20 [ 2536.820713] ? udp_setsockopt+0xc0/0xc0 [ 2536.821051] ? mark_lock+0xf5/0x2df0 [ 2536.821372] ? __lockdep_reset_lock+0x180/0x180 [ 2536.821816] ? lock_chain_count+0x20/0x20 [ 2536.822173] ? mark_lock+0xf5/0x2df0 [ 2536.822544] ? mark_lock+0xf5/0x2df0 [ 2536.822864] ? lock_chain_count+0x20/0x20 [ 2536.823216] ? __lock_acquire+0xbb1/0x5b00 [ 2536.823655] ? lock_chain_count+0x20/0x20 [ 2536.824084] ? perf_trace_lock+0xac/0x490 [ 2536.824438] ? SOFTIRQ_verbose+0x10/0x10 [ 2536.824829] ? __lockdep_reset_lock+0x180/0x180 [ 2536.825237] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2536.825650] ? udp_v6_push_pending_frames+0x360/0x360 [ 2536.826086] ? SOFTIRQ_verbose+0x10/0x10 [ 2536.826435] ? mark_lock+0xf5/0x2df0 [ 2536.826806] ? lock_acquire+0x197/0x470 [ 2536.827144] ? find_held_lock+0x2c/0x110 [ 2536.827569] ? __might_fault+0xd3/0x180 [ 2536.827948] ? lock_downgrade+0x6d0/0x6d0 [ 2536.828303] ? lock_downgrade+0x6d0/0x6d0 [ 2536.828860] ? sock_has_perm+0x1ea/0x280 [ 2536.829631] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2536.830598] ? _copy_from_user+0xfb/0x1b0 [ 2536.830990] ? __import_iovec+0x458/0x590 [ 2536.831347] ? udp_v6_push_pending_frames+0x360/0x360 [ 2536.832670] inet6_sendmsg+0x105/0x140 [ 2536.833406] ? inet6_compat_ioctl+0x320/0x320 [ 2536.834286] __sock_sendmsg+0xf2/0x190 [ 2536.835069] ____sys_sendmsg+0x70d/0x870 [ 2536.835950] ? sock_write_iter+0x3d0/0x3d0 [ 2536.836778] ? do_recvmmsg+0x6d0/0x6d0 [ 2536.837511] ? SOFTIRQ_verbose+0x10/0x10 [ 2536.838219] ? lock_downgrade+0x6d0/0x6d0 [ 2536.838998] ? __lockdep_reset_lock+0x180/0x180 [ 2536.839845] ? SOFTIRQ_verbose+0x10/0x10 [ 2536.840200] ___sys_sendmsg+0xf3/0x170 [ 2536.840607] ? sendmsg_copy_msghdr+0x160/0x160 [ 2536.841001] ? __fget_files+0x2cf/0x520 [ 2536.841339] ? lock_downgrade+0x6d0/0x6d0 [ 2536.841956] ? find_held_lock+0x2c/0x110 [ 2536.842362] ? __fget_files+0x2f8/0x520 [ 2536.842800] ? __fget_light+0xea/0x290 [ 2536.843179] __sys_sendmsg+0xe5/0x1b0 [ 2536.843596] ? __sys_sendmsg_sock+0x40/0x40 [ 2536.844017] ? rcu_read_lock_any_held+0x75/0xa0 [ 2536.844555] do_syscall_64+0x33/0x40 [ 2536.844920] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.845406] RIP: 0033:0x7fa05acd5b19 [ 2536.845814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2536.847755] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2536.848857] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2536.849774] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2536.850773] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2536.851568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2536.852214] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 [ 2536.865328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24225 comm=syz-executor.4 12:58:51 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x90cc1, 0x0) mount$9p_unix(&(0x7f0000000140)='./file1\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x29c2034, &(0x7f0000000040)={[{@data_err_ignore}]}) mount(&(0x7f00000000c0)=@md0, &(0x7f0000000180)='./file0/../file0/file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x280400a, 0x0) r0 = syz_io_uring_complete(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) inotify_add_watch(r0, &(0x7f0000000000)='./file0/../file0\x00', 0x4) 12:58:51 executing program 6: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/208) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ff9000/0x1000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget(0x1, 0x1000, 0x1, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) 12:58:51 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:58:51 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0xffffc000) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:58:51 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 33) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 12:58:51 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x22b00, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = syz_io_uring_setup(0x69f8, &(0x7f0000000000)={0x0, 0xffbc, 0x0, 0x0, 0x2b1, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000009, 0x8010, r1, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) sendmmsg$inet(r3, &(0x7f0000001f40)=[{{&(0x7f0000000100)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000500)=[{&(0x7f00000002c0)="5b5b3c8b51f51519780f86bac5a12896db0aaa3aa16ce762550447c9ba7922392ec5f717c0c56943ecc74830f5522cd82be3c4ade2d0d4e39ca576332b54e37060262b9e86ec7f1b7b96951554dd6a97adeae18b16636d4ca0e18c642cabb7a030a6bd64061c022526252534d3c7383a11329b8cf28276789f4370a66dc54e53a63922c887defb67643d07fe79e155ca0f4f0875168a700fdb9c1de37512e724a5ad0ff5235f846fbb30e79d1b79afee935cc3088c30b613912b6391a884dd57df2721ed5d8c6979c5a0ad95d3380d67", 0xd0}, {&(0x7f0000000180)="17589d717e0fc3ac51adfbab6562deb5f7c2c1017f242073b446eb7f197731e3baf127884f76df23992ed18b8e90ab62dee032a9f31e7b9385d0e50f722ea6d949f5b8283b86bf83c7ac945df327cf813df549011865d1b5860acab7782c39d6121caf32c7672e1c3a7fae1b6d6a3b1a65b637a7d3fff619a87623467567e0f4a8e29ee1121b3b6ce1315fe4f758241180eafeba847d708b4920574f6dcc19576423bf04375bcf2dba525898558ffd42aa61a0", 0xb3}, {&(0x7f00000003c0)="1bb1b1913b20c29ab3805d41f41290d6bcd8412514d1b521e31b8b442f53a23b8b124f5729d15f6d8c98f8efbfca1a4d595b768507b1162ace8649ee5a08ef5ca7e098f148f06fbb9a2ffcb97d15a3d40332aa0adeb8040e6c494f18db76957c1d752eae05bce9e63ce84e660e4c0ae29484f38d5ef0bf368fd54a844a79000a72222c5966851d6ee925885a", 0x8c}, {&(0x7f0000000480)="33098d7850bdb6cce50e65f61e3237887084d320510765a2c6b0508bbef1f65090349a73a204d1e9ebe292012c6c69eecbc1d49994455225685831e9bd5732a0692803659c20f4a2d0a46b459df8b75922a1f632825af5bf02", 0x59}], 0x4, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}, @ip_retopts={{0x78, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x87, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010100, @loopback, @multicast1]}, @lsrr={0x83, 0x17, 0x34, [@loopback, @loopback, @private=0xa010101, @broadcast, @broadcast]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x7, 0x3, "9f"}, {0x5, 0xf, "2e3dbd41c248c55b78cb64d2a7"}, {0x0, 0xf, "97a9de63b6dbb5e47ae0dc01ac"}, {0x6, 0x4, "60d9"}, {0x1, 0xd, "40962a6297f6310badea7d"}]}]}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x59, 0x1, 0x0, [{@rand_addr=0x64010102, 0x101}, {@dev={0xac, 0x14, 0x14, 0x2c}}]}, @lsrr={0x83, 0x13, 0xc8, [@local, @broadcast, @remote, @remote]}, @noop, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0x40, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xf, 0x89, [@private=0xa010102, @multicast1, @multicast2]}, @noop, @generic={0x89, 0x5, "19a569"}, @lsrr={0x83, 0x1f, 0xb8, [@rand_addr=0x64010102, @multicast1, @rand_addr=0x64010102, @multicast2, @broadcast, @remote, @broadcast]}, @timestamp_addr={0x44, 0xc, 0xd6, 0x1, 0x7, [{@rand_addr=0x64010101}]}]}}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x150}}, {{0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}}, {{&(0x7f0000000740)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000000780)="5e192a41c16e2de087d613d0c08a6fbd184f985ec3", 0x15}, {&(0x7f00000007c0)="897e02364b293ca4aaee45ba36b81d26c15d15caab6fa2278f2d2b26dc44ea581312f597ee2fee21cb7804cb619640b7a61d537653a24286bc832abab20c06f513a1a579fe748c90ff2a6739e12d8ba93f69623384fde93e980a252d64c24b8485d9e7540469c90e219ac953aff5f677404fe153d8f01921cea2b5c653f01bb368f03d42ccf55391fd34c07e59a975fe9101797931ada10b93354fa4c2edc6baaa2b8313cde00fff46f33f7afb7bb2ee49e164a79f490b02b9314b212bf3b472c6244c55f5313c76ba8ec272ab1a5848e5f4eebcb7cc220c2c5c84f5ccbfc5", 0xdf}, {&(0x7f0000000940)="c389070265712a91b9bfbf9f55d45328c8af584d74b9a2610a28e5c1923960b99a4b246cafeaf39b70716111c1845435ffeafc9c2f8566ba7c6c2609e63cb66ddcb5cc1aa191d90b21afedcc84e667dd14fbc1dfce0314b069453eefc47d75e8e09b3caf1a0eea8f2b5e87005b6435af384f57622a6745e4a44815e3d91708e831b6", 0x82}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="2d51289e2fbea017fd1e2f649aa05c88d2020089a8b714e599f7ade03b5528fc4fa834c475f274a12cccfa011999889312a842d8b40308f207add4887634fcad08c3af4eeba34c708c6a353aad2dc8b3aeb49739ee40f613b60b13bc72b4616c01ac4fe617fbbafd313e11a9f324da667f9ed9e002010f3f742eb369a6886e9e8836bc10d285832945cbb1cfe5e5194449ef84fded61c12a15f631f3b839c0ab531a39eedf1a332099796eaca718af32d8fb340f3f76ae5ea9db94190ac12575cbd36f6c717a8d92f30721377dcbd86cf6cf45d16ccd926f382f2131d2c0545aca864c", 0xe3}, {&(0x7f0000001b00)="7c9a96744186a246d0fcabd5c527ae121e4780160ad15ea95b03f093e52b1711e2fb7cd74935305b58b133ed2bce900fc0f9747a11563d6395f89fca0796372c4ce467f05b37999511a1fe6ad1b3ea22a6fd9212e71c857f15c2ba187a4850e363a708584f85ca9ebbdec6eef26cf7353604a929b8393bb1b4ca2b1aa925541a9c06255c300a44bcdfb6a1c45a4849626701346449c25121bc71bf1d79244ddadcf08e8a92908720f0f088ec7d4feedf5c202909f730488baa6bbc61ff03df92c0f81870ff715360afddea07bfb01514aec855c178c23d11", 0xd8}, {&(0x7f0000001c00)="02eadbb4961792f0cd43d4861097548a137dc667023358584c12cf5a17cd2367bdb76600803a843df5f6d659f2d8b2fc5c459edac618fd8bce76561c90cafd34030ed7e95e0583321935057ca70714bab086068fb43d93ed4b89ca24074705c06285efdcf06671d3f07277d672f149bed20f1fadb3ecd54fd043de0f7e93791136957c54be7f90c6e60f727673718cbe8c2a614cbb30ed09ad3f7fe87f81e82fee8c212b", 0xa4}], 0x7, &(0x7f0000001d40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x30}}, {{&(0x7f00000006c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000001dc0), 0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="11000000000000f10000000001000000800000000000000014000000000000000000000001000000000000000000000011000000000000000000000001000000ca000000000000001400000000000000000000000100000003000000000000001000000000000000000000000700000014000000000000000000000002000000040000000000000014000000000000000000000002000000a6050000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aae0000002000000007800000000000000000000000700000086560000000205020209c4d68bc1a437ea070f504cea2b7924091bf7b4735b1602114f7a6ee9af101a9d2bcd364b25b90e050cccc2a3f969124d4d98bc00101cd3e7291cf8801d46309b0f82060709f2bd6f5f9fa0f500830f4f64010101ac1414bbac1414bb0000"], 0x138}}], 0x4, 0x0) 12:58:51 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x80087601, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 12:58:51 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:58:51 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2537.149135] FAULT_INJECTION: forcing a failure. [ 2537.149135] name failslab, interval 1, probability 0, space 0, times 0 [ 2537.150512] CPU: 0 PID: 24480 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2537.151340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2537.152175] Call Trace: [ 2537.152463] dump_stack+0x107/0x167 [ 2537.152846] should_fail.cold+0x5/0xa [ 2537.153264] ? trace_hardirqs_on+0x5b/0x180 [ 2537.154287] ? __alloc_skb+0x6d/0x5b0 [ 2537.154697] should_failslab+0x5/0x20 [ 2537.155100] kmem_cache_alloc_node+0x55/0x330 [ 2537.155587] __alloc_skb+0x6d/0x5b0 [ 2537.155991] skb_segment+0x9d8/0x3aa0 [ 2537.156459] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2537.157012] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2537.157626] ? SOFTIRQ_verbose+0x10/0x10 [ 2537.158066] __udp_gso_segment+0x11c6/0x1830 [ 2537.158526] ? __sk_receive_skb+0x830/0x830 [ 2537.159013] udp4_ufo_fragment+0x528/0x720 [ 2537.159490] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2537.160020] inet_gso_segment+0x4fb/0x11a0 [ 2537.160492] skb_mac_gso_segment+0x273/0x570 [ 2537.160973] ? inet_sock_destruct+0x840/0x840 [ 2537.161442] ? skb_network_protocol+0x650/0x650 [ 2537.161946] ? skb_crc32c_csum_help+0x80/0x80 [ 2537.162422] ? lock_acquire+0x197/0x470 [ 2537.162853] ? __dev_queue_xmit+0x1c2/0x2710 [ 2537.163343] __skb_gso_segment+0x32d/0x6d0 [ 2537.163822] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2537.164278] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2537.164685] __dev_queue_xmit+0x87b/0x2710 [ 2537.165075] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2537.165489] ? mark_held_locks+0x9e/0xe0 [ 2537.165851] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2537.166314] neigh_connected_output+0x382/0x4d0 [ 2537.166742] ip_finish_output2+0x6f1/0x21f0 [ 2537.167124] ? nf_hook_slow+0xfc/0x1e0 [ 2537.167469] ? ip_frag_next+0x9e0/0x9e0 [ 2537.167822] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2537.168336] __ip_finish_output.part.0+0x5f3/0xb50 [ 2537.168858] ? ip_fragment.constprop.0+0x240/0x240 [ 2537.169371] ? nf_hook+0x510/0x510 [ 2537.169889] ip_output+0x2f7/0x600 [ 2537.170285] ip_send_skb+0xdd/0x260 [ 2537.170674] udp_send_skb+0x6da/0x11d0 [ 2537.171112] udp_sendmsg+0x139a/0x2160 [ 2537.171523] ? tracing_generic_entry_update+0x1ed/0x270 [ 2537.172075] ? ip_frag_init+0x350/0x350 [ 2537.172498] ? tracing_generic_entry_update+0x1ed/0x270 [ 2537.173071] ? udp_setsockopt+0xc0/0xc0 [ 2537.173508] ? perf_event_switch_output+0x7d0/0x7d0 [ 2537.174070] ? lock_chain_count+0x20/0x20 [ 2537.174508] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2537.175040] ? lock_chain_count+0x20/0x20 [ 2537.175472] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2537.175982] ? perf_trace_lock+0x2bd/0x490 [ 2537.176346] ? perf_swevent_event+0x6c/0x550 [ 2537.176724] ? __lockdep_reset_lock+0x180/0x180 [ 2537.177147] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2537.177506] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2537.177951] ? udp_v6_push_pending_frames+0x360/0x360 [ 2537.178394] ? SOFTIRQ_verbose+0x10/0x10 [ 2537.178779] ? lock_acquire+0x197/0x470 [ 2537.179122] ? find_held_lock+0x2c/0x110 [ 2537.179483] ? __might_fault+0xd3/0x180 [ 2537.179839] ? lock_downgrade+0x6d0/0x6d0 [ 2537.180214] ? lock_downgrade+0x6d0/0x6d0 [ 2537.180582] ? sock_has_perm+0x1ea/0x280 [ 2537.180941] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2537.181395] ? _copy_from_user+0xfb/0x1b0 [ 2537.181778] ? __import_iovec+0x458/0x590 [ 2537.182138] ? udp_v6_push_pending_frames+0x360/0x360 [ 2537.182594] inet6_sendmsg+0x105/0x140 [ 2537.182931] ? inet6_compat_ioctl+0x320/0x320 [ 2537.183321] __sock_sendmsg+0xf2/0x190 [ 2537.183665] ____sys_sendmsg+0x70d/0x870 [ 2537.184041] ? sock_write_iter+0x3d0/0x3d0 [ 2537.184405] ? do_recvmmsg+0x6d0/0x6d0 [ 2537.184743] ? perf_trace_lock+0x2bd/0x490 [ 2537.185110] ? SOFTIRQ_verbose+0x10/0x10 [ 2537.185474] ? __lockdep_reset_lock+0x180/0x180 [ 2537.185887] ___sys_sendmsg+0xf3/0x170 [ 2537.186231] ? sendmsg_copy_msghdr+0x160/0x160 [ 2537.186638] ? __fget_files+0x2cf/0x520 [ 2537.186989] ? lock_downgrade+0x6d0/0x6d0 [ 2537.187438] ? find_held_lock+0x2c/0x110 [ 2537.187882] ? __fget_files+0x2f8/0x520 [ 2537.188325] ? __fget_light+0xea/0x290 [ 2537.188905] __sys_sendmsg+0xe5/0x1b0 [ 2537.189321] ? __sys_sendmsg_sock+0x40/0x40 [ 2537.189769] ? rcu_read_lock_any_held+0x75/0xa0 [ 2537.190318] do_syscall_64+0x33/0x40 [ 2537.190699] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2537.191256] RIP: 0033:0x7fa05acd5b19 [ 2537.191637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2537.193380] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2537.194203] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2537.194955] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2537.195713] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2537.196405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2537.197158] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 12:59:10 executing program 4: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) copy_file_range(r0, &(0x7f0000000080)=0xfffffffffffffff8, r0, 0x0, 0x3f, 0x0) 12:59:10 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 34) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 12:59:10 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:59:10 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x80108906, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 12:59:10 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x7}]}]}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4010000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x74, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x20000011) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 12:59:10 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:59:10 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x0, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 12:59:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000100)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x505242, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0) r2 = syz_io_uring_complete(0x0) io_uring_enter(r1, 0x630a, 0xce52, 0x2, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) acct(&(0x7f00000006c0)='./file0\x00') fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x2c0, r3}) execveat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=[&(0x7f00000001c0)='@\\]%/+\xeb{//-\x00', &(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='**\\%{*\xb9\x00', &(0x7f0000000280)='vfat\x00', &(0x7f00000002c0)='vfat\x00', &(0x7f0000000300)='vfat\x00', &(0x7f0000000340)=')\xa4!//}[\x00', &(0x7f0000000380)='vfat\x00', &(0x7f00000003c0)=',$^\x00'], &(0x7f0000000640)=[&(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='@-\x00', &(0x7f0000000500)='vfat\x00', &(0x7f0000000540)='%+::$#\x00', &(0x7f0000000580)='*%\x15+\'\xff\x00', &(0x7f00000005c0)='${:$\x00', &(0x7f0000000600)='$%\x00'], 0x400) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x100, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:59:10 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2556.240165] FAULT_INJECTION: forcing a failure. [ 2556.240165] name failslab, interval 1, probability 0, space 0, times 0 [ 2556.241175] CPU: 1 PID: 24773 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2556.241757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2556.242455] Call Trace: [ 2556.242691] dump_stack+0x107/0x167 [ 2556.243008] should_fail.cold+0x5/0xa [ 2556.243340] ? create_object.isra.0+0x3a/0xa20 [ 2556.243732] should_failslab+0x5/0x20 [ 2556.244137] kmem_cache_alloc+0x5b/0x310 [ 2556.244527] create_object.isra.0+0x3a/0xa20 [ 2556.244934] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2556.245375] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2556.245802] ? skb_segment+0x9d8/0x3aa0 [ 2556.246144] __alloc_skb+0xb1/0x5b0 [ 2556.246459] skb_segment+0x9d8/0x3aa0 [ 2556.246781] ? lock_chain_count+0x20/0x20 [ 2556.247173] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2556.247594] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2556.248085] ? SOFTIRQ_verbose+0x10/0x10 [ 2556.248453] __udp_gso_segment+0x11c6/0x1830 [ 2556.248826] ? __sk_receive_skb+0x830/0x830 [ 2556.249203] udp4_ufo_fragment+0x528/0x720 [ 2556.249567] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2556.249989] inet_gso_segment+0x4fb/0x11a0 [ 2556.250362] skb_mac_gso_segment+0x273/0x570 [ 2556.250735] ? inet_sock_destruct+0x840/0x840 [ 2556.251114] ? skb_network_protocol+0x650/0x650 [ 2556.251503] ? skb_crc32c_csum_help+0x80/0x80 [ 2556.251887] ? lock_acquire+0x197/0x470 [ 2556.252282] ? __dev_queue_xmit+0x1c2/0x2710 [ 2556.252698] __skb_gso_segment+0x32d/0x6d0 [ 2556.253108] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2556.253553] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2556.253942] __dev_queue_xmit+0x87b/0x2710 [ 2556.254312] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2556.254709] ? mark_held_locks+0x9e/0xe0 [ 2556.255059] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2556.255507] neigh_connected_output+0x382/0x4d0 [ 2556.255934] ip_finish_output2+0x6f1/0x21f0 [ 2556.256332] ? nf_hook_slow+0xfc/0x1e0 [ 2556.256667] ? ip_frag_next+0x9e0/0x9e0 [ 2556.257003] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2556.257435] __ip_finish_output.part.0+0x5f3/0xb50 [ 2556.257852] ? ip_fragment.constprop.0+0x240/0x240 [ 2556.258262] ? nf_hook+0x510/0x510 [ 2556.258577] ip_output+0x2f7/0x600 [ 2556.258885] ip_send_skb+0xdd/0x260 [ 2556.259198] udp_send_skb+0x6da/0x11d0 [ 2556.259539] udp_sendmsg+0x139a/0x2160 [ 2556.259866] ? mark_lock+0xf5/0x2df0 [ 2556.260219] ? ip_frag_init+0x350/0x350 [ 2556.260560] ? lock_chain_count+0x20/0x20 [ 2556.260916] ? udp_setsockopt+0xc0/0xc0 [ 2556.261251] ? mark_lock+0xf5/0x2df0 [ 2556.261571] ? __lockdep_reset_lock+0x180/0x180 [ 2556.261967] ? lock_chain_count+0x20/0x20 [ 2556.262320] ? mark_lock+0xf5/0x2df0 [ 2556.262640] ? mark_lock+0xf5/0x2df0 [ 2556.262961] ? lock_chain_count+0x20/0x20 [ 2556.263311] ? __lock_acquire+0xbb1/0x5b00 [ 2556.263671] ? lock_chain_count+0x20/0x20 [ 2556.264081] ? perf_trace_lock+0xac/0x490 [ 2556.264433] ? SOFTIRQ_verbose+0x10/0x10 [ 2556.264778] ? __lockdep_reset_lock+0x180/0x180 [ 2556.265182] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2556.265541] ? udp_v6_push_pending_frames+0x360/0x360 [ 2556.265972] ? SOFTIRQ_verbose+0x10/0x10 [ 2556.266320] ? mark_lock+0xf5/0x2df0 [ 2556.266641] ? lock_acquire+0x197/0x470 [ 2556.266974] ? find_held_lock+0x2c/0x110 [ 2556.267324] ? __might_fault+0xd3/0x180 [ 2556.267659] ? lock_downgrade+0x6d0/0x6d0 [ 2556.268060] ? lock_downgrade+0x6d0/0x6d0 [ 2556.268415] ? sock_has_perm+0x1ea/0x280 [ 2556.268759] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2556.269201] ? _copy_from_user+0xfb/0x1b0 [ 2556.269567] ? __import_iovec+0x458/0x590 [ 2556.269918] ? udp_v6_push_pending_frames+0x360/0x360 [ 2556.270359] inet6_sendmsg+0x105/0x140 [ 2556.270691] ? inet6_compat_ioctl+0x320/0x320 [ 2556.271070] __sock_sendmsg+0xf2/0x190 [ 2556.271403] ____sys_sendmsg+0x70d/0x870 [ 2556.271753] ? sock_write_iter+0x3d0/0x3d0 [ 2556.272229] ? do_recvmmsg+0x6d0/0x6d0 [ 2556.272567] ? SOFTIRQ_verbose+0x10/0x10 [ 2556.272908] ? lock_downgrade+0x6d0/0x6d0 [ 2556.273262] ? __lockdep_reset_lock+0x180/0x180 [ 2556.273651] ? SOFTIRQ_verbose+0x10/0x10 [ 2556.274004] ___sys_sendmsg+0xf3/0x170 [ 2556.274338] ? sendmsg_copy_msghdr+0x160/0x160 [ 2556.274730] ? __fget_files+0x2cf/0x520 [ 2556.275067] ? lock_downgrade+0x6d0/0x6d0 [ 2556.275418] ? find_held_lock+0x2c/0x110 [ 2556.275775] ? __fget_files+0x2f8/0x520 [ 2556.276168] ? __fget_light+0xea/0x290 [ 2556.276510] __sys_sendmsg+0xe5/0x1b0 [ 2556.276835] ? __sys_sendmsg_sock+0x40/0x40 [ 