469bea02f2837dd34d1f75d52a1f54746bb0030e666941aaf9c987fa7e9f94817c86ff06936632f391b9a0b2c1d406797f78ff160c56b331dbb69be08463885f0b338de32e2b9c9507faf6bfb3103dca2ab46d50f04d8d98f06181ac583f156b7ef7eacee09a75e6f25c82c63c1085f3dc3b9b071f71a13cf90871a5f0182fc3d15dad01e3d8386a22da591e96fa47acf91b4a79482be28b24d54de47975958d9d0537b4f1caf08c8cb8c446689262caefe3cf4872c0f15f87a6e88e3191bea136a589f99030743aa0fb1948f549ea812af77886342f48a45eb4dcfcbc67decafd0d91b7d7bcb9a67ed34a28627af28efc8727fc96054da8fda43c484e780ba42fb97529ce7c28adb53f73243b97d074ff0285000d5c12f6c98b0c544fe3d2bdb2a3b60923f1752303c4c9964fdeaed1ca248bccff9c4a3978af7cbf6017273cee258aa7ec5d54b4a3275dede7fa6b57e404d9f383e23f0538dc4415cbd5396bdde804488e1f72d3efb9e34efcd7af6098c075f20e68ed491418f92cc73cfa2730f04ef4c601e1c1f7ab4c7f09fb2c48214f6e66b2b88f7a7e40b1f536e50720ae94330c9793a8b4624a6837e82f33b730e4f85e862aa3f282c2955af968186a9be23f0231beec17f2956d41cb47ab7fbe733e73e2d5b81b349020b0c5d6a9c07ac18935e1599fbed0cc793ce093e091d68c94079609d2ec21d0195717fb8290f7b0cf37dc7b7086859f0cd5dd6ad062b94673e84345cd5d446cd2d227cd8d2f5c5533ebddeccabd7757cef2579b5ba2a8cbe81bc05aa4d8435b6063454f18db9e81773e0dfe7dd1d4d889136b68144a08d7ad2f33446dd478c1c076849642b1e3de07dc86f1b57c24bea16e251059a52be0e66ab1dfba6c9d77a461de81692be787d70968415c7f02b4cbbaf0cdb6699020064b5b7933cd78839bd0e2925a377bbf328c824f5d87757500751574bf31d51be5334a152c9915e3e6b066fd8aa2bf1bb3d8f90c11a64f0588d16b7f5bf4a636e94e73e2ebd520743b6d69eb1b8cdd5b85224c2b4fdaf58dbeb7ab0d83a2dbb54ad151c3d4b4941ea0f2a276118d970e4185c296966f94e61681e98ab67284b6f941f8cdcaf82d7e1d3e779c1c171843400418b7706e485da5d81c124eb816c4eb780b1691297244447b5a265648a04a73bfc88a0113bb8d73d2ee47de1552b67e1d434ba76b861110d78b671c34038e017b9b5be22303fbe5fc0e651b41b478ee152899f88f073102e15207de0c48e1fa1a6c26f2ce31670de4307d5323406354c6a5a28ac51e8f642bc227fa948f2ac7f2a8a03de6e4d67173cb4dfa4e3c55a2b66ec1548663b99acc5a5ed08d29e9647342cce91c42f932d398166e2373251dc231d65525bf3832400e55a68ce4f52bbf5065a4d3807ce3455896233cdc3bb237eadb95be2bb782e5acb22e32371ec1d2650a78470efc569911e63d52629f6cd7b0768919223a411fea01f55254b3c93af0d4e5bd9d8abfe886130bca8a56b722e9c0d2b50e790e6baec5d2c979affaccd19ad571e5fb71250f4ac83cd5344219c9ab6632f3c4d49bce60d8c5c621ee4a88c3c23d0a92e6fe426bd9d57a776644b158b9268fd6ce1dc99b846796f864cc01f3576fd6c6235a8cadaa76c830fdba65110f361991ca53335958f1b4c7a152c513845fada792df93d672037c3c5a0b371674a6a8b55cf60a0dffde1c442239b8244d89350527bfeca3f3fc7e10541652fd298693f75b0155014245ab4a3e76038e4567ea8af3331dc4cf46bcfb40773894232d671c4dd5e7a2cdaefc0ec8448738530b332c2c985a5bf4034e2c421be791a39e2af5bcbd86ac88fc7e166855d3c21cc82eab1bac8f45f6ab894e024d1decba0621d8f829c391afd9161f78f35e299bc832bd20b9692278be8ec4715c80b65f698086ee23ab20c86f4b16ba14b0500b0b290a56ce1684e36d8ccf73d71853cbefab27d15e8a5e72e218ca8b7f0c31c7018435aeea200843ab2c72706fe2931cd9b41b418d80e2f65ac14bf0c6447634bab38d64b8ab016eaba822e4f4ae7c8f1a60be7f2e36b01a75817da7f567294978929eb15b5b154fb4570a595ad3a0a344ba47f679c7bab04cee782ab04d45bb6aeda1eb9b8eb82492b90010e4289e5363e74ea6b55b18595e6184edf927667b17f3d8800923d1e0f9f4aeb52705dbceb6c4cdf886e73ae91deca2af94d8d0adf6976dc954d3e4cffc218bd89a2c38f7dc0050fb2a0235c2eb90b4fd52a2c2b03a73152e40bff6de7c14c85753cee3e7b77fc592dd7b9764afcd4096d66708fd5e65d7100009e8733afea7ee6a8b39792d456a2a40c01bd7381145fa64bc0e11597a6b00577186190d38cffd654fdee6c57a92915da002c1cd4b274f420ab804f2c5254050c8491fcb8f0365ba61aaa9288f9819332973d734dd867d7db870a989ad57acb19a108594ece7c2694e104fd95f60ac7af6ef8ce6acbbc65b4e3b108a1aeda273176231788ddc329fd15c7bd50cb7f51ef4d7a9e96a6a62e5f7bcfdf11b8a1e4a9bcd1bc58acb80250f9c1d13cd50de9a1713b00d3e26d86d5b435503cbec8dd53aeb37673e30c8f282025731edf26f2e56263a7b466001ec287190d256f38418eec17c8fd6e13c35f6c5e02756b0fb05f37d95da7add0cde9c21ff2ae3ac5dfd297f9aa2dc1f5c8e680aa728442294a6ac92d4f14156fdc23ca80197d85106b986c6b7607623830841660443226284d3f9216f3f2ca1c34b9edba72972ab5bfa8018c15081bc73dff86a219589b358eb7190a86ad24928161a6cb5c232d6563fb80ce153f4516d95c1745054b17eb637100cf29e5f7866ceab1511d40efe4adc734a8aa9691d2bb8fe6b04c4a55c6b23561dbcf2c47e92770606073f62716090206383521c4f5f115286c76ebf9aa854fab632ad4332b0f74e5914bfb27ebc29af56d807179771ac1e0e881f4bb266459feb3815df58f106384d6d44d3c98dede68ab8e37b67442a8a8bd588210db8ef21481fee04c4da539c61ede40fe6ca1ee7d4779a79300412aa5ae8b3e8dc234538029d87558ba4255f15f13e861d77789b7c8f067d29f129fb247401f8d37b08ef59a25815738625db01a0876840b344cad79d74077405923f869316ef1578d791e4c89e912892ead8f5b8976ca9c352c3f4cb9712c0b3b35f9399fb2c5d27265b9f3502a9eeb61993e2dddacfb1d637bd391a2b6e5cdda6ad81ea8c66905bfadf4517d5d0a86f2660f35dd9f9e5ad337c75d94c062a38f421af2e96c78ba48a14079850e889bd17820c1074b66c5c3265704b2f8515ac0f078e2264105ee9a3193c4d74c2ede2cfe72e8892fcfe358db7c163c5f201e8c252b4226a0cd8e882b59064134dee5d4be7787cf1023f4844ac3d0daaa994e9d9ffb985ab34de70d122a7e1a5b151ad5f560f5eb4a076b16e307f69cbc81e7e3627b647ef20e54bdd9ec5e7d5667f16299b9bf6daf58cec69ca5bd9793941a97cfbbb38f7485356a6b260a218511442a1b42ea176c34d1292472c87a4adeda70ae5701e0cba01406ff5a8e61cfe1092e05b512b724c3306aded02ffab262cf7078fa836004d5485df592c6836dd21987c8244bb6d27c29adc139095a992547867809288d79d42d12ec424e0bb853e305360d771517d2dcb6c86f56b8cb2462f8e9be260c1f37c936c4f681eaa97fbe44714296221625b2b6cfd93e5a691ee96d13aebe32def68218b9b74c428348488eec869e384db6d6918e648e27062acffafc2bed72c8bba94430aeeea50dd5a8c282304693829e10820280abf093d330dbb5dde1eaa6706bc414978853914c914b683950b2bb8bed3225847b9634cbaa990a5711417d8be6c0da1ea39de4e03a545eee9af38de02623e8b29fb2b485526ecfcace29a52e6925a94d4b3dd2052130610e6be942a3179ebdc84bf6346ff3a9e14df532445c73be5f78f6b052eac52c219203f9e40f09950a6f6907faae2b3c7f3256baa72909a2cb0ec2f36c2253f515d4929f57150a5a5139fbbf38c38e18fe6fac2adbe944416fbcc08057b686fc36169bd2073c9a4509569837cf775a281d90eb5c8c1be460ab20579b64f010507d488c5dd039c9b9e0164b0da427d88aa9df700bb008ff78d108ea9db0a1fb471bbd3239d98d7fd09c3461e7f66896993b6557879971394115c658f71e72002e4e9e6710b98ac846402ad3e774afd8b777aa5ff07f4913198c2cc6b075199f691191262165720f3184abf84e36327eda4ff6494e4075ed394e67cdfbc7ce5a47cec5b5183010444c2ca0ea07bfbae983abc68c5df89660f08b1c45a25e25d18d62a0bba58a122210641d108a456c8295e8d422777e1a7974bb1590ee183fd8477f6a4ac2ee79532e1594880dd14792014d16b45d406c1c09b4e09acba041f294ce1127d1ed0b5322129eb772e32727fff7b9769fa84f9990d7d0da060ae9ff234d6846bed8b6c8a599b57bf0c0ac768959a6d60532fe4bb6fb2e220360882c0e9821f587dd8cbec8e827c1b5c21399e40542c95170a2c444c61e1f0b66b5ac08dbd1876ead4b28091b5321c11507e013dd0cd046063ba381fd8d6c5630bd3ec53d15e3ada756daa27d1b54ccda44139b94fe04efdd0fb73fe072500623dff5010b968acbed51f7f0b9f95761cef7aa1025b0af5c889cd459e3b4f47b53500651bcfb7947e9e5c9867507b2796d08bfdce473e2383071d3fc2f07baf46a80c0e08382c7b058a53e62275bc744746baea8124d94eff0579efd7c60d25b13f277f410b800f601580bdad100d6ce3a93ead3e2c4436b2e61cab39b084f095da8534892fab35bafb1e4a4ff41d8d5b536257e55a322eee8e25894b45ca8e71214a18b5eeb462e1b3d589df0f7ed5ac7efa12a7e444bd07021cd2e84a8a7196b4810d0fba114d08e0be7ce9a5f56ee82c0ddc998c62e148992abd32a72ee86b226575e5c696aa17fd0f58398499b117e0947e8a5ad2193b5a6cfabab67b8056ed68c", 0x1000}, {&(0x7f0000001200)="38dd7c5ce053744259476eba783166621e233d26920cb711f075d4ce25f8af8cc069e650e31583b69c682b2c087dfc1cebf890fcfe55b23bb727920d72d16e0b9548ab40a358a72755f126e95a10d6ccd0082645df8cc9f4568e13cfb27d6dc766c4ff35a4ca9d66689116fc7622ba9c15f88d614896f617a234f40c214d749d69ce7e51722ed0ab929576df3e3c1cb57232762926a0b98f30f0148d7ea5e99f6511673b106e283c69792fa516eea21249879b37460d7e8ac38e9cba836f3ba51638dbc444dfcc", 0xc7}], 0x3, &(0x7f0000001580)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r5}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}, @rights={{0x28, 0x1, 0x1, [r8, r2, 0xffffffffffffffff, r9, r10, r11]}}], 0x130, 0x84}, 0x44) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) 23:10:02 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) [ 2947.775745] FAULT_INJECTION: forcing a failure. [ 2947.775745] name failslab, interval 1, probability 0, space 0, times 0 [ 2947.776814] CPU: 1 PID: 12473 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2947.777406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2947.778115] Call Trace: [ 2947.778353] dump_stack+0x107/0x167 [ 2947.778674] should_fail.cold+0x5/0xa [ 2947.779011] should_failslab+0x5/0x20 [ 2947.779343] __kmalloc_node_track_caller+0x74/0x3b0 [ 2947.779779] ? __ip_append_data+0x2930/0x3310 [ 2947.780184] __alloc_skb+0xb1/0x5b0 [ 2947.780505] __ip_append_data+0x2930/0x3310 [ 2947.780890] ? raw_destroy+0x30/0x30 [ 2947.781226] ? ip_finish_output+0x330/0x330 [ 2947.781600] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2947.782038] ? memcpy+0x39/0x60 [ 2947.782330] ? raw_destroy+0x30/0x30 [ 2947.782654] ip_append_data+0x114/0x1a0 [ 2947.783006] raw_sendmsg+0xaa6/0x29d0 [ 2947.783347] ? dst_output+0x170/0x170 [ 2947.783677] ? __lock_acquire+0x1657/0x5b00 [ 2947.784082] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2947.784532] ? SOFTIRQ_verbose+0x10/0x10 [ 2947.784883] ? create_object.isra.0+0x3ad/0xa20 [ 2947.785295] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2947.785737] ? find_held_lock+0x2c/0x110 [ 2947.786100] ? trace_hardirqs_on+0x5b/0x180 [ 2947.786474] ? dst_output+0x170/0x170 [ 2947.786807] inet_sendmsg+0x11d/0x140 [ 2947.787135] ? inet_send_prepare+0x540/0x540 [ 2947.787514] __sock_sendmsg+0x13c/0x190 [ 2947.787867] ____sys_sendmsg+0x334/0x870 [ 2947.788233] ? sock_write_iter+0x3d0/0x3d0 [ 2947.788597] ? do_recvmmsg+0x6d0/0x6d0 [ 2947.788936] ? SOFTIRQ_verbose+0x10/0x10 [ 2947.789287] ? mark_lock+0xf5/0x2df0 [ 2947.789615] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2947.790077] ___sys_sendmsg+0xf3/0x170 [ 2947.790415] ? sendmsg_copy_msghdr+0x160/0x160 [ 2947.790812] ? __fget_files+0x2cf/0x520 [ 2947.791163] ? lock_downgrade+0x6d0/0x6d0 [ 2947.791526] ? lock_downgrade+0x6d0/0x6d0 [ 2947.791902] ? __fget_files+0x2f8/0x520 [ 2947.792258] ? __fget_light+0xea/0x290 [ 2947.792600] __sys_sendmmsg+0x195/0x470 [ 2947.792949] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2947.793321] ? lock_downgrade+0x6d0/0x6d0 [ 2947.793695] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2947.794119] ? wait_for_completion_io+0x270/0x270 [ 2947.794537] ? rcu_read_lock_any_held+0x75/0xa0 [ 2947.794937] ? vfs_write+0x354/0xb10 [ 2947.795261] ? fput_many+0x2f/0x1a0 [ 2947.795578] ? ksys_write+0x1a9/0x260 [ 2947.795920] ? __ia32_sys_read+0xb0/0xb0 [ 2947.796277] __x64_sys_sendmmsg+0x99/0x100 [ 2947.796642] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2947.797089] do_syscall_64+0x33/0x40 [ 2947.797412] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2947.797851] RIP: 0033:0x7f7b32767b19 [ 2947.798173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2947.799728] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2947.800394] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2947.801003] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2947.801612] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2947.802219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2947.802828] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:10:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x3) 23:10:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0x7ffff000}], 0x1}, 0x10044001) 23:10:18 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 86) 23:10:18 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x11, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:10:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r3, 0x2) signalfd(r3, &(0x7f0000000000)={[0x40]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) 23:10:18 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:10:18 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000240)="abea25e53b66a2a829ec5111ba7e3cae8be1209c656aa573e25c8e1ea84caa3eedb0e059c88d81bc6e0c35176c7167b146181b3fdfdf24771adc548c8d3911505abb3e6e42f763d249d881bd52718154723b6116fdade715f34f4296a6098ba31e97770f6dbf92f3b04c943b5dbb9bb4c3acf50dea704192d9d900d5f5b8f040c0e172a99df628b61d93201e3727e61ab0fa", 0x92}], 0x1) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:10:18 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007bf) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) [ 2963.463122] FAULT_INJECTION: forcing a failure. [ 2963.463122] name failslab, interval 1, probability 0, space 0, times 0 [ 2963.464172] CPU: 0 PID: 12501 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2963.464756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2963.465449] Call Trace: [ 2963.465683] dump_stack+0x107/0x167 [ 2963.465996] should_fail.cold+0x5/0xa [ 2963.466325] ? create_object.isra.0+0x3a/0xa20 [ 2963.466716] should_failslab+0x5/0x20 [ 2963.467043] kmem_cache_alloc+0x5b/0x310 [ 2963.467393] create_object.isra.0+0x3a/0xa20 [ 2963.467768] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2963.468544] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2963.469670] ? __ip_append_data+0x2930/0x3310 [ 2963.470660] __alloc_skb+0xb1/0x5b0 [ 2963.471463] __ip_append_data+0x2930/0x3310 [ 2963.472443] ? raw_destroy+0x30/0x30 [ 2963.473266] ? ip_finish_output+0x330/0x330 [ 2963.474196] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2963.475290] ? memcpy+0x39/0x60 [ 2963.476019] ? raw_destroy+0x30/0x30 [ 2963.476818] ip_append_data+0x114/0x1a0 [ 2963.477690] raw_sendmsg+0xaa6/0x29d0 [ 2963.478513] ? dst_output+0x170/0x170 [ 2963.479330] ? __lock_acquire+0x1657/0x5b00 [ 2963.480111] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2963.480554] ? SOFTIRQ_verbose+0x10/0x10 [ 2963.480898] ? create_object.isra.0+0x3ad/0xa20 [ 2963.481305] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2963.481740] ? find_held_lock+0x2c/0x110 [ 2963.482097] ? trace_hardirqs_on+0x5b/0x180 [ 2963.482466] ? dst_output+0x170/0x170 [ 2963.482793] inet_sendmsg+0x11d/0x140 [ 2963.483117] ? inet_send_prepare+0x540/0x540 [ 2963.483490] __sock_sendmsg+0x13c/0x190 [ 2963.483829] ____sys_sendmsg+0x334/0x870 [ 2963.484682] ? sock_write_iter+0x3d0/0x3d0 [ 2963.485597] ? do_recvmmsg+0x6d0/0x6d0 [ 2963.486432] ? SOFTIRQ_verbose+0x10/0x10 [ 2963.487341] ? mark_lock+0xf5/0x2df0 [ 2963.488154] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2963.489292] ___sys_sendmsg+0xf3/0x170 [ 2963.490125] ? sendmsg_copy_msghdr+0x160/0x160 [ 2963.491105] ? __fget_files+0x2cf/0x520 [ 2963.491979] ? lock_downgrade+0x6d0/0x6d0 [ 2963.493071] ? lock_downgrade+0x6d0/0x6d0 [ 2963.493970] ? __fget_files+0x2f8/0x520 [ 2963.494837] ? __fget_light+0xea/0x290 [ 2963.495690] __sys_sendmmsg+0x195/0x470 [ 