2556.277202] ? rcu_read_lock_any_held+0x75/0xa0 [ 2556.277624] do_syscall_64+0x33/0x40 [ 2556.277940] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2556.278372] RIP: 0033:0x7fa05acd5b19 [ 2556.278689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2556.280282] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2556.280920] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2556.281516] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2556.282109] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2556.282697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2556.283287] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 12:59:37 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x0, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 12:59:37 executing program 5: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:59:37 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 35) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 12:59:37 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:59:37 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0xea902, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x600008c1) r2 = openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x20000, 0x8) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000040)=0x1) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 12:59:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40920}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() setpriority(0x0, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, 0x4010, 0x1, 0x6, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x52}, @nested={0x4, 0x1, 0x0, 0x1, [@generic="c787a57bb993695fc326620b6a5540664e51b5df0dca9ada44fba405581e807b6f954255df7eb962eca8caa92ce64d918d8727a851da3581d61585b4189b3badc532bf02a42fdc55ad07210f70b9a6ba500918b629c8e987d5c80480bc66be56639ed34eeda95147ef826d9b785b933256d18ec95c4dab779699c9e6fe01995840d4534859418c852ae2239a3f517c210592df0f5c5a948c73bee5aaebe8b6131982be5022c424a2db3aefe626a95ebb72a5315171ac"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="000326bd7000ffdbdf2501000000000000000941000000140018000008007564703a73797a3000000000f645105c6ba9e37ed745c4f6e68723ff75a700dcbd0fdbe6246845eadd6e47389032fa97e4eae99efe5ef9f396a23e814b4c591bf5c076138a6ea1a5863c859bbd89f3d6e939ad97bffc9aedd14ab11c11ac9013ff260de7d352d1ef9e865710d1d52f31829a61e471f8b4b7050000566c9ee1989c85655953e83f17cee26c0511551d407accedc2c96d2f0fca7bf779bdfc8132fc08390d6261e3630cb29def"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x8880) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="beb80000", @ANYRES16, @ANYBLOB="080028bd70000000000001000000000000000c410000000c00147379fa30000000"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x14000004) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="35cce37d92d3eaf623cf560306ec3dde59e956c89377f68eb11ef005a92730794223cda4ff8f8ba066fcf888dcd2b14abe8b0de665a94f21be2886577eacbff437c85bdc0f6c6f8577b1deefe50e9be9eb98d0070a5b2c1699409b7f2f27f5a7a6cf1b0287240bac385ce8f529f148b56a80370e34a429b40e0e4ee9337cf8426ee81ecced89177fd191625254fc99e774a270ff789604c4d0bc72dae0eba0466c8362ed68ffa4ac7d65cb347474559b91d8abecc076b4471af3116152b537efb2907853f9cf7ce50d", @ANYRES32]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000005c0), 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf25040000004404004e24000014000300000000000000000000000000000000000c0007003000000004000000080005000400000008000b0e73697000060002005a00000038000280060002004e2100000800090000000000080006f54f00000014000100e000000200000000000000000000000008000900090000001c00038008000300000000000800010001000000080001000200000008000400200000004c000280080006000300000005000d00010000000800050005001c283171ff89dec201000800070086000000080009007c000000080004000900000006000f0002000078e00006000b000a00"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x44) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000840)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) unshare(0x48020200) 12:59:37 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x80108907, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 12:59:37 executing program 4: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000300)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0xd}}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_io_uring_setup(0x3e06, &(0x7f0000000280)={0x0, 0x18c8, 0x10, 0x2, 0x120}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000340)) fcntl$setlease(r3, 0x400, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fstatfs(r1, &(0x7f0000002e00)=""/4102) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000440)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0xd3, 0xfffefffffffffffd, 0xa}) [ 2583.043089] FAULT_INJECTION: forcing a failure. [ 2583.043089] name failslab, interval 1, probability 0, space 0, times 0 [ 2583.044208] CPU: 1 PID: 24998 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2583.044865] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2583.045652] Call Trace: [ 2583.045898] dump_stack+0x107/0x167 [ 2583.046222] should_fail.cold+0x5/0xa [ 2583.046653] should_failslab+0x5/0x20 [ 2583.046981] __kmalloc_node_track_caller+0x74/0x3b0 [ 2583.047465] ? skb_segment+0x9d8/0x3aa0 [ 2583.047814] __alloc_skb+0xb1/0x5b0 [ 2583.048138] skb_segment+0x9d8/0x3aa0 [ 2583.048533] ? lock_chain_count+0x20/0x20 [ 2583.048931] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2583.049403] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2583.049866] ? SOFTIRQ_verbose+0x10/0x10 [ 2583.050220] __udp_gso_segment+0x11c6/0x1830 [ 2583.050657] ? __sk_receive_skb+0x830/0x830 [ 2583.051037] udp4_ufo_fragment+0x528/0x720 [ 2583.051473] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2583.051920] inet_gso_segment+0x4fb/0x11a0 [ 2583.052342] skb_mac_gso_segment+0x273/0x570 [ 2583.052749] ? inet_sock_destruct+0x840/0x840 [ 2583.053130] ? skb_network_protocol+0x650/0x650 [ 2583.053565] ? skb_crc32c_csum_help+0x80/0x80 [ 2583.053966] ? lock_acquire+0x197/0x470 [ 2583.054336] ? __dev_queue_xmit+0x1c2/0x2710 [ 2583.054729] __skb_gso_segment+0x32d/0x6d0 [ 2583.055119] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2583.055637] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2583.056051] __dev_queue_xmit+0x87b/0x2710 [ 2583.056481] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2583.056904] ? mark_held_locks+0x9e/0xe0 [ 2583.057257] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2583.057751] neigh_connected_output+0x382/0x4d0 [ 2583.058184] ip_finish_output2+0x6f1/0x21f0 [ 2583.058596] ? nf_hook_slow+0xfc/0x1e0 [ 2583.058934] ? ip_frag_next+0x9e0/0x9e0 [ 2583.059293] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2583.059798] __ip_finish_output.part.0+0x5f3/0xb50 [ 2583.060260] ? ip_fragment.constprop.0+0x240/0x240 [ 2583.060724] ? nf_hook+0x510/0x510 [ 2583.061042] ip_output+0x2f7/0x600 [ 2583.061413] ip_send_skb+0xdd/0x260 [ 2583.061728] udp_send_skb+0x6da/0x11d0 [ 2583.062070] udp_sendmsg+0x139a/0x2160 [ 2583.062464] ? mark_lock+0xf5/0x2df0 [ 2583.062784] ? ip_frag_init+0x350/0x350 [ 2583.063124] ? lock_chain_count+0x20/0x20 [ 2583.063572] ? udp_setsockopt+0xc0/0xc0 [ 2583.063907] ? mark_lock+0xf5/0x2df0 [ 2583.064244] ? __lockdep_reset_lock+0x180/0x180 [ 2583.064700] ? lock_chain_count+0x20/0x20 [ 2583.065055] ? mark_lock+0xf5/0x2df0 [ 2583.065443] ? mark_lock+0xf5/0x2df0 [ 2583.065764] ? lock_chain_count+0x20/0x20 [ 2583.066114] ? __lock_acquire+0xbb1/0x5b00 [ 2583.066540] ? lock_chain_count+0x20/0x20 [ 2583.066909] ? perf_trace_lock+0xac/0x490 [ 2583.067261] ? SOFTIRQ_verbose+0x10/0x10 [ 2583.067697] ? __lockdep_reset_lock+0x180/0x180 [ 2583.068107] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2583.068529] ? udp_v6_push_pending_frames+0x360/0x360 [ 2583.068986] ? SOFTIRQ_verbose+0x10/0x10 [ 2583.069385] ? mark_lock+0xf5/0x2df0 [ 2583.069730] ? lock_acquire+0x197/0x470 [ 2583.070069] ? find_held_lock+0x2c/0x110 [ 2583.070465] ? __might_fault+0xd3/0x180 [ 2583.070825] ? lock_downgrade+0x6d0/0x6d0 [ 2583.071184] ? lock_downgrade+0x6d0/0x6d0 [ 2583.071618] ? sock_has_perm+0x1ea/0x280 [ 2583.071986] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2583.072490] ? _copy_from_user+0xfb/0x1b0 [ 2583.072878] ? __import_iovec+0x458/0x590 [ 2583.073233] ? udp_v6_push_pending_frames+0x360/0x360 [ 2583.073717] inet6_sendmsg+0x105/0x140 [ 2583.074070] ? inet6_compat_ioctl+0x320/0x320 [ 2583.074501] __sock_sendmsg+0xf2/0x190 [ 2583.074834] ____sys_sendmsg+0x70d/0x870 [ 2583.075203] ? sock_write_iter+0x3d0/0x3d0 [ 2583.075631] ? do_recvmmsg+0x6d0/0x6d0 [ 2583.075967] ? SOFTIRQ_verbose+0x10/0x10 [ 2583.076393] ? lock_downgrade+0x6d0/0x6d0 [ 2583.076752] ? __lockdep_reset_lock+0x180/0x180 [ 2583.077162] ? SOFTIRQ_verbose+0x10/0x10 [ 2583.077562] ___sys_sendmsg+0xf3/0x170 [ 2583.077898] ? sendmsg_copy_msghdr+0x160/0x160 [ 2583.078346] ? __fget_files+0x2cf/0x520 [ 2583.078697] ? lock_downgrade+0x6d0/0x6d0 [ 2583.079053] ? find_held_lock+0x2c/0x110 [ 2583.079502] ? __fget_files+0x2f8/0x520 [ 2583.079854] ? __fget_light+0xea/0x290 [ 2583.080205] __sys_sendmsg+0xe5/0x1b0 [ 2583.080594] ? __sys_sendmsg_sock+0x40/0x40 [ 2583.080964] ? rcu_read_lock_any_held+0x75/0xa0 [ 2583.081455] do_syscall_64+0x33/0x40 [ 2583.081776] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2583.082209] RIP: 0033:0x7fa05acd5b19 [ 2583.082588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2583.084230] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2583.084942] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2583.085606] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2583.086206] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2583.086864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2583.087537] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 12:59:37 executing program 5: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2583.111389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16400 sclass=netlink_route_socket pid=25008 comm=syz-executor.6 [ 2583.120984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25008 comm=syz-executor.6 12:59:37 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 36) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 12:59:37 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) ftruncate(0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2583.201255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16400 sclass=netlink_route_socket pid=25075 comm=syz-executor.6 [ 2583.203003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25008 comm=syz-executor.6 12:59:37 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0xc0045878, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 12:59:37 executing program 6: open(&(0x7f0000000140)='./file1/file0\x00', 0x100, 0x38) statx(0xffffffffffffffff, 0x0, 0x4000, 0x800, &(0x7f00000001c0)) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000540)=0xe8) lstat(&(0x7f00000006c0)='./file1/file0\x00', &(0x7f0000000700)) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x407, 0x42800) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)={0x5c, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x12ff}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x5}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x107f}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x3ff}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x1f}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x1f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(r4, 0x9e46, 0x0) dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100), 0x1800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000041d00230c000000000000000004e1010008000c0000000000"], 0x1c}}, 0x0) 12:59:37 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) clone3(&(0x7f00000008c0)={0x3044100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000000c0)=""/241, 0xf1}, {&(0x7f00000002c0)=""/185, 0xb9}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000480)=""/210, 0xd2}, {&(0x7f0000000580)=""/171, 0xab}], 0x7) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004800}, 0x4048841) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$FITHAW(r4, 0xc0045878) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 12:59:38 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c5", 0x6}], 0x1}, 0x0, 0x40040d5}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) mount$cgroup2(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8010, &(0x7f0000000200)={[{@subsystem='cpu'}, {@subsystem='io'}, {@memory_recursiveprot}, {}], [{@subj_type={'subj_type', 0x3d, '@!&{,'}}, {@context={'context', 0x3d, 'system_u'}}, {@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@appraise}, {@euid_eq={'euid', 0x3d, r4}}]}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r6 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x2, 0x800) sendmsg$nl_generic(r6, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000940)={0x1170, 0x26, 0x200, 0x70bd2b, 0x25dfdbfc, {0x11}, [@nested={0x10be, 0x2d, 0x0, 0x1, [@generic="e9a6d71a6fb215b11172f7f458cffe39619a9db3936373e7f81377fcb4d3f026ca310c45de9febc666dd37418fe95a726f7b0e00e2f9f679165664aa2599b51d0ee0fdd163df73a42a1a8676db5e4f0e749aea86b421be1bcab6946507342c57f94e", @generic, @typed={0x1004, 0x8c, 0x0, 0x0, @binary="9f83a175ed8cb4d1dda8e9606f3ccb28cf203a30c66b8d63cba4812f7796257a6ddde70f43357fd3eeb6ac8928ec705d44129535408ef93d220956f849c2587b839eb7911d43f5664114ae1bda2d7a496dc0b8d4c7560b55fe0cf5786b872932f0ab979467febb1bcd6e68f620a3eaa1c55452d2c1ef5855ba175e08a041b73ced52d2d46d16c90f845229222578a2e53917d0df01d1b431c93f03630a484705ffc578e0568b3c59c7074b7268db33a451269bb5a1fb9fe186568742f59009c20edbcea3527c8c30549fd51e13d5fc80770a4fcd1d89f212bea84e11a011a7bd25074ad70aca59cb6383083ad86bfe6a63cf26a1eb78a75979bc817c43655ab0844d70359ff965d293b7d3afefc4086d7957a12ee6769cb05a677e81e070d51a446535fd789676a2577eb5158320874becedeeef1c2f224caabdf4f1b3b942a1863ad6b35591e649c07e3e973bdbe0d6c5956451d9cd19afae2e1681a68171aaa76ab177d674d755c09bcff22e92f229810848964edfd78fc09be62ff61fa16d00d25a3828695d2a0e83da5f1178d4ad1658a8454a88d5d4b4e3e54c6e7f4b154d407da9c65cc601d735b5896030302ce5bdb622a28fc535c083a646f0fbff8cb0c900ef72ab2e47f51381ccb591d623de6174941786048560ea2208d364e5c06b3c4888d05ed92155d7150d6002fb4d953f77fdecbbdccbc258dbd73812cd990817638914d371bad17671556c6a2f8bbcc92b0f206660420ad547bd0a6233847b7a399a25608cf314048c1836fd7fb51816c814711dc19029cd5914659195213572a210ae37f9d9e110c5291d0bb3901d0e73709ad1ef78afd065affcb66c8059670a52de8d9ef758978f85be71a940cae29a77e263d7a3f942ca4789540d600768188bcbceb2c6456d240e1c667de68095089ac622a67f33657c24226af4584ccde9c5883fee16e963febf7ae9c9b8d6051445ffd2b1c40dccad20118a6321d77d521e205dab92a42879c6eada9cc5e1029bc1deca01e95e531c210d6dcdc475b135e1aae19689d8890c4881764a1ed83c1b4959848fa260583b1f55a807fb130d20cd892915a3d30dca44b36cb71ebfa3cc0485b3b4f71158b866e5752c3e678b6c7d8cac96b4e2dff35a9207e3ab8ecb47572318724b9b63162d29ddbaa4bc62edd2dfcae825143107328063fbf8f15c138d8955917395638c088e78bc37dd8e43126affa4832f837f55740523e5d7fb95f1c87a3df95ed6196ff6938ceea5ffe0130e58062e21af574e67109ff94df55735baed1b5d83395ed8c85f08042057495d2cad6b67fd72fcb7ff0340b9eeb11fc392a1ef9c45ffe4a441eb937122887cebb9d627725fddbedbb204b3e42a1f13a0fdf8ec6b2e8b5770e68c489d973b3bc42b3cf5106c39b32d9ae21ae31c1df67f6a7fb54a6cbed57ac7cc8b975e56e5e2a51f8566d816e29b5086d4edb8ca2fc25d4e5fd5277954ba3fb3f967e8bf923fb0b3faaa0b92246ef8bb980b9fdc1f84049032f69e04e7c7bf78c74fe7d65318b5fd39c723b070762f252b50e4345fda8ebb95ab7def0940454dfd041054e52860fa1062e906b8f872be047901099e6478ca42af58774089b8a8899e5f1195bb51556d52feebee4f6d7648a4046e145130cfe92ffc7ac4bcdffd32d46cef06056db4c6fd6d48627be47bef261294c7e32f1c251b376322f96d6c839a20f904fd5131984734d484a216eb2c5e53bd005e4f917921b42a254830bf64bb4d43abde6eb0bf31d8539a74d76372c9339fd502e6d2bc2875e85dd6988e3b67b105e27ebf58969ead6a7e50649185629c739be5b457e493338536f326b4a7ac6a0be8501f08e104fea03f3e95dc78da6a84817109b19c59fe27b432dbc57f0ebcd4bec9659a190b80ab4c683d0996a08b0320ac9c459f9a205ed0c51e37213f5d0401e803a45f69b94833bcacfc6cbca7dc596bdb15f222bba26d9e6e9ffc6b046e862a110e7e248e4cd1d3909b53186aa768b9d3c4a109b51418182d281b0506f240f41c19f4fd6104ad4420dbf524307f7d8f5bff285c60f951f1f4a0b3cdb555a731e3d49f559eb7b996fe90515b95b6eacc788f2bf71e4e447b36a2d9d15d33d00eb755c09bd00c788c59cfb9b2b0a57865cb8a0e426b372b63d3df6793207cfd02af5239ba9a72a05dd9d8482919d1c97520aef5db9d920fbf3bf702a7ea195e55bbdcc94471f261e9f8da99d2cc7eabe6490c740f8f561125cade7a1015a548adadfec20993b1554e15f6a99b2cb25428491be485c955251435c9a1f5f771e5c6cc22ac78b002fa204bf325da098dc65f36637a86e20d03736fa563547b3a1b091fd6bffdb4e010655907aa9b4823f38abb43051d297613914b58ea3befbdc01eb60d8bc4ba258a483e5978ff3966cccfb0b2c472ed6a44f2911ddf057916a7dd8a6b62116219f2c3b0f819b5d753ba1ffc2583f7ccde40713e882fb16d2b723c22e5e129e20d9eb1f17e46de40728501dea185bc1595c9588a8ca425a2b7abe61a92877b8bceb310dec3067928e7602d1ed46d711dbc6b0dc95d7369221dce1aa7b9f62aaf223525aa67555565eb77aee635fd7d6f963a91a85c95e615775c1a96083e4d6229cae8883da7adafeba72f7f692738f2f087eddd505d5aa10e301481dfb992f047a689a5ba2b3e699356991db1b5dffde6f620d4f3a090e5f1dee66718677827214c994fe87fcdd9fdab25bbbc2fbd246912ec2ad916667006ed5825d44f85c876df509be1f9763e10695c6356a8ac238aeba9805f98d6033b4fcf730f1b7dbb2026f1eefeda86e2d28283f27c8d1db4d0b76162ac641d245d7dcb2e7a4a12449eb1d10c92a09959d5e54600c3ef963dfa26ccd90c844dd18166a11ad39fe6c0c3d9e9337fb1d5a51f4606e542efe775dcc0a7b09291bbcfcf194301bd290c28d653699e1bb8091f0dea46a9d2b01479f49e6bc88439b38935f92f03a6d0ce89e8239461620f468b8edd28a4a54ba9848e8d9dc8f0d1c829aded5681b924c2aa924e61c52579762b6a8451c277ba57240007e181a8621657c8e81276e7f527d15fcfeffa6dc56c0e91d728f3dc27f6ce39471777c9f8957321aa59247ec5c26f7ab727e2d4744218c52e3773095a18dbee8a151a3cd7f0e723d6367e10ce58af1dab379da53aa164ca9a8632ed96fd8bbe939696525356c1fddca159b27a42fec53511680d48ac4117e8380f34987489572ffd2af7cd905619f39b538c88a9bcc8426425510bbdb49d501753de468c5105b56a0713852aec4dfdd07248545201679f70a0ca47680f89ee156985b5f6eb694791f2cdcc263492490c2c8afb922117a58fe90e6379250e36d8d18863e6635240ad200587b1fd3675f7bb2b20d677379e6c61cf6af9b089db0b2bef2b417f169f18be398e9c94fa842b0ab8a26a7a5a26b148d6fec701cf76ce47736464bd0cf1784b8f54dbe46bab6e31312989209921d0551f77a8801b502ac34bb6b8b3f7679578402f165049d9b0162d9c4b60817830cf457b40833ebdf4e734efcc3fa63e802a3d361f9343b1029e9965be1ed857e37e16202c536c23985e896f9fab11b160ea7f73b9b22f700d0d5eb960ea69a8cbdf236d0ba0c07557f2fb38ab34a772c2c4be280ff9036dc3276e5c01ad77f6a469e19967fd6ed0f04d00660922b9c8021c04e86bc58d541d90b498f9949c3a5423926726fb19d849d01b21398d47e37e9c6d5c34fb8cb050ac706f24a93c3c742dd1db2cd0433d5b3aaa1395b237df4ffef28a39c8c9cddcc955fb5318d2803d337742aea97e412efdbbcd1b5e18c5ee36828a87fdfbfe79751842ee4de0a052db5bd5e069c29350137cdbae17ad36eac026e7a0556d71d2e4e70e614a02582dbaf2b75b81d59a9c27d185c14b6762f9d8325cd2086b5033dbdd5bc12b0f9539eef0aa45b06a6ba5dfc59034f766efcfad76ac934dfec64716234cde19633894345fc18c7fe166e3176876954f747ec208b614542f77f7f467c154e7c9e0de0f68fe608cda938a9fb1bd6be8bf400e8df6bc375b65d9102aa2c84364ce57ca310f65b02983aec6645128282151c49a654bf123be3fefb52cd659c5dd02cfac08d0a82b10d14ba3042ff2fdc0295fa74487b2fcc779ce14afa38ffd15fc52a87f19465a9ac3b7df37627e4be6bc6064720b009d7640f38a6db8f94def3204a8affd9afcaf9634d3cf02d8ffa6418d8ec158620cd317deba4f7c335253e6b61997b92b20972a30799dc10f298d77ea1a1666498e4b550500a555c93c001b7119abd0d6fa5da17e3a98a7404119ce1c88e1c942cb8fb05cd99cd6094fb1cd193644ee241f2cae9e298993ccdc00d581f8b1d4637512d559917d11b3b3d716c7a54e0883f79892ed6cde29578d938d0760094c9e1ef3cf8c962839177c8ac017248da416e88bc788726eb31167ee7580b8b4b0821f6358f3bbd3c20b89128bf9907988b8fcc47fb546a7280e04fa84749271c7f8b824143e0fca728cf3aa381f031126211af9364abe62b009981fcec554c48302b2202718d570ebfb78e083f7b4880572269890193c5b89d932db371682451d59cef73c4785804071fca9e27e02bb93338fdd165439f4fa90c9058bc505188a4465e861f80d42f2bd63415ff8284d8da9f838c99633fd6022e59a18e060502e5a5ef758a0f8afb1ea2f8ffa6f6f633c9e23355144acec18b2b7675f0404f76bd6c5759a20710d71a12e27022daeb3a38bbff6e770f5b94e9774ff3e79c07d806456ff04e32147bb8419b9a323414ff9f7e4ce5e3a3175eeca4b74f0afe7d20450aa368a8ed08892fff08152ae14ec14710f9e44bfd7d33b39a0d88709bc982f9d0d2b3b76aaae687cf6ceda6383fa70278492b89edec188de74b3eb46adf9cd5e7c80d34674602af36d677798f7642a342c35ceed7c2698141dc9a51d5c007929316588454512b44fb735aae31f53ed486aa042e04bb5723d3125088ac2896e90fb09ab2b04dd83f7a6c65833451f5fe4de28a0412f70c13ea41fa1c46b344d2b20382b5404ecf7ae11179ec1905dea2a0af52b2c70fa87b090701c8830c7c548723a140b9429206b059e1d799cbd228b6ef0a614bd331d9a2ea6121d4415fd31d614fce7164b828a979071582591547ac2f77e3f7cc887fd9ee7d52b040a92c586952a37d7087e3d7b198e27f4d5f7237d59d5b31764556e00c5024b5fe9508984e5f7d63ce886ef10b79f2c57c41c2636a019a755d305f61084d63b6dd0998e1a541e4ec718d8056934cb0fd35110b6e9440945b5287292e2e3e72f4da7e7499885288ac13f312226a8c33597e5b876edb01acfed6d21b9493ca93d55e64ca56d7edf52abbe4166e769450c9be9ab88893153698eb5e61c16748badf8c9211104064175b11b6b391e2817564c71a774c4b05168af8dc62a89492d2106adb7b921473cb1adb06b845a73ef1f43c4fb5526888f4d008ebaea709064239126018774cfe9b457aff180db8e9e3b6bd2bff569a0ab30e5766e6725b071d1a853ebb3721b9877ee2db3b78c9856458e40a9b5fad8d9d724efba36a4da1d921e5facbd98187947c08806839602f3b1ff02750f806b55ed8f8b7ffbee4f3060aad82972263a843aef11581eafb3a7178a66c87d5c798e50c3b5e3247a5ae4b2e2d7a1bbed73d2d9ce472862133491fc1c6119f6e8dc44ff5dfc78d2faaeb180cdc683c6a22926c47d56ea178823a02d37c50dd038251dbe13349cb51ad2aff205694727085c"}, @generic="838d0d821122fe4d47d3f3be9c492f8803c3467356c59ad8d94cf5977b64dd7e5f342d4c75f4f622596427886620ed9caa62fdb2a8b254f65ed1b4932b848560b0c9c3a942f00ae0af1410182418ed95a07d520a"]}, @typed={0x8, 0x25, 0x0, 0x0, @ipv4=@broadcast}, @generic="7df5a99d48087176de4327a920870d54891bef0ee36e01455bbfd4c254ba4f40eb1aae3e2c377ade23352aa82037c7fc344b247d536c381215168b5fa856f1ff52eb69a5790003770ef60685dfab211c2c4f1387b0655842f35e3d0881d888d9fb1f14c227ea3e24b628271580f1e66ceb9ddbdfb380e8e3ec898999db0944e9edb966bbd17b98834cfa9b5e5e0dfed1542825"]}, 0x1170}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:59:38 executing program 