2963.496168] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2963.496536] ? lock_downgrade+0x6d0/0x6d0 [ 2963.496905] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2963.497317] ? wait_for_completion_io+0x270/0x270 [ 2963.497729] ? rcu_read_lock_any_held+0x75/0xa0 [ 2963.498123] ? vfs_write+0x354/0xb10 [ 2963.498442] ? fput_many+0x2f/0x1a0 [ 2963.498754] ? ksys_write+0x1a9/0x260 [ 2963.499082] ? __ia32_sys_read+0xb0/0xb0 [ 2963.499436] __x64_sys_sendmmsg+0x99/0x100 [ 2963.499799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2963.500276] do_syscall_64+0x33/0x40 [ 2963.500596] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2963.501032] RIP: 0033:0x7f7b32767b19 [ 2963.501353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2963.502900] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2963.503545] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2963.504173] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2963.504772] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2963.505368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2963.505969] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:10:18 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:10:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) 23:10:18 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x5c0, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:10:18 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007c1) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:10:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) statx(r0, &(0x7f0000000180)='./file0\x00', 0x400, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f00000009c0)={0x0, 0x0}) tgkill(r3, r5, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x12c, 0x1, 0xb, 0x301, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x7}, [@nested={0x118, 0x7, 0x0, 0x1, [@typed={0x2a, 0x92, 0x0, 0x0, @binary="7bfecd07a6fffce8973962484c2e1a93c2185b61983c7788233d495690eadf6a360aa5b07b96"}, @typed={0x8, 0x57, 0x0, 0x0, @uid=r1}, @typed={0x8, 0x57, 0x0, 0x0, @pid=r3}, @generic="b1699ecce90c89b3d268a73bcebc429b744fa13fc214f4750e27f64a01933a4284c87ceefb2203e4925eff0a2519f5ca383b6497198fe3377b0adbb2242d5850d238906b7e59cc65bc20ad01b6ab1d1d536c4137cceec4c4cb4a024c546cd1c84e13409109f134141b547022883384efd27a6b90ba6608efb76d97481b7bc5fc2f8a2d596b37f798e3f536e6146f8f91cf35c1aeb4cb0dced314be216287e8a9ade381689978370dd673666a3f4493da22cb0e10fd1aae15e4f397fa8887c2397bdcaf977c36297cd6173bfc8d033571dba799fa7d511f4b"]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8080}, 0xc0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r6, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r7, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000040)) 23:10:18 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:10:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) 23:10:18 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f00000009c0)={0x0, 0x0}) tgkill(r5, r7, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x1, 0x7, 0x3f, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffff0000, 0x0, @perf_config_ext={0x1, 0x401}, 0x4, 0x3, 0x0, 0x6, 0x6423, 0x204, 0xc1, 0x0, 0xfff, 0x0, 0x4}, r5, 0xffffbfffffffffff, 0xffffffffffffffff, 0x1) 23:10:18 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 87) [ 2963.751026] FAULT_INJECTION: forcing a failure. [ 2963.751026] name failslab, interval 1, probability 0, space 0, times 0 [ 2963.753743] CPU: 1 PID: 12533 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2963.754334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2963.755030] Call Trace: [ 2963.755265] dump_stack+0x107/0x167 [ 2963.755581] should_fail.cold+0x5/0xa [ 2963.755925] ? create_object.isra.0+0x3a/0xa20 [ 2963.756322] should_failslab+0x5/0x20 [ 2963.756649] kmem_cache_alloc+0x5b/0x310 [ 2963.757000] create_object.isra.0+0x3a/0xa20 [ 2963.757380] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2963.757815] kmem_cache_alloc_node+0x169/0x330 [ 2963.758211] __alloc_skb+0x6d/0x5b0 [ 2963.758530] __ip_append_data+0x2930/0x3310 [ 2963.758911] ? raw_destroy+0x30/0x30 [ 2963.759238] ? ip_finish_output+0x330/0x330 [ 2963.759606] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2963.760054] ? memcpy+0x39/0x60 [ 2963.760340] ? raw_destroy+0x30/0x30 [ 2963.760658] ip_append_data+0x114/0x1a0 [ 2963.761006] raw_sendmsg+0xaa6/0x29d0 [ 2963.761342] ? dst_output+0x170/0x170 [ 2963.761670] ? __lock_acquire+0x1657/0x5b00 [ 2963.762050] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2963.762495] ? SOFTIRQ_verbose+0x10/0x10 [ 2963.762842] ? create_object.isra.0+0x3ad/0xa20 [ 2963.763250] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2963.763685] ? find_held_lock+0x2c/0x110 [ 2963.764060] ? trace_hardirqs_on+0x5b/0x180 [ 2963.764431] ? dst_output+0x170/0x170 [ 2963.764760] inet_sendmsg+0x11d/0x140 [ 2963.765086] ? inet_send_prepare+0x540/0x540 [ 2963.765462] __sock_sendmsg+0x13c/0x190 [ 2963.765803] ____sys_sendmsg+0x334/0x870 [ 2963.766153] ? sock_write_iter+0x3d0/0x3d0 [ 2963.766512] ? do_recvmmsg+0x6d0/0x6d0 [ 2963.766848] ? SOFTIRQ_verbose+0x10/0x10 [ 2963.767196] ? mark_lock+0xf5/0x2df0 [ 2963.767517] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2963.767980] ___sys_sendmsg+0xf3/0x170 [ 2963.768316] ? sendmsg_copy_msghdr+0x160/0x160 [ 2963.768709] ? __fget_files+0x2cf/0x520 [ 2963.769050] ? lock_downgrade+0x6d0/0x6d0 [ 2963.769407] ? lock_downgrade+0x6d0/0x6d0 [ 2963.769767] ? __fget_files+0x2f8/0x520 [ 2963.770113] ? __fget_light+0xea/0x290 [ 2963.770453] __sys_sendmmsg+0x195/0x470 [ 2963.770798] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2963.771168] ? lock_downgrade+0x6d0/0x6d0 [ 2963.771537] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2963.771965] ? wait_for_completion_io+0x270/0x270 [ 2963.772380] ? rcu_read_lock_any_held+0x75/0xa0 [ 2963.772777] ? vfs_write+0x354/0xb10 [ 2963.773098] ? fput_many+0x2f/0x1a0 [ 2963.773410] ? ksys_write+0x1a9/0x260 [ 2963.773735] ? __ia32_sys_read+0xb0/0xb0 [ 2963.774089] __x64_sys_sendmmsg+0x99/0x100 [ 2963.774449] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2963.774887] do_syscall_64+0x33/0x40 [ 2963.775219] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2963.775655] RIP: 0033:0x7f7b32767b19 [ 2963.776144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2963.779567] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2963.781277] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2963.782861] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2963.784445] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2963.786019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2963.787584] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:10:33 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 88) 23:10:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0x11ffffeef}], 0x1}, 0x10044001) 23:10:33 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0xb80, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:10:33 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:10:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) 23:10:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007c3) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:10:33 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f00000002c0)={{r2}, r6, 0x0, @inherit={0x60, &(0x7f0000000240)={0x1, 0x3, 0x1, 0x6, {0x8, 0x34e, 0x5, 0xdf, 0x9}, [0x8, 0x509a, 0x0]}}, @name="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"}) 23:10:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pidfd_getfd(r0, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) [ 2978.621249] FAULT_INJECTION: forcing a failure. [ 2978.621249] name failslab, interval 1, probability 0, space 0, times 0 [ 2978.622484] CPU: 0 PID: 12550 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2978.623102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2978.623822] Call Trace: [ 2978.624054] dump_stack+0x107/0x167 [ 2978.624373] should_fail.cold+0x5/0xa [ 2978.624732] should_failslab+0x5/0x20 [ 2978.625043] __kmalloc_node_track_caller+0x74/0x3b0 [ 2978.625467] ? __ip_append_data+0x2930/0x3310 [ 2978.625874] __alloc_skb+0xb1/0x5b0 [ 2978.626173] __ip_append_data+0x2930/0x3310 [ 2978.626609] ? raw_destroy+0x30/0x30 [ 2978.626928] ? ip_finish_output+0x330/0x330 [ 2978.627274] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2978.627752] ? memcpy+0x39/0x60 [ 2978.628030] ? raw_destroy+0x30/0x30 [ 2978.628377] ip_append_data+0x114/0x1a0 [ 2978.628765] raw_sendmsg+0xaa6/0x29d0 [ 2978.629083] ? dst_output+0x170/0x170 [ 2978.629391] ? __lock_acquire+0x1657/0x5b00 [ 2978.629819] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2978.630237] ? SOFTIRQ_verbose+0x10/0x10 [ 2978.630629] ? create_object.isra.0+0x3ad/0xa20 [ 2978.631041] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2978.631456] ? find_held_lock+0x2c/0x110 [ 2978.631865] ? trace_hardirqs_on+0x5b/0x180 [ 2978.632255] ? dst_output+0x170/0x170 [ 2978.632606] inet_sendmsg+0x11d/0x140 [ 2978.632942] ? inet_send_prepare+0x540/0x540 [ 2978.633297] __sock_sendmsg+0x13c/0x190 [ 2978.633664] ____sys_sendmsg+0x334/0x870 [ 2978.634016] ? sock_write_iter+0x3d0/0x3d0 [ 2978.634366] ? do_recvmmsg+0x6d0/0x6d0 [ 2978.634751] ? SOFTIRQ_verbose+0x10/0x10 [ 2978.635105] ___sys_sendmsg+0xf3/0x170 [ 2978.635424] ? sendmsg_copy_msghdr+0x160/0x160 [ 2978.635847] ? __fget_files+0x2cf/0x520 [ 2978.636220] ? lock_downgrade+0x6d0/0x6d0 [ 2978.636608] ? __fget_files+0x2f8/0x520 [ 2978.636942] ? __fget_light+0xea/0x290 [ 2978.637281] __sys_sendmmsg+0x195/0x470 [ 2978.637650] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2978.638013] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2978.638380] ? clockevents_program_event+0x131/0x360 [ 2978.638856] ? tick_program_event+0xa8/0x140 [ 2978.639230] ? hrtimer_interrupt+0x771/0x9b0 [ 2978.639648] __x64_sys_sendmmsg+0x99/0x100 [ 2978.639999] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2978.640442] do_syscall_64+0x33/0x40 [ 2978.640787] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2978.641195] RIP: 0033:0x7f7b32767b19 [ 2978.641521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2978.643077] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2978.643757] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2978.644336] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2978.644963] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2978.645528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2978.646146] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:10:33 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:10:33 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 89) [ 2978.709973] tmpfs: Unknown parameter 'ºËËáQŒŒ ‡t⦘bÇ”–åTkÔ€ßm䶸ÿãϵDƒ[Ò™KÄ]°.1ž«£Â©Ü“WGŧEXFþ [ 2978.709973] Rt2ÅJ4 [ 2978.709973] Fa`V+4AdiÖΖ_ [ 2978.709973] Á¼„cÛ±dK6\*Õ Î6ý~Ñwõ4Åðõv˜µ^¡Âî¦É¥¨9·0º·± €£sšS'ŠŒòPÏpúÐîЈGÛ‚Qðê·Ø>Òt¥-Ŭúg¶inq]<' 23:10:33 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x1140, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:10:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:10:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x12000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r4, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) r5 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001100)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0xfffffffffffffff8, &(0x7f00000010c0)=[0xffffffffffffffff], 0x1, 0x0, 0x1, {0x0, r6}}, 0x800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r5, 0x0, 0x0, 0x0, 0x10002, 0x1, {0x1, r6}}, 0x2) ioctl$KIOCSOUND(r3, 0x4b2f, 0xfffffffffffffffe) 23:10:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007c5) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:10:33 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:10:33 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r3, &(0x7f0000000080)=""/65, 0x41) sendfile(r2, r3, &(0x7f0000000180)=0x100000001, 0x1f) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r4, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(0xffffffffffffffff, 0x402, 0x887c7e2109ead912) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) [ 2978.852879] FAULT_INJECTION: forcing a failure. [ 2978.852879] name failslab, interval 1, probability 0, space 0, times 0 [ 2978.854216] CPU: 0 PID: 12570 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2978.854846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2978.855506] Call Trace: [ 2978.855794] dump_stack+0x107/0x167 [ 2978.856125] should_fail.cold+0x5/0xa [ 2978.856439] ? create_object.isra.0+0x3a/0xa20 [ 2978.856855] should_failslab+0x5/0x20 [ 2978.857186] kmem_cache_alloc+0x5b/0x310 [ 2978.857520] create_object.isra.0+0x3a/0xa20 [ 2978.857918] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2978.858355] kmem_cache_alloc_node+0x169/0x330 [ 2978.858779] __alloc_skb+0x6d/0x5b0 [ 2978.859104] __ip_append_data+0x2930/0x3310 [ 2978.859470] ? raw_destroy+0x30/0x30 [ 2978.859856] ? ip_finish_output+0x330/0x330 [ 2978.860279] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2978.860731] ? memcpy+0x39/0x60 [ 2978.860999] ? raw_destroy+0x30/0x30 [ 2978.861320] ip_append_data+0x114/0x1a0 [ 2978.861693] raw_sendmsg+0xaa6/0x29d0 [ 2978.862015] ? dst_output+0x170/0x170 [ 2978.862345] ? __lock_acquire+0x1657/0x5b00 [ 2978.862757] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2978.863180] ? SOFTIRQ_verbose+0x10/0x10 [ 2978.863529] ? create_object.isra.0+0x3ad/0xa20 [ 2978.863981] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2978.864430] ? find_held_lock+0x2c/0x110 [ 2978.864816] ? trace_hardirqs_on+0x5b/0x180 [ 2978.865166] ? dst_output+0x170/0x170 [ 2978.865501] inet_sendmsg+0x11d/0x140 [ 2978.865853] ? inet_send_prepare+0x540/0x540 [ 2978.866209] __sock_sendmsg+0x13c/0x190 [ 2978.866598] ____sys_sendmsg+0x334/0x870 [ 2978.866939] ? sock_write_iter+0x3d0/0x3d0 [ 2978.867278] ? do_recvmmsg+0x6d0/0x6d0 [ 2978.867685] ? SOFTIRQ_verbose+0x10/0x10 [ 2978.868016] ? mark_lock+0xf5/0x2df0 [ 2978.868324] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2978.868812] ___sys_sendmsg+0xf3/0x170 [ 2978.869129] ? sendmsg_copy_msghdr+0x160/0x160 [ 2978.869506] ? __fget_files+0x2cf/0x520 [ 2978.869892] ? lock_downgrade+0x6d0/0x6d0 [ 2978.870231] ? lock_downgrade+0x6d0/0x6d0 [ 2978.870614] ? __fget_files+0x2f8/0x520 [ 2978.870972] ? __fget_light+0xea/0x290 [ 2978.871291] __sys_sendmmsg+0x195/0x470 [ 2978.871687] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2978.872066] ? lock_downgrade+0x6d0/0x6d0 [ 2978.872419] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2978.872871] ? wait_for_completion_io+0x270/0x270 [ 2978.873262] ? rcu_read_lock_any_held+0x75/0xa0 [ 2978.873683] ? vfs_write+0x354/0xb10 [ 2978.874005] ? fput_many+0x2f/0x1a0 [ 2978.874300] ? ksys_write+0x1a9/0x260 [ 2978.874657] ? __ia32_sys_read+0xb0/0xb0 [ 2978.875009] __x64_sys_sendmmsg+0x99/0x100 [ 2978.875352] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2978.875834] do_syscall_64+0x33/0x40 [ 2978.876167] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2978.876623] RIP: 0033:0x7f7b32767b19 [ 2978.876928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2978.878455] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2978.879107] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2978.879761] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2978.880365] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2978.880974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2978.881595] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:10:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x8}, 0x10044001) 23:10:49 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f00000002c0)) fcntl$getownex(r3, 0x10, &(0x7f0000000240)={0x0, 0x0}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xfe, 0x2, 0x6, 0x4, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_config_ext={0x2, 0xf86}, 0x41480, 0x4, 0xe78, 0x1, 0x3f, 0x9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, r5, 0x400e, r6, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x3, 0x81, 0x6, 0x9, 0x0, 0x0, 0x2000, 0xc, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x1, 0x7}, 0x8408, 0x100, 0x8, 0xea39aefed4af5920, 0x6, 0xd094, 0x5, 0x0, 0xd28e, 0x0, 0x1ff}, r5, 0x6, r6, 0x17) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = signalfd(r7, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r8, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000040)) r9 = ioctl$TIOCGPTPEER(r7, 0x5441, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000100)) copy_file_range(r7, 0x0, r2, &(0x7f0000000340)=0xc, 0x1ff, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:10:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:10:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r3, 0x2) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) 23:10:49 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x1700, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:10:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:10:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007c9) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:10:49 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 90) 23:10:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) [ 2993.953961] FAULT_INJECTION: forcing a failure. [ 2993.953961] name failslab, interval 1, probability 0, space 0, times 0 [ 2993.955573] CPU: 1 PID: 12611 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 2993.956218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2993.956937] Call Trace: [ 2993.957183] dump_stack+0x107/0x167 [ 2993.957515] should_fail.cold+0x5/0xa [ 2993.957862] ? __alloc_skb+0x6d/0x5b0 [ 2993.958221] should_failslab+0x5/0x20 [ 2993.958575] kmem_cache_alloc_node+0x55/0x330 [ 2993.958973] __alloc_skb+0x6d/0x5b0 [ 2993.959299] __ip_append_data+0x2930/0x3310 [ 2993.959690] ? raw_destroy+0x30/0x30 [ 2993.960027] ? ip_finish_output+0x330/0x330 [ 2993.960452] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2993.960897] ? memcpy+0x39/0x60 [ 2993.961192] ? raw_destroy+0x30/0x30 [ 2993.961543] ip_append_data+0x114/0x1a0 [ 2993.961922] raw_sendmsg+0xaa6/0x29d0 [ 2993.962267] ? dst_output+0x170/0x170 [ 2993.962605] ? __lock_acquire+0x1657/0x5b00 [ 2993.962995] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2993.963456] ? SOFTIRQ_verbose+0x10/0x10 [ 2993.963814] ? create_object.isra.0+0x3ad/0xa20 [ 2993.964273] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2993.964723] ? find_held_lock+0x2c/0x110 [ 2993.965090] ? trace_hardirqs_on+0x5b/0x180 [ 2993.965472] ? dst_output+0x170/0x170 [ 2993.965811] inet_sendmsg+0x11d/0x140 [ 2993.966159] ? inet_send_prepare+0x540/0x540 [ 2993.966565] __sock_sendmsg+0x13c/0x190 [ 2993.966916] ____sys_sendmsg+0x334/0x870 [ 2993.967275] ? sock_write_iter+0x3d0/0x3d0 [ 2993.967644] ? do_recvmmsg+0x6d0/0x6d0 [ 2993.967989] ? SOFTIRQ_verbose+0x10/0x10 [ 2993.968386] ? mark_lock+0xf5/0x2df0 [ 2993.968720] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2993.969186] ___sys_sendmsg+0xf3/0x170 [ 2993.969532] ? sendmsg_copy_msghdr+0x160/0x160 [ 2993.969938] ? __fget_files+0x2cf/0x520 [ 2993.970292] ? lock_downgrade+0x6d0/0x6d0 [ 2993.970660] ? lock_downgrade+0x6d0/0x6d0 [ 2993.971031] ? __fget_files+0x2f8/0x520 [ 2993.971388] ? __fget_light+0xea/0x290 [ 2993.971736] __sys_sendmmsg+0x195/0x470 [ 2993.972089] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2993.972501] ? lock_downgrade+0x6d0/0x6d0 [ 2993.972880] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2993.973304] ? wait_for_completion_io+0x270/0x270 [ 2993.973728] ? rcu_read_lock_any_held+0x75/0xa0 [ 2993.974132] ? vfs_write+0x354/0xb10 [ 2993.974461] ? fput_many+0x2f/0x1a0 [ 2993.974781] ? ksys_write+0x1a9/0x260 [ 2993.975116] ? __ia32_sys_read+0xb0/0xb0 [ 2993.975480] __x64_sys_sendmmsg+0x99/0x100 [ 2993.975851] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2993.980333] do_syscall_64+0x33/0x40 [ 2993.980664] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2993.981112] RIP: 0033:0x7f7b32767b19 [ 2993.981441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2993.983027] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2993.983693] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 2993.984344] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 2993.984963] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2993.985585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2993.986204] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:10:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendfile(r0, r1, 0x0, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x4, 0x400, 0xff, 0x8, 0x1, "50749c6c9e33eb339f4e5c404dc344a8d29043"}) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) 23:10:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:10:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x3) 23:10:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007cb) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:10:49 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x1cc0, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:10:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendfile(r1, r2, &(0x7f0000000180), 0x9e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) [ 3009.688941] FAULT_INJECTION: forcing a failure. [ 3009.688941] name failslab, interval 1, probability 0, space 0, times 0 [ 3009.690607] CPU: 0 PID: 12657 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 3009.691210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3009.691931] Call Trace: [ 3009.692173] dump_stack+0x107/0x167 [ 3009.692515] should_fail.cold+0x5/0xa [ 3009.692857] ? create_object.isra.0+0x3a/0xa20 [ 3009.693261] should_failslab+0x5/0x20 [ 3009.693599] kmem_cache_alloc+0x5b/0x310 [ 3009.693961] create_object.isra.0+0x3a/0xa20 [ 3009.694350] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3009.694807] kmem_cache_alloc_node+0x169/0x330 [ 3009.695217] __alloc_skb+0x6d/0x5b0 [ 3009.695550] __ip_append_data+0x2930/0x3310 [ 3009.695944] ? raw_destroy+0x30/0x30 [ 3009.696293] ? ip_finish_output+0x330/0x330 [ 3009.696681] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3009.697132] ? memcpy+0x39/0x60 [ 3009.697430] ? raw_destroy+0x30/0x30 [ 3009.697763] ip_append_data+0x114/0x1a0 [ 3009.698128] raw_sendmsg+0xaa6/0x29d0 [ 3009.698480] ? dst_output+0x170/0x170 [ 3009.698826] ? __lock_acquire+0x1657/0x5b00 [ 3009.699227] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3009.699693] ? SOFTIRQ_verbose+0x10/0x10 [ 3009.700056] ? create_object.isra.0+0x3ad/0xa20 [ 3009.700499] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3009.700955] ? find_held_lock+0x2c/0x110 [ 3009.701330] ? trace_hardirqs_on+0x5b/0x180 [ 3009.701717] ? dst_output+0x170/0x170 [ 3009.702062] inet_sendmsg+0x11d/0x140 [ 3009.702404] ? inet_send_prepare+0x540/0x540 [ 3009.702799] __sock_sendmsg+0x13c/0x190 [ 3009.703156] ____sys_sendmsg+0x334/0x870 [ 3009.703524] ? sock_write_iter+0x3d0/0x3d0 [ 3009.703900] ? do_recvmmsg+0x6d0/0x6d0 [ 3009.704256] ? SOFTIRQ_verbose+0x10/0x10 [ 3009.704687] ? mark_lock+0xf5/0x2df0 [ 3009.705086] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3009.705647] ___sys_sendmsg+0xf3/0x170 [ 3009.706066] ? sendmsg_copy_msghdr+0x160/0x160 [ 3009.706558] ? __fget_files+0x2cf/0x520 [ 3009.706977] ? lock_downgrade+0x6d0/0x6d0 [ 3009.707424] ? lock_downgrade+0x6d0/0x6d0 [ 3009.707868] ? __fget_files+0x2f8/0x520 [ 3009.708303] ? __fget_light+0xea/0x290 [ 3009.709053] __sys_sendmmsg+0x195/0x470 [ 3009.709740] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3009.710478] ? lock_downgrade+0x6d0/0x6d0 [ 3009.711225] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3009.712064] ? wait_for_completion_io+0x270/0x270 [ 3009.713131] ? rcu_read_lock_any_held+0x75/0xa0 [ 3009.713946] ? vfs_write+0x354/0xb10 [ 3009.714602] ? fput_many+0x2f/0x1a0 [ 3009.715247] ? ksys_write+0x1a9/0x260 [ 3009.715912] ? __ia32_sys_read+0xb0/0xb0 [ 3009.716746] __x64_sys_sendmmsg+0x99/0x100 [ 3009.717478] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3009.718371] do_syscall_64+0x33/0x40 [ 3009.719009] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3009.719892] RIP: 0033:0x7f7b32767b19 [ 3009.720632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3009.723883] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3009.725489] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 3009.726709] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 3009.727928] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3009.729443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3009.730703] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:11:04 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x3) 23:11:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x300}, 0x10044001) 23:11:04 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r4, 0x2) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000180)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, r5, 0x8, @inherit={0x68, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000010004000000000000009e3b000000000000ff7f0000000000002200000000000000723c00000000000002000000000177000000000001000000000001040000000000000100010000000000000000ff0000"]}, @subvolid=0x2}) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r6 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:11:04 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, @in_args={0x4}}, './file0\x00'}) ioctl$TIOCGPTPEER(r4, 0x5441, 0x5) 23:11:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) 23:11:04 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 91) 23:11:04 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2280, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:11:04 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007cd) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:11:04 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x3) 23:11:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:11:05 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) clone3(&(0x7f0000000500)={0x4000, &(0x7f00000001c0), &(0x7f00000002c0)=0x0, &(0x7f0000000300), {0x27}, &(0x7f0000000340)=""/218, 0xda, &(0x7f0000000440)=""/103, &(0x7f00000004c0)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="951bd47eea0300000400000000000006"]) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x6, 0x7, 0x20, 0x0, 0x9, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x7d}, 0x9420, 0x7fff, 0x7ff, 0x7, 0x80000001, 0xfffffff7, 0x6, 0x0, 0x1, 0x0, 0x6}, r6, 0x2, r7, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r8 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) fsmount(r4, 0x0, 0x3) 23:11:05 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007cf) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:11:05 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) 23:11:05 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2840, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:11:05 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 92) 23:11:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000014c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000970700000000000000ce30ca2278219b826bd6826845bf5394459410800250f9b992c193b51caf61a5b11366ec1551a1fa24b83788a4736e5eaa1b6a166d8124dffd1995184a1aec26357ca6dd297c0b0e980c7d31805a3a5631200300000000000000de1803d2"]) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000200)=""/242, 0xf2}, {&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x4, 0x40, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0xc0, 0x1, 0x2, 0x0, 0x8, 0x2000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x10000}, 0x0, 0x8, 0x0, 0xcc785e964ff44b24, 0x8, 0x9b7f, 0x1, 0x0, 0x200, 0x0, 0x84}, 0xffffffffffffffff, 0xf, r1, 0xb) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = signalfd(r4, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x800}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4) 23:11:05 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) [ 3009.950997] FAULT_INJECTION: forcing a failure. [ 3009.950997] name failslab, interval 1, probability 0, space 0, times 0 [ 3009.952633] CPU: 1 PID: 12687 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 3009.953245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3009.953967] Call Trace: [ 3009.954208] dump_stack+0x107/0x167 [ 3009.954534] should_fail.cold+0x5/0xa [ 3009.954876] ? __alloc_skb+0x6d/0x5b0 [ 3009.955219] should_failslab+0x5/0x20 [ 3009.955559] kmem_cache_alloc_node+0x55/0x330 [ 3009.955960] __alloc_skb+0x6d/0x5b0 [ 3009.956299] __ip_append_data+0x2930/0x3310 [ 3009.956699] ? raw_destroy+0x30/0x30 [ 3009.957042] ? ip_finish_output+0x330/0x330 [ 3009.957428] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3009.957879] ? memcpy+0x39/0x60 [ 3009.958176] ? raw_destroy+0x30/0x30 [ 3009.958508] ip_append_data+0x114/0x1a0 [ 3009.958871] raw_sendmsg+0xaa6/0x29d0 [ 3009.959223] ? dst_output+0x170/0x170 [ 3009.959570] ? __lock_acquire+0x1657/0x5b00 [ 3009.959967] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3009.960449] ? SOFTIRQ_verbose+0x10/0x10 [ 3009.960811] ? create_object.isra.0+0x3ad/0xa20 [ 3009.961238] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3009.961691] ? find_held_lock+0x2c/0x110 [ 3009.962063] ? trace_hardirqs_on+0x5b/0x180 [ 3009.962451] ? dst_output+0x170/0x170 [ 3009.962793] inet_sendmsg+0x11d/0x140 [ 3009.963131] ? inet_send_prepare+0x540/0x540 [ 3009.963521] __sock_sendmsg+0x13c/0x190 [ 3009.963876] ____sys_sendmsg+0x334/0x870 [ 3009.964250] ? sock_write_iter+0x3d0/0x3d0 [ 3009.964633] ? do_recvmmsg+0x6d0/0x6d0 [ 3009.964978] ? SOFTIRQ_verbose+0x10/0x10 [ 3009.965335] ? mark_lock+0xf5/0x2df0 [ 3009.965669] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3009.966134] ___sys_sendmsg+0xf3/0x170 [ 3009.966480] ? sendmsg_copy_msghdr+0x160/0x160 [ 3009.966886] ? __fget_files+0x2cf/0x520 [ 3009.967235] ? lock_downgrade+0x6d0/0x6d0 [ 3009.967605] ? lock_downgrade+0x6d0/0x6d0 [ 3009.967975] ? __fget_files+0x2f8/0x520 [ 3009.968348] ? __fget_light+0xea/0x290 [ 3009.968697] __sys_sendmmsg+0x195/0x470 [ 3009.969052] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3009.969430] ? lock_downgrade+0x6d0/0x6d0 [ 3009.969810] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3009.970236] ? wait_for_completion_io+0x270/0x270 [ 3009.970663] ? rcu_read_lock_any_held+0x75/0xa0 [ 3009.971073] ? vfs_write+0x354/0xb10 [ 3009.971402] ? fput_many+0x2f/0x1a0 [ 3009.971723] ? ksys_write+0x1a9/0x260 [ 3009.972059] ? __ia32_sys_read+0xb0/0xb0 [ 3009.972442] __x64_sys_sendmmsg+0x99/0x100 [ 3009.972817] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3009.973269] do_syscall_64+0x33/0x40 [ 3009.973599] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3009.974049] RIP: 0033:0x7f7b32767b19 [ 3009.974378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3009.975976] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3009.976664] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 3009.977282] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 3009.977903] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3009.978529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3009.979149] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:11:19 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) 23:11:19 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x28040, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x280400, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@fsmagic={'fsmagic', 0x3d, 0x100}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'tmpfs\x00'}}, {@measure}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = signalfd(r4, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000180)={0x9, 0x1, 0x3, 0xfffffffd, 0x0, [0x7, 0x80000000, 0x869f, 0x21]}) fcntl$notify(r5, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) r6 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:11:19 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2e00, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:11:19 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r0, 0x2) ioctl$RTC_UIE_ON(r0, 0x7003) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xde, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x35, 0x1b, 0xc, 0x18, 0x3, 0x10000000, 0x2, 0x111, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000001) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x4010, r4, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345}, 0x28311c42) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) 23:11:19 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007d2) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:11:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:11:19 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 93) 23:11:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1, 0x0, 0xa}, 0x10044001) [ 3024.700950] FAULT_INJECTION: forcing a failure. [ 3024.700950] name failslab, interval 1, probability 0, space 0, times 0 [ 3024.702640] CPU: 0 PID: 12717 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 3024.703247] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3024.703973] Call Trace: [ 3024.704214] dump_stack+0x107/0x167 [ 3024.704554] should_fail.cold+0x5/0xa [ 3024.704896] ? create_object.isra.0+0x3a/0xa20 [ 3024.705301] should_failslab+0x5/0x20 [ 3024.705639] kmem_cache_alloc+0x5b/0x310 [ 3024.706002] create_object.isra.0+0x3a/0xa20 [ 3024.706390] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3024.706841] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3024.707287] ? __ip_append_data+0x2930/0x3310 [ 3024.707689] __alloc_skb+0xb1/0x5b0 [ 3024.708016] __ip_append_data+0x2930/0x3310 [ 3024.708423] ? raw_destroy+0x30/0x30 [ 3024.708762] ? ip_finish_output+0x330/0x330 [ 3024.709150] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3024.709597] ? memcpy+0x39/0x60 [ 3024.709892] ? raw_destroy+0x30/0x30 [ 3024.710223] ip_append_data+0x114/0x1a0 [ 3024.710582] raw_sendmsg+0xaa6/0x29d0 [ 3024.710929] ? dst_output+0x170/0x170 [ 3024.711272] ? __lock_acquire+0x1657/0x5b00 [ 3024.711667] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3024.712125] ? SOFTIRQ_verbose+0x10/0x10 [ 3024.712495] ? create_object.isra.0+0x3ad/0xa20 [ 3024.712915] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3024.713368] ? find_held_lock+0x2c/0x110 [ 3024.713738] ? trace_hardirqs_on+0x5b/0x180 [ 3024.714121] ? dst_output+0x170/0x170 [ 3024.714464] inet_sendmsg+0x11d/0x140 [ 3024.714801] ? inet_send_prepare+0x540/0x540 [ 3024.715188] __sock_sendmsg+0x13c/0x190 [ 3024.715542] ____sys_sendmsg+0x334/0x870 [ 3024.715904] ? sock_write_iter+0x3d0/0x3d0 [ 3024.716275] ? do_recvmmsg+0x6d0/0x6d0 [ 3024.716636] ? SOFTIRQ_verbose+0x10/0x10 [ 3024.716996] ? mark_lock+0xf5/0x2df0 [ 3024.717329] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3024.717809] ___sys_sendmsg+0xf3/0x170 [ 3024.718158] ? sendmsg_copy_msghdr+0x160/0x160 [ 3024.718565] ? __fget_files+0x2cf/0x520 [ 3024.718915] ? lock_downgrade+0x6d0/0x6d0 [ 3024.719286] ? lock_downgrade+0x6d0/0x6d0 [ 3024.719657] ? __fget_files+0x2f8/0x520 [ 3024.720016] ? __fget_light+0xea/0x290 [ 3024.720378] __sys_sendmmsg+0x195/0x470 [ 3024.720734] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3024.721114] ? lock_downgrade+0x6d0/0x6d0 [ 3024.721497] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3024.721925] ? wait_for_completion_io+0x270/0x270 [ 3024.722354] ? rcu_read_lock_any_held+0x75/0xa0 [ 3024.722764] ? vfs_write+0x354/0xb10 [ 3024.723095] ? fput_many+0x2f/0x1a0 [ 3024.723419] ? ksys_write+0x1a9/0x260 [ 3024.723757] ? __ia32_sys_read+0xb0/0xb0 [ 3024.724121] __x64_sys_sendmmsg+0x99/0x100 [ 3024.724509] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3024.724965] do_syscall_64+0x33/0x40 [ 3024.725295] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3024.725746] RIP: 0033:0x7f7b32767b19 [ 3024.726075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3024.727675] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3024.728351] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 3024.728974] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 3024.729594] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3024.730220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3024.730841] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:11:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1, 0x0, 0x240}, 0x10044001) 23:11:19 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='/},#\'](,\xf1(:\'(\x00') r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) 23:11:19 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000000), 0xa74d, 0x0) ioctl$TIOCMGET(r6, 0x5415, &(0x7f00000001c0)) close(0xffffffffffffffff) r7 = perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="c67d2141d0bf6ba2760b13aea6c5602076c30195a510c9d0d20d0366bfe8dd84c8e69c2fd224c86d82bca512e41062394f1559bac24bdf521d3fc8c85f7622d1ae67be9c174e084e83fb8d25b2b9d57ca881f2717f7c9f6b212b03f33820dbed6c069b623dc43a3e577b3ab7b3c9c5a3c54617e006a6c0af1fed1bbe719eefa13b9afdc1f89ecef4dae628bf4417b03f3659d56bacc741150023a8a1f1e2a889f6780e7c81306b70bdcbb33b88c388ef62d7fef168327dd7221b7c58f74613b9a771a73a42beb890a246cbc3ec05dce07c7a2ce0f617895118bcd244da8d97d97ca52cf178fed4bf53519c6bdfc484fa00bbc2bb", @ANYRES32, @ANYBLOB="000000002e2f76696c94653000"]) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000280)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x4) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x20000, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRESDEC, @ANYRESOCT=r1, @ANYBLOB="1a5e64df35c340d6f3fa2aea72bebb15c0133b8ea2dc66800b5acdcb5b42fe1723036971b5f74a98de7fc3e20154d33f7c10a96e73d9a41293168cc90065c617173544a116eb04bfad0d2994a8a1838c7d9d16ec2b493026c6aa62580f19666d48df4cebfa1fc2ff54798277e3e5d40a41ccf50f8c8e1e8927b7419245ae0788d3d099f7f235888ebfbc1d5a69a7d0e76eee29a1f061b0b99161095e76e1c167d24ba3cc2485216943c8afa88994fec77445e2cd0494effb77ebf9f37eeeb65e250a893ae1c01ba4b5d8fd0f322dc221c4648d96561f20fd1db9a227e485b3d476"]) 23:11:19 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) 23:11:19 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007da) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:11:20 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x33c0, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:11:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:11:34 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)) 23:11:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1, 0x0, 0xa00}, 0x10044001) 23:11:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007e1) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:11:34 executing program 2: shmget(0x1, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x1, 0x800) fchown(r1, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000180)) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x5, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r3, 0x2) openat(r3, &(0x7f00000001c0)='./file1\x00', 0x80100, 0x20) r4 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:11:34 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)="67025682fd76938cdac9bf77551f6abdfe979cf36ea6ebaf75bdf2c90563b131868cc94265385d19d54609d1cdc68168ee3123ed8a4077e67f541043917dedda07a3a16b4175b8f08e4ee664f58771531584ff432b1bf839d7bc377eb851", 0x5e}, 0x1, 0x0, 0x0, 0x4081}, 0xccd43766ac042cc4) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) 23:11:34 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x3980, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:11:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:11:34 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 94) 23:11:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1, 0x0, 0x4002}, 0x10044001) [ 3039.004188] FAULT_INJECTION: forcing a failure. [ 3039.004188] name failslab, interval 1, probability 0, space 0, times 0 [ 3039.005590] CPU: 0 PID: 12769 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 3039.006201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3039.006927] Call Trace: [ 3039.007170] dump_stack+0x107/0x167 [ 3039.007500] should_fail.cold+0x5/0xa [ 3039.007841] ? __alloc_skb+0x6d/0x5b0 [ 3039.008184] should_failslab+0x5/0x20 [ 3039.012555] kmem_cache_alloc_node+0x55/0x330 [ 3039.012951] __alloc_skb+0x6d/0x5b0 [ 3039.013274] __ip_append_data+0x2930/0x3310 [ 3039.013661] ? raw_destroy+0x30/0x30 [ 3039.013996] ? ip_finish_output+0x330/0x330 [ 3039.014386] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3039.014842] ? memcpy+0x39/0x60 [ 3039.015136] ? raw_destroy+0x30/0x30 [ 3039.015464] ip_append_data+0x114/0x1a0 [ 3039.015819] raw_sendmsg+0xaa6/0x29d0 [ 3039.016163] ? dst_output+0x170/0x170 [ 3039.016507] ? __lock_acquire+0x1657/0x5b00 [ 3039.016900] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3039.017357] ? SOFTIRQ_verbose+0x10/0x10 [ 3039.017729] ? create_object.isra.0+0x3ad/0xa20 [ 3039.018147] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3039.018609] ? find_held_lock+0x2c/0x110 [ 3039.018975] ? trace_hardirqs_on+0x5b/0x180 [ 3039.019355] ? dst_output+0x170/0x170 [ 3039.019693] inet_sendmsg+0x11d/0x140 [ 3039.020025] ? inet_send_prepare+0x540/0x540 [ 3039.020420] __sock_sendmsg+0x13c/0x190 [ 3039.020813] ____sys_sendmsg+0x334/0x870 [ 3039.021171] ? sock_write_iter+0x3d0/0x3d0 [ 3039.021540] ? do_recvmmsg+0x6d0/0x6d0 [ 3039.021884] ? SOFTIRQ_verbose+0x10/0x10 [ 3039.022242] ? mark_lock+0xf5/0x2df0 [ 3039.022574] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3039.023036] ___sys_sendmsg+0xf3/0x170 [ 3039.023396] ? sendmsg_copy_msghdr+0x160/0x160 [ 3039.023808] ? __fget_files+0x2cf/0x520 [ 3039.024164] ? lock_downgrade+0x6d0/0x6d0 [ 3039.024567] ? lock_downgrade+0x6d0/0x6d0 [ 3039.024942] ? __fget_files+0x2f8/0x520 [ 3039.025314] ? __fget_light+0xea/0x290 [ 3039.025662] __sys_sendmmsg+0x195/0x470 [ 3039.026016] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3039.026397] ? lock_downgrade+0x6d0/0x6d0 [ 3039.026775] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3039.027198] ? wait_for_completion_io+0x270/0x270 [ 3039.027624] ? rcu_read_lock_any_held+0x75/0xa0 [ 3039.028028] ? vfs_write+0x354/0xb10 [ 3039.028357] ? fput_many+0x2f/0x1a0 [ 3039.028716] ? ksys_write+0x1a9/0x260 [ 3039.029060] ? __ia32_sys_read+0xb0/0xb0 [ 3039.029435] __x64_sys_sendmmsg+0x99/0x100 [ 3039.029806] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3039.030258] do_syscall_64+0x33/0x40 [ 3039.030586] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3039.031032] RIP: 0033:0x7f7b32767b19 [ 3039.031362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3039.032992] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3039.033658] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 3039.034278] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 3039.034896] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3039.035518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3039.036135] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:11:34 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)) 23:11:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:11:34 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x2, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000001) fchown(r2, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000180)={0xff, {0x1d, 0x6, 0x1, 0x7, 0x200}}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x42084, 0x8009, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = signalfd(r4, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)=0x1) ioctl$TIOCGPTPEER(r5, 0x5441, 0x473) fcntl$notify(r3, 0x402, 0x80000000) 23:11:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r2 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f00000009c0)={0x0, 0x0}) tgkill(r1, r3, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x5, 0x50, 0x3, 0x0, 0x200, 0x22100, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000180), 0x1}, 0x4000e, 0x80, 0x40800000, 0x7, 0x80000001, 0x7, 0xfcb5, 0x0, 0x3, 0x0, 0x4}, r3, 0x4, r0, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = signalfd(r5, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r6, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000040)) r7 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:11:34 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x3f40, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:11:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007e3) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:11:34 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 95) 23:11:34 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)) 23:11:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:11:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1, 0x0, 0xa000000}, 0x10044001) [ 3039.211993] FAULT_INJECTION: forcing a failure. [ 3039.211993] name failslab, interval 1, probability 0, space 0, times 0 [ 3039.214198] CPU: 1 PID: 12798 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 3039.214818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3039.215535] Call Trace: [ 3039.215776] dump_stack+0x107/0x167 [ 3039.216099] should_fail.cold+0x5/0xa [ 3039.216447] ? create_object.isra.0+0x3a/0xa20 [ 3039.216851] should_failslab+0x5/0x20 [ 3039.217189] kmem_cache_alloc+0x5b/0x310 [ 3039.217556] create_object.isra.0+0x3a/0xa20 [ 3039.217943] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3039.218391] kmem_cache_alloc_node+0x169/0x330 [ 3039.218799] __alloc_skb+0x6d/0x5b0 [ 3039.219128] __ip_append_data+0x2930/0x3310 [ 3039.219521] ? raw_destroy+0x30/0x30 [ 3039.219860] ? ip_finish_output+0x330/0x330 [ 3039.220242] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3039.220745] ? memcpy+0x39/0x60 [ 3039.221040] ? raw_destroy+0x30/0x30 [ 3039.221371] ip_append_data+0x114/0x1a0 [ 3039.221729] raw_sendmsg+0xaa6/0x29d0 [ 3039.222075] ? dst_output+0x170/0x170 [ 3039.222416] ? __lock_acquire+0x1657/0x5b00 [ 3039.222809] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3039.223265] ? SOFTIRQ_verbose+0x10/0x10 [ 3039.223621] ? create_object.isra.0+0x3ad/0xa20 [ 3039.224041] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3039.224559] ? find_held_lock+0x2c/0x110 [ 3039.225268] ? trace_hardirqs_on+0x5b/0x180 [ 3039.226019] ? dst_output+0x170/0x170 [ 3039.226676] inet_sendmsg+0x11d/0x140 [ 3039.227329] ? inet_send_prepare+0x540/0x540 [ 3039.228085] __sock_sendmsg+0x13c/0x190 [ 3039.228888] ____sys_sendmsg+0x334/0x870 [ 3039.229791] ? sock_write_iter+0x3d0/0x3d0 [ 3039.230737] ? do_recvmmsg+0x6d0/0x6d0 [ 3039.231611] ___sys_sendmsg+0xf3/0x170 [ 3039.232479] ? sendmsg_copy_msghdr+0x160/0x160 [ 3039.233493] ? __fget_files+0x2cf/0x520 [ 3039.234372] ? lock_downgrade+0x6d0/0x6d0 [ 3039.235298] ? __fget_files+0x2f8/0x520 [ 3039.236195] ? __fget_light+0xea/0x290 [ 3039.237080] __sys_sendmmsg+0x195/0x470 [ 3039.237986] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3039.238958] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 3039.239909] ? clockevents_program_event+0x131/0x360 [ 3039.241039] ? tick_program_event+0xa8/0x140 [ 3039.242034] ? hrtimer_interrupt+0x771/0x9b0 [ 3039.243016] __x64_sys_sendmmsg+0x99/0x100 [ 3039.243949] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3039.245106] do_syscall_64+0x33/0x40 [ 3039.245930] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3039.247062] RIP: 0033:0x7f7b32767b19 [ 3039.247890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3039.251981] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3039.253890] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 3039.255460] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 3039.257052] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3039.258625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3039.260193] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:11:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:11:48 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x400c00, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = socket(0x1e, 0x3, 0x8) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) r6 = open_tree(r3, &(0x7f00000001c0)='./file0\x00', 0x900) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000280)={0x3, 0x80, 0x3, 0x7f, 0x1f, 0xc7, 0x0, 0x0, 0x40020, 0x15, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000240), 0x1}, 0x410, 0x4, 0x1, 0x8, 0x4, 0x7, 0x0, 0x0, 0x3, 0x0, 0x2}) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:11:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:11:48 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 96) 23:11:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1, 0x0, 0x40020000}, 0x10044001) 23:11:48 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007e9) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:11:48 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x4500, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:11:48 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000000400)=""/34, 0x22}], 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="3000000000000000000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50}, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r4 = openat$cgroup_devices(r0, &(0x7f0000000680)='devices.allow\x00', 0x2, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000006c0)=0x1) sendfile(r3, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x7, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = open(&(0x7f0000000080)='./file0\x00', 0x24100, 0xc0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000580)={&(0x7f00000000c0), 0xc, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYBLOB="94b4a2bc0e531ed450558d89210e1c72b939ffd545af093b7386941cd0184da38d7854b221932da0228f1787f0593e84da565c7df376bc30fd707c5443dac44b5189bc56ba81a60f87e24da918059750ea6b0872e66a8c46df0bf592c4baa4acb0ca0956870a71b258d19d0bf091b2a9c8e0ddb6e91b770fb32c05f54cf4d24e4d68651aa395ea2a71cee32ffdb9", @ANYRES16=r6, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x8c}, 0x4008) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r6, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40830}, 0x48000) creat(&(0x7f0000000700)='./file0\x00', 0x111) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r7, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000040)) 23:11:48 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:11:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:11:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1, 0x0, 0xffffff7f}, 0x10044001) [ 3053.493800] FAULT_INJECTION: forcing a failure. [ 3053.493800] name failslab, interval 1, probability 0, space 0, times 0 [ 3053.495188] CPU: 1 PID: 12819 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 3053.495798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3053.496520] Call Trace: [ 3053.496779] dump_stack+0x107/0x167 [ 3053.497105] should_fail.cold+0x5/0xa [ 3053.497450] should_failslab+0x5/0x20 [ 3053.497790] __kmalloc_node_track_caller+0x74/0x3b0 [ 3053.498231] ? __ip_append_data+0x2930/0x3310 [ 3053.498640] __alloc_skb+0xb1/0x5b0 [ 3053.498966] __ip_append_data+0x2930/0x3310 [ 3053.499361] ? raw_destroy+0x30/0x30 [ 3053.499701] ? ip_finish_output+0x330/0x330 [ 3053.500081] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3053.500530] ? memcpy+0x39/0x60 [ 3053.500846] ? raw_destroy+0x30/0x30 [ 3053.501189] ip_append_data+0x114/0x1a0 [ 3053.501566] raw_sendmsg+0xaa6/0x29d0 [ 3053.501914] ? dst_output+0x170/0x170 [ 3053.502252] ? __lock_acquire+0x1657/0x5b00 [ 3053.502646] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3053.503108] ? SOFTIRQ_verbose+0x10/0x10 [ 3053.503469] ? create_object.isra.0+0x3ad/0xa20 [ 3053.503891] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3053.504344] ? find_held_lock+0x2c/0x110 [ 3053.504726] ? trace_hardirqs_on+0x5b/0x180 [ 3053.505112] ? dst_output+0x170/0x170 [ 3053.505475] inet_sendmsg+0x11d/0x140 [ 3053.505833] ? inet_send_prepare+0x540/0x540 [ 3053.506224] __sock_sendmsg+0x13c/0x190 [ 3053.506577] ____sys_sendmsg+0x334/0x870 [ 3053.506939] ? sock_write_iter+0x3d0/0x3d0 [ 3053.507315] ? do_recvmmsg+0x6d0/0x6d0 [ 3053.507663] ? SOFTIRQ_verbose+0x10/0x10 [ 3053.508020] ? mark_lock+0xf5/0x2df0 [ 3053.508357] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3053.508859] ___sys_sendmsg+0xf3/0x170 [ 3053.509207] ? sendmsg_copy_msghdr+0x160/0x160 [ 3053.509616] ? __fget_files+0x2cf/0x520 [ 3053.509967] ? lock_downgrade+0x6d0/0x6d0 [ 3053.510340] ? lock_downgrade+0x6d0/0x6d0 [ 3053.510710] ? __fget_files+0x2f8/0x520 [ 3053.511069] ? __fget_light+0xea/0x290 [ 3053.511426] __sys_sendmmsg+0x195/0x470 [ 3053.511785] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3053.512180] ? lock_downgrade+0x6d0/0x6d0 [ 3053.512571] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3053.513006] ? wait_for_completion_io+0x270/0x270 [ 3053.513436] ? rcu_read_lock_any_held+0x75/0xa0 [ 3053.513846] ? vfs_write+0x354/0xb10 [ 3053.514176] ? fput_many+0x2f/0x1a0 [ 3053.514507] ? ksys_write+0x1a9/0x260 [ 3053.514846] ? __ia32_sys_read+0xb0/0xb0 [ 3053.515211] __x64_sys_sendmmsg+0x99/0x100 [ 3053.515586] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3053.516037] do_syscall_64+0x33/0x40 [ 3053.516367] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3053.516834] RIP: 0033:0x7f7b32767b19 [ 3053.517180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3053.518793] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3053.519467] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 3053.520091] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 3053.520744] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3053.521389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3053.522034] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:11:48 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x4ac0, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:11:48 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:11:48 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007ee) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:12:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:12:02 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x5080, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:12:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007f0) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:12:02 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = signalfd(r4, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r5, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x100022, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_user}, {@cache_mmap}, {@access_any}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@cache_loose}, {@aname={'aname', 0x3d, '/dev/ptmx\x00'}}, {@version_9p2000}, {@access_user}], [{@seclabel}, {@dont_hash}, {@dont_appraise}, {@dont_appraise}, {@appraise}]}}) r7 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:12:02 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r1, 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000)={r1}) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r2, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r3, &(0x7f0000000080)=""/65, 0x41) dup(r3) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r4, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) 23:12:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1, 0x0, 0xa00000000000000}, 0x10044001) 23:12:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:12:02 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 97) 23:12:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) [ 3067.727001] FAULT_INJECTION: forcing a failure. [ 3067.727001] name failslab, interval 1, probability 0, space 0, times 0 [ 3067.728956] CPU: 1 PID: 12879 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 3067.730487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3067.732326] Call Trace: [ 3067.732924] dump_stack+0x107/0x167 [ 3067.733721] should_fail.cold+0x5/0xa [ 3067.734563] ? create_object.isra.0+0x3a/0xa20 [ 3067.735565] should_failslab+0x5/0x20 [ 3067.736407] kmem_cache_alloc+0x5b/0x310 [ 3067.737316] create_object.isra.0+0x3a/0xa20 [ 3067.738283] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3067.739414] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3067.740531] ? __ip_append_data+0x2930/0x3310 [ 3067.741544] __alloc_skb+0xb1/0x5b0 [ 3067.742349] __ip_append_data+0x2930/0x3310 [ 3067.743305] ? raw_destroy+0x30/0x30 [ 3067.744129] ? ip_finish_output+0x330/0x330 [ 3067.745089] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3067.746205] ? memcpy+0x39/0x60 [ 3067.746932] ? raw_destroy+0x30/0x30 [ 3067.747750] ip_append_data+0x114/0x1a0 [ 3067.748630] raw_sendmsg+0xaa6/0x29d0 [ 3067.749498] ? dst_output+0x170/0x170 [ 3067.750336] ? __lock_acquire+0x1657/0x5b00 [ 3067.751291] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3067.752443] ? SOFTIRQ_verbose+0x10/0x10 [ 3067.753353] ? create_object.isra.0+0x3ad/0xa20 [ 3067.754386] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3067.755514] ? find_held_lock+0x2c/0x110 [ 3067.756420] ? trace_hardirqs_on+0x5b/0x180 [ 3067.757393] ? dst_output+0x170/0x170 [ 3067.758230] inet_sendmsg+0x11d/0x140 [ 3067.759066] ? inet_send_prepare+0x540/0x540 [ 3067.760035] __sock_sendmsg+0x13c/0x190 [ 3067.760925] ____sys_sendmsg+0x334/0x870 [ 3067.761817] ? sock_write_iter+0x3d0/0x3d0 [ 3067.762742] ? do_recvmmsg+0x6d0/0x6d0 [ 3067.763603] ? SOFTIRQ_verbose+0x10/0x10 [ 3067.764490] ? mark_lock+0xf5/0x2df0 [ 3067.765337] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3067.766493] ___sys_sendmsg+0xf3/0x170 [ 3067.767349] ? sendmsg_copy_msghdr+0x160/0x160 [ 3067.768356] ? __fget_files+0x2cf/0x520 [ 3067.769241] ? lock_downgrade+0x6d0/0x6d0 [ 3067.770158] ? lock_downgrade+0x6d0/0x6d0 [ 3067.771075] ? __fget_files+0x2f8/0x520 [ 3067.771965] ? __fget_light+0xea/0x290 [ 3067.772838] __sys_sendmmsg+0x195/0x470 [ 3067.773715] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3067.774669] ? lock_downgrade+0x6d0/0x6d0 [ 3067.775592] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3067.776652] ? wait_for_completion_io+0x270/0x270 [ 3067.777732] ? rcu_read_lock_any_held+0x75/0xa0 [ 3067.778748] ? vfs_write+0x354/0xb10 [ 3067.779569] ? fput_many+0x2f/0x1a0 [ 3067.780367] ? ksys_write+0x1a9/0x260 [ 3067.781234] ? __ia32_sys_read+0xb0/0xb0 [ 3067.782154] __x64_sys_sendmmsg+0x99/0x100 [ 3067.783084] ? syscall_enter_from_user_mode+0x1d/0x50 23:12:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1, 