5: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2583.605369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25221 comm=syz-executor.6 [ 2583.623865] FAULT_INJECTION: forcing a failure. [ 2583.623865] name failslab, interval 1, probability 0, space 0, times 0 [ 2583.624939] CPU: 1 PID: 25223 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2583.625571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2583.626266] Call Trace: [ 2583.626546] dump_stack+0x107/0x167 [ 2583.626861] should_fail.cold+0x5/0xa [ 2583.627187] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2583.627709] ? create_object.isra.0+0x3a/0xa20 [ 2583.628101] should_failslab+0x5/0x20 [ 2583.628483] kmem_cache_alloc+0x5b/0x310 [ 2583.628839] ? mark_held_locks+0x9e/0xe0 [ 2583.629192] create_object.isra.0+0x3a/0xa20 [ 2583.629616] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2583.630054] kmem_cache_alloc_node+0x169/0x330 [ 2583.630493] __alloc_skb+0x6d/0x5b0 [ 2583.630822] skb_segment+0x9d8/0x3aa0 [ 2583.631145] ? lock_chain_count+0x20/0x20 [ 2583.631591] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2583.632019] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2583.632567] ? SOFTIRQ_verbose+0x10/0x10 [ 2583.632947] __udp_gso_segment+0x11c6/0x1830 [ 2583.633345] ? __sk_receive_skb+0x830/0x830 [ 2583.633778] udp4_ufo_fragment+0x528/0x720 [ 2583.634146] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2583.634617] inet_gso_segment+0x4fb/0x11a0 [ 2583.634993] skb_mac_gso_segment+0x273/0x570 [ 2583.635371] ? inet_sock_destruct+0x840/0x840 [ 2583.635813] ? skb_network_protocol+0x650/0x650 [ 2583.636214] ? skb_crc32c_csum_help+0x80/0x80 [ 2583.636673] ? lock_acquire+0x197/0x470 [ 2583.637012] ? __dev_queue_xmit+0x1c2/0x2710 [ 2583.637392] __skb_gso_segment+0x32d/0x6d0 [ 2583.637808] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2583.638255] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2583.638730] __dev_queue_xmit+0x87b/0x2710 [ 2583.639103] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2583.639552] ? mark_held_locks+0x9e/0xe0 [ 2583.639904] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2583.640372] neigh_connected_output+0x382/0x4d0 [ 2583.640864] ip_finish_output2+0x6f1/0x21f0 [ 2583.641236] ? nf_hook_slow+0xfc/0x1e0 [ 2583.641620] ? ip_frag_next+0x9e0/0x9e0 [ 2583.641960] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2583.642394] __ip_finish_output.part.0+0x5f3/0xb50 [ 2583.642867] ? ip_fragment.constprop.0+0x240/0x240 [ 2583.643282] ? nf_hook+0x510/0x510 [ 2583.643649] ip_output+0x2f7/0x600 [ 2583.643963] ip_send_skb+0xdd/0x260 [ 2583.644297] udp_send_skb+0x6da/0x11d0 [ 2583.644742] udp_sendmsg+0x139a/0x2160 [ 2583.645369] ? ip_frag_init+0x350/0x350 [ 2583.645822] ? lock_chain_count+0x20/0x20 [ 2583.646179] ? udp_setsockopt+0xc0/0xc0 [ 2583.646591] ? perf_trace_lock+0xac/0x490 [ 2583.646943] ? SOFTIRQ_verbose+0x10/0x10 [ 2583.647289] ? __lockdep_reset_lock+0x180/0x180 [ 2583.647736] ? __lockdep_reset_lock+0x180/0x180 [ 2583.648141] ? mark_lock+0xf5/0x2df0 [ 2583.648514] ? mark_lock+0xf5/0x2df0 [ 2583.648835] ? lock_chain_count+0x20/0x20 [ 2583.649192] ? lock_chain_count+0x20/0x20 [ 2583.649647] ? mark_lock+0xf5/0x2df0 [ 2583.649977] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2583.650342] ? udp_v6_push_pending_frames+0x360/0x360 [ 2583.650826] ? SOFTIRQ_verbose+0x10/0x10 [ 2583.651180] ? mark_lock+0xf5/0x2df0 [ 2583.651557] ? lock_acquire+0x197/0x470 [ 2583.651895] ? find_held_lock+0x2c/0x110 [ 2583.652263] ? __might_fault+0xd3/0x180 [ 2583.652667] ? lock_downgrade+0x6d0/0x6d0 [ 2583.653025] ? lock_downgrade+0x6d0/0x6d0 [ 2583.653383] ? sock_has_perm+0x1ea/0x280 [ 2583.653778] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2583.654225] ? _copy_from_user+0xfb/0x1b0 [ 2583.654670] ? __import_iovec+0x458/0x590 [ 2583.655025] ? udp_v6_push_pending_frames+0x360/0x360 [ 2583.655514] inet6_sendmsg+0x105/0x140 [ 2583.655850] ? inet6_compat_ioctl+0x320/0x320 [ 2583.656247] __sock_sendmsg+0xf2/0x190 [ 2583.656632] ____sys_sendmsg+0x70d/0x870 [ 2583.656984] ? sock_write_iter+0x3d0/0x3d0 [ 2583.657344] ? do_recvmmsg+0x6d0/0x6d0 [ 2583.657733] ? SOFTIRQ_verbose+0x10/0x10 [ 2583.658077] ? lock_downgrade+0x6d0/0x6d0 [ 2583.658436] ? __lockdep_reset_lock+0x180/0x180 [ 2583.658879] ? SOFTIRQ_verbose+0x10/0x10 [ 2583.659233] ___sys_sendmsg+0xf3/0x170 [ 2583.659644] ? sendmsg_copy_msghdr+0x160/0x160 [ 2583.660043] ? __fget_files+0x2cf/0x520 [ 2583.660394] ? lock_downgrade+0x6d0/0x6d0 [ 2583.660801] ? find_held_lock+0x2c/0x110 [ 2583.661162] ? __fget_files+0x2f8/0x520 [ 2583.661563] ? __fget_light+0xea/0x290 [ 2583.661906] __sys_sendmsg+0xe5/0x1b0 [ 2583.662232] ? __sys_sendmsg_sock+0x40/0x40 [ 2583.662647] ? rcu_read_lock_any_held+0x75/0xa0 [ 2583.663075] do_syscall_64+0x33/0x40 [ 2583.663396] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2583.663875] RIP: 0033:0x7fa05acd5b19 [ 2583.664207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2583.665861] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2583.666593] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2583.667374] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2583.668151] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2583.669033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2583.669772] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 12:59:57 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x0) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) 12:59:57 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 37) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 12:59:57 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) ftruncate(0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:59:57 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0xc0045878, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 12:59:57 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x0, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 12:59:57 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) 12:59:57 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:59:57 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x18d142, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimensat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={{r2, r3/1000+10000}, {r4, r5/1000+10000}}, 0x100) fallocate(r1, 0x3, 0x4077, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000005200210e000000000000e5ff38245261602595ea975e6c54481d74a170"], 0x14}}, 0x0) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x200, 0x70bd25, 0x25dfdbff, {0x1, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4) fallocate(r0, 0x10, 0x0, 0xfdef) [ 2603.179603] FAULT_INJECTION: forcing a failure. [ 2603.179603] name failslab, interval 1, probability 0, space 0, times 0 [ 2603.180629] CPU: 1 PID: 25545 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2603.181213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2603.181912] Call Trace: [ 2603.182148] dump_stack+0x107/0x167 [ 2603.182466] should_fail.cold+0x5/0xa [ 2603.182795] ? trace_hardirqs_on+0x5b/0x180 [ 2603.183167] ? __alloc_skb+0x6d/0x5b0 [ 2603.183500] should_failslab+0x5/0x20 [ 2603.183828] kmem_cache_alloc_node+0x55/0x330 [ 2603.184218] __alloc_skb+0x6d/0x5b0 [ 2603.184555] skb_segment+0x9d8/0x3aa0 [ 2603.184883] ? lock_chain_count+0x20/0x20 [ 2603.185281] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2603.185711] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2603.186157] ? SOFTIRQ_verbose+0x10/0x10 [ 2603.186513] __udp_gso_segment+0x11c6/0x1830 [ 2603.186887] ? __sk_receive_skb+0x830/0x830 [ 2603.187268] udp4_ufo_fragment+0x528/0x720 [ 2603.187637] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2603.188064] inet_gso_segment+0x4fb/0x11a0 [ 2603.188457] skb_mac_gso_segment+0x273/0x570 [ 2603.188834] ? inet_sock_destruct+0x840/0x840 [ 2603.189217] ? skb_network_protocol+0x650/0x650 [ 2603.189611] ? skb_crc32c_csum_help+0x80/0x80 [ 2603.189994] ? lock_acquire+0x197/0x470 [ 2603.190332] ? __dev_queue_xmit+0x1c2/0x2710 [ 2603.190716] __skb_gso_segment+0x32d/0x6d0 [ 2603.191086] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2603.191533] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2603.191927] __dev_queue_xmit+0x87b/0x2710 [ 2603.192308] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2603.192717] ? mark_held_locks+0x9e/0xe0 [ 2603.193072] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2603.193525] neigh_connected_output+0x382/0x4d0 [ 2603.193939] ip_finish_output2+0x6f1/0x21f0 [ 2603.194313] ? nf_hook_slow+0xfc/0x1e0 [ 2603.194650] ? ip_frag_next+0x9e0/0x9e0 [ 2603.194991] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2603.195429] __ip_finish_output.part.0+0x5f3/0xb50 [ 2603.195851] ? ip_fragment.constprop.0+0x240/0x240 [ 2603.196266] ? nf_hook+0x510/0x510 [ 2603.196605] ip_output+0x2f7/0x600 [ 2603.196918] ip_send_skb+0xdd/0x260 [ 2603.197237] udp_send_skb+0x6da/0x11d0 [ 2603.197586] udp_sendmsg+0x139a/0x2160 [ 2603.197919] ? mark_lock+0xf5/0x2df0 [ 2603.198243] ? ip_frag_init+0x350/0x350 [ 2603.198586] ? lock_chain_count+0x20/0x20 [ 2603.198948] ? udp_setsockopt+0xc0/0xc0 [ 2603.199288] ? mark_lock+0xf5/0x2df0 [ 2603.199613] ? __lockdep_reset_lock+0x180/0x180 [ 2603.200013] ? lock_chain_count+0x20/0x20 [ 2603.200386] ? mark_lock+0xf5/0x2df0 [ 2603.200711] ? mark_lock+0xf5/0x2df0 [ 2603.201033] ? lock_chain_count+0x20/0x20 [ 2603.201387] ? __lock_acquire+0xbb1/0x5b00 [ 2603.201754] ? lock_chain_count+0x20/0x20 [ 2603.202123] ? perf_trace_lock+0xac/0x490 [ 2603.202477] ? SOFTIRQ_verbose+0x10/0x10 [ 2603.202824] ? __lockdep_reset_lock+0x180/0x180 [ 2603.203235] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2603.203601] ? udp_v6_push_pending_frames+0x360/0x360 [ 2603.204040] ? SOFTIRQ_verbose+0x10/0x10 [ 2603.204410] ? mark_lock+0xf5/0x2df0 [ 2603.204738] ? lock_acquire+0x197/0x470 [ 2603.205077] ? find_held_lock+0x2c/0x110 [ 2603.205433] ? __might_fault+0xd3/0x180 [ 2603.205775] ? lock_downgrade+0x6d0/0x6d0 [ 2603.206138] ? lock_downgrade+0x6d0/0x6d0 [ 2603.206497] ? sock_has_perm+0x1ea/0x280 [ 2603.206846] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2603.207293] ? _copy_from_user+0xfb/0x1b0 [ 2603.207664] ? __import_iovec+0x458/0x590 [ 2603.208020] ? udp_v6_push_pending_frames+0x360/0x360 [ 2603.208481] inet6_sendmsg+0x105/0x140 [ 2603.208817] ? inet6_compat_ioctl+0x320/0x320 [ 2603.209200] __sock_sendmsg+0xf2/0x190 [ 2603.209537] ____sys_sendmsg+0x70d/0x870 [ 2603.209889] ? sock_write_iter+0x3d0/0x3d0 [ 2603.210250] ? do_recvmmsg+0x6d0/0x6d0 [ 2603.210591] ? SOFTIRQ_verbose+0x10/0x10 [ 2603.210937] ? lock_downgrade+0x6d0/0x6d0 [ 2603.211297] ? __lockdep_reset_lock+0x180/0x180 [ 2603.211693] ? SOFTIRQ_verbose+0x10/0x10 12:59:57 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2603.212049] ___sys_sendmsg+0xf3/0x170 [ 2603.212401] ? sendmsg_copy_msghdr+0x160/0x160 [ 2603.212800] ? __fget_files+0x2cf/0x520 [ 2603.216415] ? lock_downgrade+0x6d0/0x6d0 [ 2603.216928] ? find_held_lock+0x2c/0x110 [ 2603.217312] ? __fget_files+0x2f8/0x520 [ 2603.218083] ? __fget_light+0xea/0x290 [ 2603.218582] __sys_sendmsg+0xe5/0x1b0 [ 2603.218942] ? __sys_sendmsg_sock+0x40/0x40 [ 2603.219327] ? rcu_read_lock_any_held+0x75/0xa0 [ 2603.220154] do_syscall_64+0x33/0x40 [ 2603.220675] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2603.221129] RIP: 0033:0x7fa05acd5b19 [ 2603.221858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2603.224043] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2603.225251] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2603.231840] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2603.233526] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2603.234155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2603.235279] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 [ 2603.294865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=25551 comm=syz-executor.6 12:59:58 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) ftruncate(0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:59:58 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x9, 0x8001, 0x72, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x700, 0x2, 0x7}}) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x3491, 0x0, 0x0, 0x0, 0x0) 12:59:58 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0xc0189436, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 12:59:58 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x0, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 12:59:58 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4200, 0x5) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r1}, 0x0, &(0x7f0000000040), 0x5, 0x1, [0x9000000000000, 0x8, 0xffffffffffffffff, 0x5]}) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 12:59:58 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 38) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 12:59:58 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:59:58 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000280)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001000018000000c28500002b027a232e6db6bd5031d5d64793119b72926d53f504cc92f5c0bfd279e40c6a8cd3e4a99521915e1e364c31957520618399bf479a0e6b6f6f847631436f020041cc57b01e84fbc9acd102a219442d6a8e1917047dd04265ab481b6e16fce25a4f3ba41dbb9d957be6a133a2e4d3c700090e1bbb24f92760a85cf9a04fc39a3f5e3e2fd48b02c6be4f4a21c6057506a3743337", 0xf7, 0x400}], 0x200002, &(0x7f0000000040)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7f}}, {@grpid}, {@jqfmt_vfsold}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}) 12:59:58 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2603.676743] FAULT_INJECTION: forcing a failure. [ 2603.676743] name failslab, interval 1, probability 0, space 0, times 0 [ 2603.678174] CPU: 1 PID: 25885 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2603.678868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2603.679699] Call Trace: [ 2603.679982] dump_stack+0x107/0x167 [ 2603.680367] should_fail.cold+0x5/0xa [ 2603.680759] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2603.681288] ? create_object.isra.0+0x3a/0xa20 [ 2603.681852] should_failslab+0x5/0x20 [ 2603.682236] kmem_cache_alloc+0x5b/0x310 [ 2603.682652] ? mark_held_locks+0x9e/0xe0 [ 2603.683061] create_object.isra.0+0x3a/0xa20 [ 2603.683496] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2603.684007] kmem_cache_alloc_node+0x169/0x330 [ 2603.684487] __alloc_skb+0x6d/0x5b0 [ 2603.684869] skb_segment+0x9d8/0x3aa0 [ 2603.685318] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2603.685926] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2603.686452] ? SOFTIRQ_verbose+0x10/0x10 [ 2603.686877] __udp_gso_segment+0x11c6/0x1830 [ 2603.687319] ? __sk_receive_skb+0x830/0x830 [ 2603.687769] udp4_ufo_fragment+0x528/0x720 [ 2603.688196] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2603.688712] inet_gso_segment+0x4fb/0x11a0 [ 2603.689159] skb_mac_gso_segment+0x273/0x570 [ 2603.689700] ? inet_sock_destruct+0x840/0x840 [ 2603.690150] ? skb_network_protocol+0x650/0x650 [ 2603.690620] ? skb_crc32c_csum_help+0x80/0x80 [ 2603.691082] ? lock_acquire+0x197/0x470 [ 2603.691475] ? __dev_queue_xmit+0x1c2/0x2710 [ 2603.691923] __skb_gso_segment+0x32d/0x6d0 [ 2603.692363] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2603.692882] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2603.693338] __dev_queue_xmit+0x87b/0x2710 [ 2603.693877] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2603.694347] ? mark_held_locks+0x9e/0xe0 [ 2603.694761] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2603.695291] neigh_connected_output+0x382/0x4d0 [ 2603.695789] ip_finish_output2+0x6f1/0x21f0 [ 2603.696224] ? nf_hook_slow+0xfc/0x1e0 [ 2603.696627] ? ip_frag_next+0x9e0/0x9e0 [ 2603.697027] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2603.697636] __ip_finish_output.part.0+0x5f3/0xb50 [ 2603.698137] ? ip_fragment.constprop.0+0x240/0x240 [ 2603.698613] ? nf_hook+0x510/0x510 [ 2603.698980] ip_output+0x2f7/0x600 [ 2603.699331] ip_send_skb+0xdd/0x260 [ 2603.699690] udp_send_skb+0x6da/0x11d0 [ 2603.700076] udp_sendmsg+0x139a/0x2160 [ 2603.700461] ? mark_lock+0xf5/0x2df0 [ 2603.700812] ? ip_frag_init+0x350/0x350 [ 2603.701175] ? lock_chain_count+0x20/0x20 [ 2603.701772] ? udp_setsockopt+0xc0/0xc0 [ 2603.702166] ? mark_lock+0xf5/0x2df0 [ 2603.702538] ? __lockdep_reset_lock+0x180/0x180 [ 2603.703009] ? lock_chain_count+0x20/0x20 [ 2603.703432] ? mark_lock+0xf5/0x2df0 [ 2603.703819] ? mark_lock+0xf5/0x2df0 [ 2603.704197] ? lock_chain_count+0x20/0x20 [ 2603.705071] ? __lock_acquire+0xbb1/0x5b00 [ 2603.705605] ? lock_chain_count+0x20/0x20 [ 2603.706039] ? perf_trace_lock+0xac/0x490 [ 2603.706451] ? SOFTIRQ_verbose+0x10/0x10 [ 2603.706868] ? __lockdep_reset_lock+0x180/0x180 [ 2603.707356] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2603.707785] ? udp_v6_push_pending_frames+0x360/0x360 [ 2603.708323] ? SOFTIRQ_verbose+0x10/0x10 [ 2603.708711] ? mark_lock+0xf5/0x2df0 [ 2603.709060] ? lock_acquire+0x197/0x470 [ 2603.709421] ? find_held_lock+0x2c/0x110 [ 2603.709995] ? __might_fault+0xd3/0x180 [ 2603.710400] ? lock_downgrade+0x6d0/0x6d0 [ 2603.710843] ? lock_downgrade+0x6d0/0x6d0 [ 2603.711248] ? sock_has_perm+0x1ea/0x280 [ 2603.711656] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2603.712181] ? _copy_from_user+0xfb/0x1b0 [ 2603.712610] ? __import_iovec+0x458/0x590 [ 2603.712987] ? udp_v6_push_pending_frames+0x360/0x360 [ 2603.713621] inet6_sendmsg+0x105/0x140 [ 2603.714354] ? inet6_compat_ioctl+0x320/0x320 [ 2603.715716] __sock_sendmsg+0xf2/0x190 [ 2603.716559] ____sys_sendmsg+0x70d/0x870 [ 2603.717317] ? sock_write_iter+0x3d0/0x3d0 [ 2603.718195] ? do_recvmmsg+0x6d0/0x6d0 [ 2603.718984] ? SOFTIRQ_verbose+0x10/0x10 [ 2603.719792] ? lock_downgrade+0x6d0/0x6d0 [ 2603.720483] ? __lockdep_reset_lock+0x180/0x180 [ 2603.720910] ? SOFTIRQ_verbose+0x10/0x10 [ 2603.721283] ___sys_sendmsg+0xf3/0x170 [ 2603.721696] ? sendmsg_copy_msghdr+0x160/0x160 [ 2603.722117] ? __fget_files+0x2cf/0x520 [ 2603.722563] ? lock_downgrade+0x6d0/0x6d0 [ 2603.722941] ? find_held_lock+0x2c/0x110 [ 2603.723325] ? __fget_files+0x2f8/0x520 [ 2603.723751] ? __fget_light+0xea/0x290 [ 2603.724118] __sys_sendmsg+0xe5/0x1b0 [ 2603.724535] ? __sys_sendmsg_sock+0x40/0x40 [ 2603.724924] ? rcu_read_lock_any_held+0x75/0xa0 [ 2603.725380] do_syscall_64+0x33/0x40 [ 2603.725770] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2603.726227] RIP: 0033:0x7fa05acd5b19 [ 2603.726647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2603.728309] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2603.729039] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2603.729773] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2603.730582] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2603.731343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2603.732179] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 12:59:58 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0xc020660b, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 12:59:58 executing program 6: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) socket$inet(0xa, 0x3, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffd}, 0x2188932d843071f3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x20d315) 12:59:58 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:59:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0000, 0x41) clone3(&(0x7f00000008c0)={0x400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x2, 0xaa) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) flistxattr(r4, &(0x7f0000000940)=""/4096, 0x1000) 12:59:58 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:59:58 executing program 4: prctl$PR_GET_FP_MODE(0x2e) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x1, 0x6, @link_local}, 0x14) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000001c0)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0xfffffffffffffffc) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x2, 0x4) socket$inet(0x2, 0x2, 0x9) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/connector\x00') fgetxattr(r2, &(0x7f0000000100)=@known='security.apparmor\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000000, 0xffffffff}, 0x50102, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x81, @local, 0x80000001}, 0x1c) 13:00:18 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:00:18 executing program 6: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, 0x52, 0xe21, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x88d1}, 0x10) ftruncate(r0, 0x8800000) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/200, 0x20000148}], 0x1, 0x0, 0x0) 13:00:18 executing program 4: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0, 0xffffffffffffffff}, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r3, 0x7, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) setxattr$security_selinux(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000500), &(0x7f0000000540)='system_u:object_r:etc_aliases_t:s0\x00', 0x23, 0x3) r6 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r6, 0x0, r6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000300)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001740)=',', 0x1}], 0x1, &(0x7f0000002040)=[@rights={{0x10}}], 0x10}}], 0x2, 0x0) mmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3000008, 0x12, r4, 0x3b825000) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r5, r3, 0x0, 0x7ffffff9) 13:00:18 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:00:18 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:00:18 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$DVD_WRITE_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000940)=@bca={0x3, 0xbc, "d621459bb46b69e40730132d4ab4bd93ee592ee5c328884d3c755dc6854b58eaf0bf9f3428c514fdaa77f7ee5214c5cb9784c31484f3c198c8634eea665d1013214ace4f665d681a7b1d6ed98f9ec8b35c15c11afb5dcc5059aa67dde3e5f55e310fd3ce615eaa25f514d486a99f2c919b556362298094c8f8ff9de76e1c0bb71bbac1a6958133669474863d86e01ff8958596158dde1b7000436650ee330a5c67bb9d607683e299261adcf0db15e954c254cfed5048cb220522c6eb"}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:00:18 