0x0, 0x4002000000000000}, 0x10044001) [ 3067.784213] do_syscall_64+0x33/0x40 [ 3067.785209] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3067.786331] RIP: 0033:0x7f7b32767b19 [ 3067.787146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3067.791264] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3067.792949] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 3067.794515] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 3067.796093] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3067.797683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3067.799244] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 [ 3068.009003] FAULT_INJECTION: forcing a failure. [ 3068.009003] name failslab, interval 1, probability 0, space 0, times 0 [ 3068.012001] CPU: 1 PID: 12912 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 3068.013557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3068.015395] Call Trace: [ 3068.015974] dump_stack+0x107/0x167 [ 3068.016791] should_fail.cold+0x5/0xa [ 3068.017628] ? create_object.isra.0+0x3a/0xa20 [ 3068.018634] should_failslab+0x5/0x20 [ 3068.019477] kmem_cache_alloc+0x5b/0x310 [ 3068.020374] create_object.isra.0+0x3a/0xa20 [ 3068.021353] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3068.022474] kmem_cache_alloc_node+0x169/0x330 [ 3068.023483] __alloc_skb+0x6d/0x5b0 [ 3068.024291] __ip_append_data+0x2930/0x3310 [ 3068.025265] ? raw_destroy+0x30/0x30 [ 3068.026096] ? ip_finish_output+0x330/0x330 [ 3068.027044] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3068.028159] ? memcpy+0x39/0x60 [ 3068.028894] ? raw_destroy+0x30/0x30 [ 3068.029710] ip_append_data+0x114/0x1a0 [ 3068.030590] raw_sendmsg+0xaa6/0x29d0 [ 3068.031438] ? dst_output+0x170/0x170 [ 3068.032274] ? __lock_acquire+0x1657/0x5b00 [ 3068.033251] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3068.034399] ? SOFTIRQ_verbose+0x10/0x10 [ 3068.035288] ? create_object.isra.0+0x3ad/0xa20 [ 3068.036318] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3068.037458] ? find_held_lock+0x2c/0x110 [ 3068.038359] ? trace_hardirqs_on+0x5b/0x180 [ 3068.039308] ? dst_output+0x170/0x170 [ 3068.040147] inet_sendmsg+0x11d/0x140 [ 3068.041005] ? inet_send_prepare+0x540/0x540 [ 3068.041971] __sock_sendmsg+0x13c/0x190 [ 3068.042850] ____sys_sendmsg+0x334/0x870 [ 3068.043745] ? sock_write_iter+0x3d0/0x3d0 [ 3068.044728] ? do_recvmmsg+0x6d0/0x6d0 [ 3068.045598] ? SOFTIRQ_verbose+0x10/0x10 [ 3068.046507] ? mark_lock+0xf5/0x2df0 [ 3068.047329] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3068.048485] ___sys_sendmsg+0xf3/0x170 [ 3068.049365] ? sendmsg_copy_msghdr+0x160/0x160 [ 3068.050384] ? __fget_files+0x2cf/0x520 [ 3068.051258] ? lock_downgrade+0x6d0/0x6d0 [ 3068.052174] ? lock_downgrade+0x6d0/0x6d0 [ 3068.053112] ? __fget_files+0x2f8/0x520 [ 3068.054024] ? __fget_light+0xea/0x290 [ 3068.054886] __sys_sendmmsg+0x195/0x470 [ 3068.055763] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3068.056723] ? lock_downgrade+0x6d0/0x6d0 [ 3068.057654] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3068.058713] ? wait_for_completion_io+0x270/0x270 [ 3068.059778] ? rcu_read_lock_any_held+0x75/0xa0 [ 3068.060811] ? vfs_write+0x354/0xb10 [ 3068.061631] ? fput_many+0x2f/0x1a0 [ 3068.062430] ? ksys_write+0x1a9/0x260 [ 3068.063271] ? __ia32_sys_read+0xb0/0xb0 [ 3068.064165] __x64_sys_sendmmsg+0x99/0x100 [ 3068.065105] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3068.066233] do_syscall_64+0x33/0x40 [ 3068.067047] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3068.068172] RIP: 0033:0x7f7b32767b19 [ 3068.069010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3068.073078] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3068.074744] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 3068.076307] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 3068.077893] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3068.079456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3068.081033] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:12:03 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x5640, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:12:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1256, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x101040, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r2) 23:12:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1, 0x0, 0xffffff7f00000000}, 0x10044001) 23:12:03 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000001) r3 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f00000009c0)={0x0, 0x0}) tgkill(r4, r6, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x1f, 0x2, 0x9, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x41802, 0x6, 0x5, 0x0, 0x7ff, 0xfffffff8, 0x4, 0x0, 0x80, 0x0, 0xffffffff}, r4, 0x1, r0, 0x3) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r7, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000040)) 23:12:03 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:12:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007f5) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:12:03 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 98) 23:12:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:12:03 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x5c00, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:12:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 23:12:03 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:12:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:12:17 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = signalfd(r4, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r5, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f00000001c0)) r6 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r7, &(0x7f0000000080)=""/65, 0x41) sendfile(r1, r7, 0x0, 0x3) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x3, 0x6, 0x2}) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:12:17 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 99) 23:12:17 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x61c0, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:12:17 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:12:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r4, 0x2) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendfile(r0, r5, 0x0, 0x8) sendfile(r2, r4, &(0x7f0000000000)=0x5, 0x6) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r6, 0x2) sendfile(r6, r1, &(0x7f0000000240)=0x2, 0x8) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) 23:12:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1, 0x0, 0x0, 0xa}, 0x10044001) 23:12:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007fc) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:12:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:12:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:12:17 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f00000009c0)) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x1, 0x81, 0x9, 0x0, 0x0, 0x0, 0x61044, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x1}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = signalfd(r5, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r6, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000040)) r7 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:12:17 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000001) r3 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f00000009c0)={0x0, 0x0}) tgkill(r4, r6, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x1f, 0x2, 0x9, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x41802, 0x6, 0x5, 0x0, 0x7ff, 0xfffffff8, 0x4, 0x0, 0x80, 0x0, 0xffffffff}, r4, 0x1, r0, 0x3) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r7, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000040)) 23:12:17 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x6780, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:12:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23:12:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000803) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) [ 3082.301755] FAULT_INJECTION: forcing a failure. [ 3082.301755] name failslab, interval 1, probability 0, space 0, times 0 [ 3082.319774] CPU: 0 PID: 12947 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 3082.321431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3082.323372] Call Trace: [ 3082.323992] dump_stack+0x107/0x167 [ 3082.324858] should_fail.cold+0x5/0xa [ 3082.325749] ? create_object.isra.0+0x3a/0xa20 [ 3082.326826] should_failslab+0x5/0x20 [ 3082.327723] kmem_cache_alloc+0x5b/0x310 [ 3082.328672] create_object.isra.0+0x3a/0xa20 [ 3082.329706] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3082.330892] kmem_cache_alloc_node+0x169/0x330 [ 3082.331959] __alloc_skb+0x6d/0x5b0 [ 3082.332822] __ip_append_data+0x2930/0x3310 [ 3082.337801] ? raw_destroy+0x30/0x30 [ 3082.338674] ? ip_finish_output+0x330/0x330 [ 3082.339676] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3082.340871] ? memcpy+0x39/0x60 [ 3082.341649] ? raw_destroy+0x30/0x30 [ 3082.342512] ip_append_data+0x114/0x1a0 [ 3082.343440] raw_sendmsg+0xaa6/0x29d0 [ 3082.344342] ? dst_output+0x170/0x170 [ 3082.361220] ? __lock_acquire+0x1657/0x5b00 [ 3082.362243] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3082.363460] ? SOFTIRQ_verbose+0x10/0x10 [ 3082.364399] ? create_object.isra.0+0x3ad/0xa20 [ 3082.365503] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3082.366700] ? find_held_lock+0x2c/0x110 [ 3082.367650] ? trace_hardirqs_on+0x5b/0x180 [ 3082.368669] ? dst_output+0x170/0x170 [ 3082.369560] inet_sendmsg+0x11d/0x140 [ 3082.370452] ? inet_send_prepare+0x540/0x540 [ 3082.371481] __sock_sendmsg+0x13c/0x190 [ 3082.372413] ____sys_sendmsg+0x334/0x870 [ 3082.373325] ? sock_write_iter+0x3d0/0x3d0 [ 3082.374227] ? do_recvmmsg+0x6d0/0x6d0 [ 3082.375067] ? SOFTIRQ_verbose+0x10/0x10 [ 3082.375932] ? mark_lock+0xf5/0x2df0 [ 3082.376728] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3082.377891] ___sys_sendmsg+0xf3/0x170 [ 3082.378731] ? sendmsg_copy_msghdr+0x160/0x160 [ 3082.379714] ? __fget_files+0x2cf/0x520 [ 3082.380571] ? lock_downgrade+0x6d0/0x6d0 [ 3082.381493] ? lock_downgrade+0x6d0/0x6d0 [ 3082.382382] ? __fget_files+0x2f8/0x520 [ 3082.383250] ? __fget_light+0xea/0x290 [ 3082.384088] __sys_sendmmsg+0x195/0x470 [ 3082.384980] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3082.385900] ? lock_downgrade+0x6d0/0x6d0 [ 3082.386800] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3082.387837] ? wait_for_completion_io+0x270/0x270 [ 3082.388918] ? rcu_read_lock_any_held+0x75/0xa0 [ 3082.389914] ? vfs_write+0x354/0xb10 [ 3082.390713] ? fput_many+0x2f/0x1a0 [ 3082.391491] ? ksys_write+0x1a9/0x260 [ 3082.392306] ? __ia32_sys_read+0xb0/0xb0 [ 3082.393211] __x64_sys_sendmmsg+0x99/0x100 [ 3082.394121] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3082.395219] do_syscall_64+0x33/0x40 [ 3082.396017] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3082.397149] RIP: 0033:0x7f7b32767b19 [ 3082.397948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3082.401921] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3082.403553] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 3082.405105] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 3082.406627] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3082.408151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3082.409713] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:12:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1, 0x0, 0x0, 0x240}, 0x10044001) 23:12:31 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000805) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:12:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x3) 23:12:31 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000180)={&(0x7f0000000240)=""/153, 0x99, 0x6, 0x7}) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:12:31 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000001) r3 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f00000009c0)={0x0, 0x0}) tgkill(r4, r6, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x1f, 0x2, 0x9, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x41802, 0x6, 0x5, 0x0, 0x7ff, 0xfffffff8, 0x4, 0x0, 0x80, 0x0, 0xffffffff}, r4, 0x1, r0, 0x3) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r7, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000040)) 23:12:31 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) (fail_nth: 100) 23:12:31 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x6d40, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:12:31 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="02002bbd7000ffdbdf253600000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000100000cdffffff"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0xc001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)={0x0, 0x0}) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x3, 0x9f, 0x1, 0x0, 0x0, 0x8000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x20, 0x100000001, 0x59c7e3ad, 0x3, 0x4, 0x7fff, 0xfffe, 0x0, 0x3, 0x0, 0x80}, r3, 0xd, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x5, 0x6, 0x3, 0x7, 0x0, 0x1, 0x100, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x4080, 0x388f, 0x7f, 0x6, 0x1, 0xffffffff, 0x0, 0x0, 0x7ff, 0x0, 0x200}, r5, 0x6, r6, 0x2) sendfile(r4, r3, &(0x7f0000000040)=0xb, 0x80000001) fchown(r4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000c, 0x10010, r3, 0x8000000) syz_io_uring_setup(0x44d3, &(0x7f0000000300)={0x0, 0xdf08, 0x8, 0x1, 0x72, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x7, 0x20, 0x0, 0x9, 0x3, 0x1}, 0x5) signalfd(r7, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000040)) [ 3096.711618] FAULT_INJECTION: forcing a failure. [ 3096.711618] name failslab, interval 1, probability 0, space 0, times 0 [ 3096.712912] CPU: 1 PID: 12995 Comm: syz-executor.4 Not tainted 5.10.226 #1 [ 3096.713488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3096.714164] Call Trace: [ 3096.714391] dump_stack+0x107/0x167 [ 3096.714696] should_fail.cold+0x5/0xa [ 3096.715020] should_failslab+0x5/0x20 [ 3096.715338] __kmalloc_node_track_caller+0x74/0x3b0 [ 3096.715753] ? __ip_append_data+0x2930/0x3310 [ 3096.716133] __alloc_skb+0xb1/0x5b0 [ 3096.716443] __ip_append_data+0x2930/0x3310 [ 3096.716815] ? raw_destroy+0x30/0x30 [ 3096.717150] ? ip_finish_output+0x330/0x330 [ 3096.717510] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3096.717931] ? memcpy+0x39/0x60 [ 3096.718208] ? raw_destroy+0x30/0x30 [ 3096.718521] ip_append_data+0x114/0x1a0 [ 3096.718865] raw_sendmsg+0xaa6/0x29d0 [ 3096.719194] ? dst_output+0x170/0x170 [ 3096.719514] ? __lock_acquire+0x1657/0x5b00 [ 3096.719892] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3096.720330] ? SOFTIRQ_verbose+0x10/0x10 [ 3096.720673] ? create_object.isra.0+0x3ad/0xa20 [ 3096.725119] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3096.725539] ? find_held_lock+0x2c/0x110 [ 3096.725886] ? trace_hardirqs_on+0x5b/0x180 [ 3096.726245] ? dst_output+0x170/0x170 [ 3096.726561] inet_sendmsg+0x11d/0x140 [ 3096.726875] ? inet_send_prepare+0x540/0x540 [ 3096.727239] __sock_sendmsg+0x13c/0x190 [ 3096.727568] ____sys_sendmsg+0x334/0x870 [ 3096.727906] ? sock_write_iter+0x3d0/0x3d0 [ 3096.728252] ? do_recvmmsg+0x6d0/0x6d0 [ 3096.728575] ? SOFTIRQ_verbose+0x10/0x10 [ 3096.728926] ? mark_lock+0xf5/0x2df0 [ 3096.729241] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3096.729673] ___sys_sendmsg+0xf3/0x170 [ 3096.729997] ? sendmsg_copy_msghdr+0x160/0x160 [ 3096.730375] ? __fget_files+0x2cf/0x520 [ 3096.730703] ? lock_downgrade+0x6d0/0x6d0 [ 3096.731050] ? lock_downgrade+0x6d0/0x6d0 [ 3096.731394] ? __fget_files+0x2f8/0x520 [ 3096.731727] ? __fget_light+0xea/0x290 [ 3096.732054] __sys_sendmmsg+0x195/0x470 [ 3096.732385] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3096.732742] ? lock_downgrade+0x6d0/0x6d0 [ 3096.733124] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3096.733526] ? wait_for_completion_io+0x270/0x270 [ 3096.733923] ? rcu_read_lock_any_held+0x75/0xa0 [ 3096.734305] ? vfs_write+0x354/0xb10 [ 3096.734612] ? fput_many+0x2f/0x1a0 [ 3096.734914] ? ksys_write+0x1a9/0x260 [ 3096.735231] ? __ia32_sys_read+0xb0/0xb0 [ 3096.735571] __x64_sys_sendmmsg+0x99/0x100 [ 3096.735922] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3096.736347] do_syscall_64+0x33/0x40 [ 3096.736657] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3096.737108] RIP: 0033:0x7f7b32767b19 [ 3096.737418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3096.738906] RSP: 002b:00007f7b2fcdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3096.739530] RAX: ffffffffffffffda RBX: 00007f7b3287af60 RCX: 00007f7b32767b19 [ 3096.740110] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000006 [ 3096.740691] RBP: 00007f7b2fcdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3096.741298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 3096.741886] R13: 00007ffc540fe35f R14: 00007f7b2fcdd300 R15: 0000000000022000 23:12:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x3) 23:12:31 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f00000009c0)) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x1, 0x81, 0x9, 0x0, 0x0, 0x0, 0x61044, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x1}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = signalfd(r5, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r6, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000040)) r7 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:12:31 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x8000080a) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:12:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x3) 23:12:32 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x7300, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:12:32 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000180)=0x9) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:12:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1, 0x0, 0x0, 0xa00}, 0x10044001) 23:12:48 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) r3 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000240)="457fca9c1a8935788f81fca65c2c72c87f100dcb6a40184b385add5f5113f5d78e2d81ebecfd3582154e7b09a78e920c80121840861d75fd9aa9027cfe46524c2bf854d7a9db6f695e22811cfbc4a46aa3a104f9fe6a440e5f82bf634da533e4ea4b50a632bfe4e2004d570e471c81e1ca47e77fd0e944824d26ee904121a90580e4fa4c6d0b7ecfd8ac5817510453f9bf1a30343249bbcffde530fc6201b75cb84b877361e62d79af3f019c62e394ae35270debd3e72b02c961d28b9b01e5a729", 0xc1, 0x5}, {&(0x7f0000000340)="791429aaa2648194765f039522c0af4ea126a23ef5ecf4b1e29214d7df8209380b1b51482adbdafd5ad05ea3648ae5063a1b3045c64776cd37069a82b35deeaf2f7b99786211729214f3af80346776799a495ae5454e87cf98bba36f184487e8032b5396afd44699c8979091217cc8ea258bcc276603aff1d14ad2965ad1b776ffc9", 0x82, 0x7}, {&(0x7f0000000400)="307548f94a3632401f2072a0ab8e038a99b45d822dd5dc7f13509c2b701500ce279699809a33a8397d04f3d9e52a4600747ba9bbc10f3d3e705b9eb662221336fcebc533319248e74ad285dcf7f69b67c45cf55f48d569cfb4f188081dea1ce342c326d2d11a8f38275408354cc1d2804acf1b3c7a55cfc0f7efcf6d3f15cba8f0aa5431729e03490fc88c1a97", 0x8d, 0x4}, {&(0x7f00000004c0)="1b384e9735013e8fb552d218b8b350c3c03d81e2002525eb8fe3bb03fa76655d25a1116f4d259b828bfdb5a128125cfc780d5301e346bc895f2459e1e607defbb2b02ba0de5e3a704f59510d", 0x4c, 0x9}, {&(0x7f0000000540)="28d3109f55925c4475c72c063455270cdc477e75b9689d07c400b9b66013b72585e44da1ce2e9b127957cc8fd22fc2c5b43dc67c9e12740d1398651f9d9a780d365d73a2af2148a42e50138396b61d48f7b487ab826bf2ab5919b502c630beaae740ec5ae408ae4e0b8ad394a0a39af16b6966ce4a81619a3d6cbd5a60a35735ec8f173e2e3b01d56833e8f5e6b7b41bdd8f359c25b72e8b1967c99f0581fca2f6ae8731f0164595afa23d1860b04277b0a12619916d910adea84ce93408ea3534c732634047110a1ea02c1436f03aecc1e39d87087f3e18e3", 0xd9, 0x1f}, {&(0x7f0000000640)="d9c09d67332685cbbb8c66cbfa87682b8ee9200bf49bb8e47b299fab015152421c532765013be42207ec73aeba5ef5791b3b7a2f90b714d46a91901a5c61280d8d", 0x41, 0x100000000}], 0xc010, &(0x7f00000008c0)=ANY=[@ANYBLOB='huge=never,mpol=default=relative:5,181,size=428e3,huge=advise,huge=within_size,huge=advise,huge=advise,fscontext=system_u,fsmagic=0x0000000000000007,smackfsfloor=,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c706572decb326d69745f646972656374696f2c7375626a5f747970653d2c7569643e", @ANYRESDEC=0x0, @ANYBLOB=',fsuuid=0\x00205eb1-1\x00f2-5b11-c1d9-7bd4\x00b88,hash,permit_directio,\x00']) getresgid(&(0x7f00000010c0), &(0x7f0000001100)=0x0, &(0x7f0000001140)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000001200)={{0x1, 0xee00, r4, 0x0, 0x0, 0x24, 0x2}, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffdd}) fchown(r3, 0x0, r4) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@local}, &(0x7f0000000180)=0x14) 23:12:48 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1097, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000180)=0x1) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:12:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) 23:12:48 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:12:48 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f00000009c0)) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x1, 0x81, 0x9, 0x0, 0x0, 0x0, 0x61044, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x1}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = signalfd(r5, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r6, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000040)) r7 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:12:48 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000811) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:12:48 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x78c0, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:12:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) [ 3113.175275] tmpfs: Bad value for 'mpol' 23:12:48 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x3, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) [ 3113.244552] tmpfs: Bad value for 'mpol' 23:12:48 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:12:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) 23:12:48 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000180)={&(0x7f0000000240)=""/153, 0x99, 0x6, 0x7}) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:12:48 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x7e80, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:12:48 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000813) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:12:48 executing program 3: msgrcv(0x0, &(0x7f0000000000)={0x0, ""/13}, 0x15, 0x3, 0x2000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) 23:13:05 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x4, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:13:05 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCBRK(r5, 0x5428) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x1bc, 0x13, 0x400, 0x70bd25, 0x25dfdbff, {0x11, 0x0, 0x80, 0xe5, {0x4e22, 0x4e24, [0x5, 0xc0000000, 0x9, 0x8], [0x9, 0x20, 0xe9a, 0x4], 0x0, [0x5, 0xffffff45]}, 0x226}, [@INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "abf79a8ef22b8b83b1bed9a103c7236502cb3c915efd8e2a818821fe34d1916ae6ed01b14efa185b4440bea62a3c453c79ab22e0b46cfd5cfbd88eca4dc2f0455cbda988fa0a800a512d365bf1a723aceaae877d279a04d72d693bfe21e20b8e5f7319989834f181232bd2a65a0faa0e472c92798f318e427a933f23001ece8c178e3053840edda9d85cf3c2727944f5d2e55af8af5cc2de4b305a0635d7eb453688"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "587886a166f6333f824ef419d7424397e01d4b541774baf43fbcf4014f47c6e1b7bbe5940d47b2d0235aca4711eea3bc34b459e58960b8c35af8539f1e2daaa1531a6d860b9771ec735ab0bfe4642a5f54a0496f1a7f6f8ba72ce370d9485d8dad88205755456f6a8356f90f8e4a08a27a3c5b947d9e4cc7fdd4127b9072e2404e72a2a33e2954974f302d02738c090b35395b478f9e4797c2e3121e6d5d5fbe04cfe3b780cc98c175117c3b38467a4a69ba0a014723c68b8c8fc9a7f940a3eb79"}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 23:13:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1, 0x0, 0x0, 0x4002}, 0x10044001) 23:13:05 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000819) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:13:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)) 23:13:05 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x8440, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:13:05 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x800007c9) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:13:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) 23:13:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)) 23:13:05 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x7, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:13:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x80, 0x7, 0x2, 0x1, 0x2a, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) 23:13:05 executing program 7: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x5c0, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:13:05 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x8000081e) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:13:05 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x8a00, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:13:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)) 23:13:05 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) dup3(r4, r3, 0x0) r5 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r5, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r6 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000180)={0x7a, 0x0, &(0x7f0000000240)}) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:13:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000180)={r2, r3+10000000}, 0x1, 0x0, 0x1}, 0x5) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000240)={0x0, 0x6, @start={0x0, 0x0, "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", "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"}, [0x8, 0x0, 0x1f, 0x9, 0x100000001, 0x3, 0xb668, 0x8, 0x8, 0x3, 0x6, 0x942c, 0x3, 0x7, 0x6, 0x6, 0x8, 0x9, 0x1f, 0x100000001, 0x5c, 0x800, 0x9, 0x0, 0x1, 0x9, 0x8, 0x1, 0x8, 0xf326, 0x1000, 0x7ff, 0x2, 0xf1, 0x9, 0x9, 0x8, 0x9, 0x9b, 0xff, 0xba, 0x100000001, 0x8, 0x40, 0x4, 0x100000000, 0x8, 0x5, 0x4, 0x100000000, 0x2, 0x0, 0xf8, 0xfffffffffffffffa, 0x1, 0x4, 0x100, 0x6e6, 0x7fffffff, 0x2000000000, 0xfffffffffffffff9, 0x10000, 0x4, 0x39]}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = signalfd(r4, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) dup2(r5, r6) 23:13:22 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0xa, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:13:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1, 0x0, 0x0, 0xa000000}, 0x10044001) 23:13:22 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0xfffffffffffffd21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b5, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000001) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) 23:13:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x1, 0x88f}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = timerfd_create(0x5, 0x800) r7 = syz_open_dev$hidraw(&(0x7f0000000180), 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000076ca704ee410f6e3", @ANYRES32=r0, @ANYBLOB="00000000010000002e2f66696c653000"]) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x2001}, {r5, 0x1140}, {r3, 0x8}, {r6, 0x400}, {r7, 0x200}, {r8, 0x1000}], 0x6, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)={[0x10000]}, 0x8) r9 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:13:22 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r3, 0x2) signalfd(r3, &(0x7f0000000000)={[0x40]}, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) 23:13:22 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000820) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) 23:13:22 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x8fc0, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:13:22 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0xfd, 0x6, 0x5, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0x1000, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r2, 0x2) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000180)=0x8, 0x4000000003) r3 = signalfd(r1, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r3, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) syz_emit_ethernet(0x3e, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace(0x4208, 0x0) fork() ptrace(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getpid() 23:13:22 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x4, 0x3f, 0x1, 0x5c49, 0x0, 0x6, 0x40, 0x103, 0x40, 0x3c8, 0x7, 0x5, 0x38, 0x1, 0x9, 0x3, 0x2}, [{0x6474e551, 0x1ff, 0xece7, 0x3f, 0xffffffff, 0x3, 0x7, 0x100}, {0x5, 0x9, 0x7fffffff, 0x6, 0x7ff, 0x5, 0x9, 0xbfd}], "1eb498ddf46bea51dd008079822c8b9f3e723e3eb935d69c", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5c8) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) fchown(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0xa1, 0x19, 0x5, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x200003f}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0xffffffffffffffff, 0x20200, 0x0) signalfd(r2, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) ioctl(r3, 0x0, &(0x7f0000000000)="6e1eb041f7ee575b8ab755f733ac6f522ec65bee3b15f14344a047") 23:13:22 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xfa, 0x27, 0xff, 0x82, 0x0, 0x5, 0x401, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000300), 0x7}, 0x404, 0x7fffffff, 0x4, 0x2, 0xfff, 0x7, 0x6, 0x0, 0x4, 0x0, 0x9}, 0x0, 0x9, r4, 0x3) r5 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x7, 0x81, 0x1, 0x0, 0x4, 0x9000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x1, 0x7, 0x8, 0x1, 0xfffffffffffffffb, 0x678a, 0x5, 0x0, 0x2, 0x0, 0x4}, 0x0, 0x3, r0, 0x8) fcntl$notify(r5, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r6 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x40480, 0x5, 0xe78, 0xc, 0x40, 0xf9, 0x5, 0x0, 0x2b000000, 0x0, 0x9}, 0xffffffffffffffff, 0x400e, r7, 0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x80489439, &(0x7f0000000180)) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 23:13:22 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x9580, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:13:22 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="080181ff6b0300007a03000009000000eb0000000000000000e0bd0c173ac082074250000000000000001667a3915202beb305d6175d0728d1a57fb8ae99d34756959e6ceaf25c518ba54c3026900d19d8452068685022f0a1c5f4cbf62c4467a002edc18d66cfd17f208a61df3c3e9728db6fef9011fa7e4ec2a1f409f163a945096f6962b664e7cd792073aa32a5e89eea19755ab87e05f07e182af7507cc1f0f5f493415928738af000df5de0a47d302adb1ae797d745502486bea038379f25af25a81373d2153e48770d6b2794e69f4a0de3ce8d3420eabea05afe3a657f4fe6bf7eb57158897bd32810ccea0358ca60b4701d1708143ef375740aa3bc21b33645c1d762e8993cb6cfda9934626026fb4b8beec2e7e84deb7ea083dcb100a6868db617916606f9e3a25c34f114219cc77483f52cee8f6e2f9995df3b3e9576aac75470292d"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) listen(r0, 0x724e19e) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x10, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 23:13:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) (fail_nth: 1) 23:13:22 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000825) fchown(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1]}, 0x8) fcntl$notify(r4, 0x402, 0x80000006) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) copy_file_range(r0, 0x0, r0, &(0x7f0000000200)=0x80000000000, 0x7, 0x0) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_open_dev$vcsa(&(0x7f00000001c0), 0x800, 0x40001) [ 3147.228662] FAULT_INJECTION: forcing a failure. [ 3147.228662] name failslab, interval 1, probability 0, space 0, times 0 [ 3147.231154] CPU: 0 PID: 13186 Comm: syz-executor.0 Not tainted 5.10.226 #1 [ 3147.231748] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3147.232463] Call Trace: [ 3147.232693] dump_stack+0x107/0x167 [ 3147.233011] should_fail.cold+0x5/0xa [ 3147.233378] ? tty_buffer_alloc+0x243/0x2b0 [ 3147.233789] should_failslab+0x5/0x20 [ 3147.234146] __kmalloc+0x72/0x390 [ 3147.234480] tty_buffer_alloc+0x243/0x2b0 [ 3147.234874] __tty_buffer_request_room+0x156/0x2a0 [ 3147.235393] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 3147.235921] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 3147.236526] pty_write+0xe6/0x110 [ 3147.236866] tty_put_char+0x12d/0x160 [ 3147.237234] ? tty_hung_up_p+0x70/0x70 [ 3147.237621] ? tty_flip_buffer_push+0xee/0x100 [ 3147.238064] ? pty_write_room+0xc2/0xf0 [ 3147.238453] ? pty_stop+0x1a0/0x1a0 [ 3147.238810] __process_echoes+0x57c/0xa00 [ 3147.239217] n_tty_receive_buf_common+0xb85/0x2b80 [ 3147.239699] ? n_tty_receive_buf2+0x40/0x40 [ 3147.240114] tty_ioctl+0x51b/0x18b0 [ 3147.240465] ? tty_fasync+0x390/0x390 [ 3147.240820] ? ioctl_has_perm.constprop.0.isra.0+0x263/0x410 [ 3147.241371] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3147.241818] ? do_vfs_ioctl+0x283/0x10d0 [ 3147.242191] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3147.242694] ? generic_block_fiemap+0x60/0x60 [ 3147.243129] ? lock_downgrade+0x6d0/0x6d0 [ 3147.243535] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3147.243999] ? wait_for_completion_io+0x270/0x270 [ 3147.244421] ? selinux_file_ioctl+0xb6/0x270 [ 3147.244805] ? tty_fasync+0x390/0x390 [ 3147.245142] __x64_sys_ioctl+0x19a/0x210 [ 3147.245524] do_syscall_64+0x33/0x40 [ 3147.245848] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3147.246338] RIP: 0033:0x7f78d3913b19 [ 3147.246666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3147.248262] RSP: 002b:00007f78d0e89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3147.248917] RAX: ffffffffffffffda RBX: 00007f78d3a26f60 RCX: 00007f78d3913b19 [ 3147.249586] RDX: 0000000020000180 RSI: 0000000000005412 RDI: 0000000000000004 [ 3147.250261] RBP: 00007f78d0e891d0 R08: 0000000000000000 R09: 0000000000000000 [ 3147.250935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3147.251597] R13: 00007ffdb42950cf R14: 00007f78d0e89300 R15: 0000000000022000 [ 3147.252325] [ 3147.252332] ====================================================== [ 3147.252338] WARNING: possible circular locking dependency detected [ 3147.252342] 5.10.226 #1 Not tainted [ 3147.252348] ------------------------------------------------------ [ 3147.252354] syz-executor.0/13186 is trying to acquire lock: [ 3147.252358] ffffffff84f0ce80 (console_owner){-.-.}-{0:0}, at: console_unlock+0x2e1/0xb40 [ 3147.252373] [ 3147.252378] but task is already holding lock: [ 3147.252382] ffff88804c60b958 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x2b/0x160 [ 3147.252398] [ 3147.252403] which lock already depends on the new lock. [ 3147.252405] [ 3147.252407] [ 3147.252413] the existing dependency chain (in reverse order) is: [ 3147.252415] [ 3147.252418] -> #2 (&port->lock){-.-.}-{2:2}: [ 3147.252433] _raw_spin_lock_irqsave+0x36/0x60 [ 3147.252438] tty_port_tty_get+0x1f/0x100 [ 3147.252443] tty_port_default_wakeup+0x11/0x40 [ 3147.252448] serial8250_tx_chars+0x51f/0xb00 [ 3147.252453] serial8250_handle_irq+0x4e4/0x660 [ 3147.252458] serial8250_default_handle_irq+0x96/0x210 [ 3147.252463] serial8250_interrupt+0xf4/0x1b0 [ 3147.252468] __handle_irq_event_percpu+0x2ef/0x6d0 [ 3147.252472] handle_irq_event+0xff/0x280 [ 3147.252477] handle_edge_irq+0x249/0xd00 [ 3147.252483] asm_call_irq_on_stack+0x12/0x20 [ 3147.252487] common_interrupt+0xdd/0x1a0 [ 3147.252492] asm_common_interrupt+0x1e/0x40 [ 3147.252497] _raw_spin_unlock_irqrestore+0x25/0x40 [ 3147.252502] uart_write+0x304/0x580 [ 3147.252506] do_output_char+0x5e8/0x870 [ 3147.252510] n_tty_write+0x4c9/0xfe0 [ 3147.252515] file_tty_write.constprop.0+0x529/0x910 [ 3147.252520] redirected_tty_write+0xa5/0xd0 [ 3147.252525] do_iter_readv_writev+0x476/0x750 [ 3147.252529] do_iter_write+0x191/0x700 [ 3147.252533] vfs_writev+0x1ae/0x620 [ 3147.252537] do_writev+0x139/0x300 [ 3147.252542] do_syscall_64+0x33/0x40 [ 3147.252547] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3147.252549] [ 3147.252552] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 3147.252567] _raw_spin_lock_irqsave+0x36/0x60 [ 3147.252571] serial8250_console_write+0x9f5/0xc60 [ 3147.252576] console_unlock+0x82a/0xb40 [ 3147.252580] register_console+0x40c/0x850 [ 3147.252584] univ8250_console_init+0x3a/0x4a [ 3147.252588] console_init+0x24c/0x356 [ 3147.252592] start_kernel+0x2e6/0x489 [ 3147.252596] secondary_startup_64_no_verify+0xbe/0xcb [ 3147.252599] [ 3147.252601] -> #0 (console_owner){-.-.}-{0:0}: [ 3147.252615] __lock_acquire+0x29e7/0x5b00 [ 3147.252619] lock_acquire+0x197/0x470 [ 3147.252623] console_unlock+0x360/0xb40 [ 3147.252627] vprintk_emit+0x1de/0x4e0 [ 3147.252631] vprintk_func+0x8b/0x140 [ 3147.252635] printk+0xba/0xf1 [ 3147.252639] should_fail+0x47a/0x5a0 [ 3147.252643] should_failslab+0x5/0x20 [ 3147.252646] __kmalloc+0x72/0x390 [ 3147.252650] tty_buffer_alloc+0x243/0x2b0 [ 3147.252655] __tty_buffer_request_room+0x156/0x2a0 [ 3147.252660] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 3147.252665] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 3147.252668] pty_write+0xe6/0x110 [ 3147.252673] tty_put_char+0x12d/0x160 [ 3147.252678] __process_echoes+0x57c/0xa00 [ 3147.252682] n_tty_receive_buf_common+0xb85/0x2b80 [ 3147.252686] tty_ioctl+0x51b/0x18b0 [ 3147.252690] __x64_sys_ioctl+0x19a/0x210 [ 3147.252695] do_syscall_64+0x33/0x40 [ 3147.252699] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3147.252702] [ 3147.252706] other info that might help us debug this: [ 3147.252708] [ 3147.252712] Chain exists of: [ 3147.252715] console_owner --> &port_lock_key --> &port->lock [ 3147.252733] [ 3147.252738] Possible unsafe locking scenario: [ 3147.252740] [ 3147.252745] CPU0 CPU1 [ 3147.252750] ---- ---- [ 3147.252752] lock(&port->lock); [ 3147.252763] lock(&port_lock_key); [ 3147.252773] lock(&port->lock); [ 3147.252781] lock(console_owner); [ 3147.252789] [ 3147.252793] *** DEADLOCK *** [ 3147.252795] [ 3147.252800] 6 locks held by syz-executor.0/13186: [ 3147.252803] #0: ffff88804653d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x90 [ 3147.252822] #1: ffff88804c60b0b8 (&port->buf.lock/1){+.+.}-{3:3}, at: tty_ioctl+0x4ae/0x18b0 [ 3147.252843] #2: ffff88804653d2e8 (&o_tty->termios_rwsem/1){++++}-{3:3}, at: isig+0x37d/0x430 [ 3147.252864] #3: ffffc90012d15378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_receive_buf_common+0xb46/0x2b80 [ 3147.252883] #4: ffff88804c60b958 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x2b/0x160 [ 3147.252902] #5: ffffffff84fed200 (console_lock){+.+.}-{0:0}, at: vprintk_func+0x8b/0x140 [ 3147.252920] [ 3147.252924] stack backtrace: [ 3147.252930] CPU: 0 PID: 13186 Comm: syz-executor.0 Not tainted 5.10.226 #1 [ 3147.252937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3147.252941] Call Trace: [ 3147.252945] dump_stack+0x107/0x167 [ 3147.252949] check_noncircular+0x263/0x2e0 [ 3147.252954] ? stack_trace_consume_entry+0x160/0x160 [ 3147.252959] ? print_circular_bug+0x470/0x470 [ 3147.252962] ? memcpy+0x39/0x60 [ 3147.252967] ? alloc_chain_hlocks+0x342/0x5a0 [ 3147.252971] __lock_acquire+0x29e7/0x5b00 [ 3147.252976] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3147.252980] ? SOFTIRQ_verbose+0x10/0x10 [ 3147.252984] lock_acquire+0x197/0x470 [ 3147.252989] ? console_unlock+0x2e1/0xb40 [ 3147.252993] ? lock_release+0x680/0x680 [ 3147.252997] ? lock_downgrade+0x6d0/0x6d0 [ 3147.253002] ? do_raw_spin_lock+0x121/0x260 [ 3147.253006] ? rwlock_bug.part.0+0x90/0x90 [ 3147.253010] console_unlock+0x360/0xb40 [ 3147.253014] ? console_unlock+0x2e1/0xb40 [ 3147.253018] ? devkmsg_read+0x730/0x730 [ 3147.253022] ? lock_release+0x680/0x680 [ 3147.253027] ? do_raw_spin_unlock+0x4f/0x220 [ 3147.253031] ? vprintk_func+0x8b/0x140 [ 3147.253035] vprintk_emit+0x1de/0x4e0 [ 3147.253039] vprintk_func+0x8b/0x140 [ 3147.253042] printk+0xba/0xf1 [ 3147.253047] ? record_print_text.cold+0x16/0x16 [ 3147.253051] should_fail+0x47a/0x5a0 [ 3147.253055] ? tty_buffer_alloc+0x243/0x2b0 [ 3147.253059] should_failslab+0x5/0x20 [ 3147.253062] __kmalloc+0x72/0x390 [ 3147.253067] tty_buffer_alloc+0x243/0x2b0 [ 3147.253071] __tty_buffer_request_room+0x156/0x2a0 [ 3147.253076] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 3147.253082] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 3147.253086] pty_write+0xe6/0x110 [ 3147.253089] tty_put_char+0x12d/0x160 [ 3147.253094] ? tty_hung_up_p+0x70/0x70 [ 3147.253098] ? tty_flip_buffer_push+0xee/0x100 [ 3147.253103] ? pty_write_room+0xc2/0xf0 [ 3147.253107] ? pty_stop+0x1a0/0x1a0 [ 3147.253111] __process_echoes+0x57c/0xa00 [ 3147.253117] n_tty_receive_buf_common+0xb85/0x2b80 [ 3147.253123] ? n_tty_receive_buf2+0x40/0x40 [ 3147.253127] tty_ioctl+0x51b/0x18b0 [ 3147.253131] ? tty_fasync+0x390/0x390 [ 3147.253137] ? ioctl_has_perm.constprop.0.isra.0+0x263/0x410 [ 3147.253142] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3147.253146] ? do_vfs_ioctl+0x283/0x10d0 [ 3147.253151] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3147.253155] ? generic_block_fiemap+0x60/0x60 [ 3147.253159] ? lock_downgrade+0x6d0/0x6d0 [ 3147.253164] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3147.253169] ? wait_for_completion_io+0x270/0x270 [ 3147.253174] ? selinux_file_ioctl+0xb6/0x270 [ 3147.253178] ? tty_fasync+0x390/0x390 [ 3147.253182] __x64_sys_ioctl+0x19a/0x210 [ 3147.253186] do_syscall_64+0x33/0x40 [ 3147.253190] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3147.253194] RIP: 0033:0x7f78d3913b19 [ 3147.253209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3147.253215] RSP: 002b:00007f78d0e89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3147.253226] RAX: ffffffffffffffda RBX: 00007f78d3a26f60 RCX: 00007f78d3913b19 [ 3147.253232] RDX: 0000000020000180 RSI: 0000000000005412 RDI: 0000000000000004 [ 3147.253239] RBP: 00007f78d0e891d0 R08: 0000000000000000 R09: 0000000000000000 [ 3147.253249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3147.253256] R13: 00007ffdb42950cf R14: 00007f78d0e89300 R15: 0000000000022000 VM DIAGNOSIS: 23:13:22 Registers: info registers vcpu 0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822da261 RDI=ffffffff879ef140 RBP=ffffffff879ef100 RSP=ffff88806ce09c90 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000064 R13=0000000000000064 R14=ffffffff879ef100 R15=dffffc0000000000 RIP=ffffffff822da2b8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f78d0e89700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f78d0e88f78 CR3=000000004a4ae000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=1ffff11001dfef01 RDX=dffffc0000000000 RSI=ffff88800eff7e60 RDI=ffff88800eff7908 RBP=ffff88800eff0000 RSP=ffff88800eff7820 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000032042 R11=1ffff11001dfef0c R12=ffff88800eff7e90 R13=ffff88800eff78f8 R14=1ffff11001dfef0c R15=ffffffff85a19f26 RIP=ffffffff811076d2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbf510e58c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055670bb1ce40 CR3=0000000008f8e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=0000000000000031000000006c00303a XMM04=0000000000000002000055670bb15560 XMM05=000055670bb1e640000055670bb1e620 XMM06=000055670bb07ad00000000000000000 XMM07=00000000000000000000000000000000 XMM08=6e753c007325732575253a5d73255b00 XMM09=00000000000000000000000000000000 XMM10=00000000200020000000000020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000