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:00:18 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 39) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) [ 2623.814620] FAULT_INJECTION: forcing a failure. [ 2623.814620] name failslab, interval 1, probability 0, space 0, times 0 [ 2623.816462] CPU: 0 PID: 26425 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2623.817964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2623.819798] Call Trace: [ 2623.820365] dump_stack+0x107/0x167 [ 2623.821207] should_fail.cold+0x5/0xa [ 2623.822033] should_failslab+0x5/0x20 [ 2623.822864] __kmalloc_node_track_caller+0x74/0x3b0 [ 2623.823938] ? skb_segment+0x9d8/0x3aa0 [ 2623.824860] __alloc_skb+0xb1/0x5b0 [ 2623.825659] skb_segment+0x9d8/0x3aa0 [ 2623.826560] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2623.827640] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2623.828815] ? SOFTIRQ_verbose+0x10/0x10 [ 2623.829697] __udp_gso_segment+0x11c6/0x1830 [ 2623.830663] ? __sk_receive_skb+0x830/0x830 [ 2623.831599] udp4_ufo_fragment+0x528/0x720 [ 2623.832555] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2623.833650] inet_gso_segment+0x4fb/0x11a0 [ 2623.834584] skb_mac_gso_segment+0x273/0x570 [ 2623.835523] ? inet_sock_destruct+0x840/0x840 [ 2623.836512] ? skb_network_protocol+0x650/0x650 [ 2623.837524] ? skb_crc32c_csum_help+0x80/0x80 [ 2623.838489] ? lock_acquire+0x197/0x470 [ 2623.839344] ? __dev_queue_xmit+0x1c2/0x2710 [ 2623.840300] __skb_gso_segment+0x32d/0x6d0 [ 2623.841305] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2623.842470] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2623.843463] __dev_queue_xmit+0x87b/0x2710 [ 2623.844394] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2623.845439] ? mark_held_locks+0x9e/0xe0 [ 2623.846326] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2623.847453] neigh_connected_output+0x382/0x4d0 [ 2623.848498] ip_finish_output2+0x6f1/0x21f0 [ 2623.849457] ? nf_hook_slow+0xfc/0x1e0 [ 2623.850299] ? ip_frag_next+0x9e0/0x9e0 [ 2623.851144] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2623.852236] __ip_finish_output.part.0+0x5f3/0xb50 [ 2623.853337] ? ip_fragment.constprop.0+0x240/0x240 [ 2623.854398] ? nf_hook+0x510/0x510 [ 2623.855182] ip_output+0x2f7/0x600 [ 2623.855957] ip_send_skb+0xdd/0x260 [ 2623.856812] udp_send_skb+0x6da/0x11d0 [ 2623.857783] udp_sendmsg+0x139a/0x2160 [ 2623.858661] ? tracing_generic_entry_update+0x1ed/0x270 [ 2623.859897] ? ip_frag_init+0x350/0x350 [ 2623.860819] ? tracing_generic_entry_update+0x1ed/0x270 [ 2623.862074] ? udp_setsockopt+0xc0/0xc0 [ 2623.862997] ? perf_event_switch_output+0x7d0/0x7d0 [ 2623.864234] ? lock_chain_count+0x20/0x20 [ 2623.865231] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2623.866397] ? lock_chain_count+0x20/0x20 [ 2623.867342] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2623.868537] ? perf_trace_lock+0x2bd/0x490 [ 2623.869513] ? perf_swevent_event+0x6c/0x550 [ 2623.870520] ? __lockdep_reset_lock+0x180/0x180 [ 2623.871628] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2623.872611] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2623.873751] ? udp_v6_push_pending_frames+0x360/0x360 [ 2623.874858] ? SOFTIRQ_verbose+0x10/0x10 [ 2623.875750] ? lock_acquire+0x197/0x470 [ 2623.876652] ? find_held_lock+0x2c/0x110 [ 2623.877616] ? __might_fault+0xd3/0x180 [ 2623.878475] ? lock_downgrade+0x6d0/0x6d0 [ 2623.879364] ? lock_downgrade+0x6d0/0x6d0 [ 2623.880271] ? sock_has_perm+0x1ea/0x280 [ 2623.881197] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2623.882316] ? _copy_from_user+0xfb/0x1b0 [ 2623.883222] ? __import_iovec+0x458/0x590 [ 2623.884119] ? udp_v6_push_pending_frames+0x360/0x360 [ 2623.885308] inet6_sendmsg+0x105/0x140 [ 2623.886150] ? inet6_compat_ioctl+0x320/0x320 [ 2623.887103] __sock_sendmsg+0xf2/0x190 [ 2623.887941] ____sys_sendmsg+0x70d/0x870 [ 2623.888874] ? sock_write_iter+0x3d0/0x3d0 [ 2623.889795] ? do_recvmmsg+0x6d0/0x6d0 [ 2623.890623] ? perf_trace_lock+0x2bd/0x490 [ 2623.891542] ? SOFTIRQ_verbose+0x10/0x10 [ 2623.892411] ? __lockdep_reset_lock+0x180/0x180 [ 2623.893484] ___sys_sendmsg+0xf3/0x170 [ 2623.894320] ? sendmsg_copy_msghdr+0x160/0x160 [ 2623.895323] ? __fget_files+0x2cf/0x520 [ 2623.896174] ? lock_downgrade+0x6d0/0x6d0 [ 2623.897127] ? find_held_lock+0x2c/0x110 [ 2623.898015] ? __fget_files+0x2f8/0x520 [ 2623.898893] ? __fget_light+0xea/0x290 [ 2623.899750] __sys_sendmsg+0xe5/0x1b0 [ 2623.900615] ? __sys_sendmsg_sock+0x40/0x40 [ 2623.901550] ? rcu_read_lock_any_held+0x75/0xa0 [ 2623.902595] do_syscall_64+0x33/0x40 [ 2623.903392] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2623.904522] RIP: 0033:0x7fa05acd5b19 [ 2623.905348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2623.909356] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2623.910978] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2623.912543] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2623.914091] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2623.915638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2623.917241] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:00:38 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:00:38 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:00:38 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c0b00000000e4480723461bdfbc70000000f10000c7a5e7ec396c2c411e0457307a24cba99d577d1fa88e76f5874c21ffd449d886340e0457", @ANYRES32=r3], 0x38}}], 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x8001}, 0x8) r4 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000008c0)={r5, 0x5, 0x80000001}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000400)={r5, "4fcef3b4591d6c0969f53eaef45b6b68"}) 13:00:38 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x2}, 0xa90}) 13:00:38 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:00:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a0870925cdb5d80eb689f80ea6ff07d3876a48c6519dad01907103c1df3928cb15b27437eb6e9", 0x91, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) 13:00:38 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 40) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:00:38 executing program 1: r0 = clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r3 = syz_open_procfs(r0, &(0x7f0000000100)='net/vlan/vlan0\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040080}, 0x808) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) [ 2644.171882] FAULT_INJECTION: forcing a failure. [ 2644.171882] name failslab, interval 1, probability 0, space 0, times 0 [ 2644.176959] CPU: 1 PID: 26746 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2644.177556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2644.178260] Call Trace: [ 2644.178500] dump_stack+0x107/0x167 [ 2644.178826] should_fail.cold+0x5/0xa [ 2644.179167] ? create_object.isra.0+0x3a/0xa20 [ 2644.179571] should_failslab+0x5/0x20 [ 2644.179908] kmem_cache_alloc+0x5b/0x310 [ 2644.180275] create_object.isra.0+0x3a/0xa20 [ 2644.183260] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2644.183709] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2644.184149] ? skb_segment+0x9d8/0x3aa0 [ 2644.184506] __alloc_skb+0xb1/0x5b0 [ 2644.185627] skb_segment+0x9d8/0x3aa0 [ 2644.185960] ? lock_chain_count+0x20/0x20 [ 2644.186370] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2644.186810] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2644.187262] ? SOFTIRQ_verbose+0x10/0x10 [ 2644.187629] __udp_gso_segment+0x11c6/0x1830 [ 2644.188013] ? __sk_receive_skb+0x830/0x830 [ 2644.188403] udp4_ufo_fragment+0x528/0x720 [ 2644.189263] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2644.189805] inet_gso_segment+0x4fb/0x11a0 [ 2644.190486] skb_mac_gso_segment+0x273/0x570 [ 2644.190872] ? inet_sock_destruct+0x840/0x840 [ 2644.191565] ? skb_network_protocol+0x650/0x650 [ 2644.191967] ? skb_crc32c_csum_help+0x80/0x80 [ 2644.192666] ? lock_acquire+0x197/0x470 [ 2644.193018] ? __dev_queue_xmit+0x1c2/0x2710 [ 2644.193677] __skb_gso_segment+0x32d/0x6d0 [ 2644.194057] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2644.194839] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2644.195244] __dev_queue_xmit+0x87b/0x2710 [ 2644.195997] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2644.196491] ? mark_held_locks+0x9e/0xe0 [ 2644.197148] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2644.197668] neigh_connected_output+0x382/0x4d0 [ 2644.198357] ip_finish_output2+0x6f1/0x21f0 [ 2644.198793] ? nf_hook_slow+0xfc/0x1e0 [ 2644.199517] ? ip_frag_next+0x9e0/0x9e0 [ 2644.199867] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2644.200855] __ip_finish_output.part.0+0x5f3/0xb50 [ 2644.201620] ? ip_fragment.constprop.0+0x240/0x240 [ 2644.202045] ? nf_hook+0x510/0x510 [ 2644.202663] ip_output+0x2f7/0x600 [ 2644.202989] ip_send_skb+0xdd/0x260 [ 2644.203577] udp_send_skb+0x6da/0x11d0 [ 2644.203945] udp_sendmsg+0x139a/0x2160 [ 2644.204289] ? mark_lock+0xf5/0x2df0 [ 2644.216911] ? ip_frag_init+0x350/0x350 [ 2644.217272] ? lock_chain_count+0x20/0x20 [ 2644.217677] ? udp_setsockopt+0xc0/0xc0 [ 2644.218045] ? mark_lock+0xf5/0x2df0 [ 2644.218394] ? __lockdep_reset_lock+0x180/0x180 [ 2644.218828] ? lock_chain_count+0x20/0x20 [ 2644.219213] ? mark_lock+0xf5/0x2df0 [ 2644.219571] ? mark_lock+0xf5/0x2df0 [ 2644.219925] ? lock_chain_count+0x20/0x20 [ 2644.220313] ? __lock_acquire+0xbb1/0x5b00 [ 2644.220735] ? lock_chain_count+0x20/0x20 [ 2644.221143] ? perf_trace_lock+0xac/0x490 [ 2644.221536] ? SOFTIRQ_verbose+0x10/0x10 [ 2644.221915] ? __lockdep_reset_lock+0x180/0x180 [ 2644.222358] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2644.222773] ? udp_v6_push_pending_frames+0x360/0x360 [ 2644.223249] ? SOFTIRQ_verbose+0x10/0x10 [ 2644.223636] ? mark_lock+0xf5/0x2df0 [ 2644.223999] ? lock_acquire+0x197/0x470 [ 2644.224372] ? find_held_lock+0x2c/0x110 [ 2644.224807] ? __might_fault+0xd3/0x180 [ 2644.225187] ? lock_downgrade+0x6d0/0x6d0 [ 2644.225583] ? lock_downgrade+0x6d0/0x6d0 [ 2644.225984] ? sock_has_perm+0x1ea/0x280 [ 2644.226368] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2644.226844] ? _copy_from_user+0xfb/0x1b0 [ 2644.227254] ? __import_iovec+0x458/0x590 [ 2644.227636] ? udp_v6_push_pending_frames+0x360/0x360 [ 2644.228117] inet6_sendmsg+0x105/0x140 [ 2644.228494] ? inet6_compat_ioctl+0x320/0x320 [ 2644.228937] __sock_sendmsg+0xf2/0x190 [ 2644.229308] ____sys_sendmsg+0x70d/0x870 [ 2644.229706] ? sock_write_iter+0x3d0/0x3d0 [ 2644.230098] ? do_recvmmsg+0x6d0/0x6d0 [ 2644.230473] ? SOFTIRQ_verbose+0x10/0x10 [ 2644.230848] ? lock_downgrade+0x6d0/0x6d0 [ 2644.231240] ? __lockdep_reset_lock+0x180/0x180 [ 2644.231674] ? SOFTIRQ_verbose+0x10/0x10 [ 2644.232063] ___sys_sendmsg+0xf3/0x170 [ 2644.232437] ? sendmsg_copy_msghdr+0x160/0x160 [ 2644.232900] ? __fget_files+0x2cf/0x520 [ 2644.233276] ? lock_downgrade+0x6d0/0x6d0 [ 2644.233670] ? find_held_lock+0x2c/0x110 [ 2644.234072] ? __fget_files+0x2f8/0x520 [ 2644.234464] ? __fget_light+0xea/0x290 [ 2644.234850] __sys_sendmsg+0xe5/0x1b0 [ 2644.235211] ? __sys_sendmsg_sock+0x40/0x40 [ 2644.235620] ? rcu_read_lock_any_held+0x75/0xa0 [ 2644.236097] do_syscall_64+0x33/0x40 [ 2644.236448] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2644.236965] RIP: 0033:0x7fa05acd5b19 [ 2644.237375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2644.239035] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2644.239736] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2644.240383] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2644.241074] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2644.241737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2644.242396] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:00:38 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:00:39 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) writev(r2, &(0x7f0000001240)=[{&(0x7f0000000f80)="82", 0x1}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="42cf749f024caa05f68abe2698f29ff2f26247cdb37b38f252505995dfc7c5d03db6aea9c58807a926365cc287bb5c6c1a322a4e160b7af4b0d47f4c7ed2d451b1f5", 0x42}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000000240)="35ef1b5af0ea96f913a54aae8d20e68dc2a310116aa888e0a6be38cd968cc733e2769aea97a3ac01af93ceb88bddf2c8df35b1ef301220e388a703f7db559154c823f9b29d3d0d725b11bf2b039ea8234fe2edf0643fb54f557485f377d044b5563fdbf72966e9f59019b7cf3cbba15ae63533fc546144bda5b175fbe62c34e3f0b5a1f8183f92fe132ba39186a1d40a65e3aa592f87f11fb78f583094fd2efce1d967521b40be2c52b1f98786697cf1245282182e0ecc3405c94e1107fb7f", 0xbf}, {&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000000300)="e4de6426691fdc3cb2e7bb6b6c781ab732c8f631a4ab6a1e13c7fa02195d3b0cd69c12fd559abddea15ea02f458b051f7f18ecfedf9e3c7d6e52a87a79b62b9bb7bcbe0b545acd8fb9f70b5e91450d0407b79c777fe700696e62caf46e854d3858f2d1e5ec9cf054", 0x68}, {&(0x7f0000003280)="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", 0x1000}, {&(0x7f0000000380)="d4ab76aa7895f7d93544bfbf520deb5ff522f95b42dd89cda56f6c52894c3e182666d4a1f1840fd578f5168d4e8861331a5e50de983becef821d05817fbd0af51ce9f6f1a494c869414769112e80b140203dcd9b5f1b259e8104ef2a6142ab17b19d75d33d25667869c47b547e529d69f92e880f8f32d02db84146e123e018684604ad6c7bb40bb1d7d8240aa93891ef64f65c69416fdaf24406c236bbcfd19f358fed04ba5ccfae276a01cb72f844782635585061c144e6ae12f2e1f73d88ef", 0xc0}, {&(0x7f0000000440)="7d4810131239d0a672156a0a83b6f7c0ccc5a210b5a6b7ff337f9b263f7c73305c392ce4e00d0e9d89ba4c33c3ba2a5cfeb8b6ce9ca62e5d67a4db0fff1891d2c80b8920324cf3697357242f3811bfd5ed0e1811d7b70432cf1bab2a77abbeafdd5915a2451616fcbd27cad855ce48d2702b66297e05a3e4d003dbb9fc90ea428969b080587191479cb9ae5687c1c23a1dc437ad0712bb0f59e97a0c140edbf59d8fe5777bbd3736e2c497cbfcebdab796fb6d1e5c655d87a0edb4c47cb16e5ead6a52e5dffe83c82dd1671eb4136f45aebc2244f290", 0xd6}], 0x8, 0xffffffff, 0x38) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x7f820000, 0x4000006}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) flistxattr(r4, &(0x7f0000000680)=""/101, 0x65) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x28) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000140)={0x0, 0x4, 0x9, 0x2252ab33}) 13:00:39 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 41) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:00:39 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:00:39 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005200210e0000005721fe1a18000000000000000000"], 0x14}}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x8940) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x2404c805) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:00:39 executing program 4: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x4, @dev, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @initdev}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000500)="fd69d8e7b17297154c4d070fa7134871e890b9734fbfb4a8b1c993e010afc9daca28474c37c68546a5f8dc2a", 0x2c, 0x24008050, 0x3}, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000140)={0xfffffffffffffffd, 0x100000000}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0100000000000000000043b02549bb8f1ed8f5ca0bd876ecb51586c84669b241707695ac8faef4d9234ab3419f5724aff8c8ddb0ada2785718dc3ad62b98c85072dc8e824753940136b21d54180d786e8e4e0fc6274218dad3c7978c98623f24fe7623bbc7ea81e301d4701ad4281c5b32a7c75622c0a3d3417088735a82e5db63a62c45f9e1467d"]) execveat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='+^\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='\xff\xff', &(0x7f0000000340)='\xff\xff', &(0x7f0000000380)=']$/s/)^%/\x00', &(0x7f00000003c0)='\xff\xff'], &(0x7f0000000480)=[&(0x7f0000000440)='+\x00'], 0x100) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, {0x80}, 0x1}, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000140)) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="000018005200216d8e17a500"], 0x14}}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x2007, @fd, 0x8001, 0x0, 0x0, 0xc, 0x0, {0x1, r3}}, 0x81) 13:00:39 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x3}, 0xa90}) 13:00:39 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2645.170298] FAULT_INJECTION: forcing a failure. [ 2645.170298] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.172341] CPU: 1 PID: 26991 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2645.173253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2645.174048] Call Trace: [ 2645.174314] dump_stack+0x107/0x167 [ 2645.174681] should_fail.cold+0x5/0xa [ 2645.175070] should_failslab+0x5/0x20 [ 2645.175456] __kmalloc_node_track_caller+0x74/0x3b0 [ 2645.175938] ? skb_segment+0x9d8/0x3aa0 [ 2645.176341] __alloc_skb+0xb1/0x5b0 [ 2645.176718] skb_segment+0x9d8/0x3aa0 [ 2645.177068] ? lock_chain_count+0x20/0x20 [ 2645.177483] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2645.177923] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2645.178381] ? SOFTIRQ_verbose+0x10/0x10 [ 2645.178749] __udp_gso_segment+0x11c6/0x1830 [ 2645.179135] ? __sk_receive_skb+0x830/0x830 [ 2645.179528] udp4_ufo_fragment+0x528/0x720 [ 2645.179906] ? skb_udp_tunnel_segment+0x1db0/0x1db0 13:00:39 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) [ 2645.180345] inet_gso_segment+0x4fb/0x11a0 [ 2645.184784] skb_mac_gso_segment+0x273/0x570 [ 2645.185171] ? inet_sock_destruct+0x840/0x840 [ 2645.185562] ? skb_network_protocol+0x650/0x650 [ 2645.185964] ? skb_crc32c_csum_help+0x80/0x80 [ 2645.186357] ? lock_acquire+0x197/0x470 [ 2645.186701] ? __dev_queue_xmit+0x1c2/0x2710 [ 2645.187093] __skb_gso_segment+0x32d/0x6d0 [ 2645.187472] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2645.187929] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2645.188333] __dev_queue_xmit+0x87b/0x2710 [ 2645.188736] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2645.189153] ? mark_held_locks+0x9e/0xe0 [ 2645.189518] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2645.189983] neigh_connected_output+0x382/0x4d0 [ 2645.190411] ip_finish_output2+0x6f1/0x21f0 [ 2645.190794] ? nf_hook_slow+0xfc/0x1e0 [ 2645.191139] ? ip_frag_next+0x9e0/0x9e0 [ 2645.191495] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2645.191943] __ip_finish_output.part.0+0x5f3/0xb50 [ 2645.192377] ? ip_fragment.constprop.0+0x240/0x240 [ 2645.192823] ? nf_hook+0x510/0x510 [ 2645.193153] ip_output+0x2f7/0x600 [ 2645.196853] ip_send_skb+0xdd/0x260 [ 2645.197179] udp_send_skb+0x6da/0x11d0 [ 2645.197544] udp_sendmsg+0x139a/0x2160 [ 2645.197883] ? mark_lock+0xf5/0x2df0 [ 2645.198214] ? ip_frag_init+0x350/0x350 [ 2645.198564] ? lock_chain_count+0x20/0x20 [ 2645.198933] ? udp_setsockopt+0xc0/0xc0 [ 2645.199277] ? mark_lock+0xf5/0x2df0 [ 2645.199609] ? __lockdep_reset_lock+0x180/0x180 [ 2645.200015] ? lock_chain_count+0x20/0x20 [ 2645.200383] ? mark_lock+0xf5/0x2df0 [ 2645.200730] ? mark_lock+0xf5/0x2df0 [ 2645.201072] ? lock_chain_count+0x20/0x20 [ 2645.201437] ? __lock_acquire+0xbb1/0x5b00 [ 2645.201810] ? lock_chain_count+0x20/0x20 [ 2645.202190] ? perf_trace_lock+0xac/0x490 [ 2645.202559] ? SOFTIRQ_verbose+0x10/0x10 [ 2645.202913] ? __lockdep_reset_lock+0x180/0x180 [ 2645.203333] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2645.203712] ? udp_v6_push_pending_frames+0x360/0x360 [ 2645.204159] ? SOFTIRQ_verbose+0x10/0x10 [ 2645.204526] ? mark_lock+0xf5/0x2df0 [ 2645.208888] ? lock_acquire+0x197/0x470 [ 2645.209236] ? find_held_lock+0x2c/0x110 [ 2645.209601] ? __might_fault+0xd3/0x180 [ 2645.209950] ? lock_downgrade+0x6d0/0x6d0 [ 2645.210318] ? lock_downgrade+0x6d0/0x6d0 [ 2645.210686] ? sock_has_perm+0x1ea/0x280 [ 2645.211042] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2645.211495] ? _copy_from_user+0xfb/0x1b0 [ 2645.211877] ? __import_iovec+0x458/0x590 [ 2645.212239] ? udp_v6_push_pending_frames+0x360/0x360 [ 2645.212739] inet6_sendmsg+0x105/0x140 [ 2645.213083] ? inet6_compat_ioctl+0x320/0x320 [ 2645.213479] __sock_sendmsg+0xf2/0x190 [ 2645.213824] ____sys_sendmsg+0x70d/0x870 [ 2645.214184] ? sock_write_iter+0x3d0/0x3d0 [ 2645.214558] ? do_recvmmsg+0x6d0/0x6d0 [ 2645.214904] ? SOFTIRQ_verbose+0x10/0x10 [ 2645.215257] ? lock_downgrade+0x6d0/0x6d0 [ 2645.215625] ? __lockdep_reset_lock+0x180/0x180 [ 2645.216027] ? SOFTIRQ_verbose+0x10/0x10 [ 2645.216388] ___sys_sendmsg+0xf3/0x170 [ 2645.216761] ? sendmsg_copy_msghdr+0x160/0x160 [ 2645.217169] ? __fget_files+0x2cf/0x520 [ 2645.217518] ? lock_downgrade+0x6d0/0x6d0 [ 2645.217884] ? find_held_lock+0x2c/0x110 [ 2645.218257] ? __fget_files+0x2f8/0x520 [ 2645.218619] ? __fget_light+0xea/0x290 [ 2645.218973] __sys_sendmsg+0xe5/0x1b0 [ 2645.219309] ? __sys_sendmsg_sock+0x40/0x40 [ 2645.219692] ? rcu_read_lock_any_held+0x75/0xa0 [ 2645.220133] do_syscall_64+0x33/0x40 [ 2645.220459] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2645.220924] RIP: 0033:0x7fa05acd5b19 [ 2645.221250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2645.222804] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2645.223459] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2645.224068] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2645.224710] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2645.225331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2645.225943] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:00:39 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x4) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:00:40 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 42) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:00:40 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x54, r2, 0x1, 0xffffbffd, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:textrel_shlib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x54}}, 0x8000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x96}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc800}, 0x8000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000000101f511986f901b8f962f179700"/30, @ANYRES16=r2, @ANYBLOB="000227bd7000fbdbdf250300000014000600776c616e3000000000000000000000001400030020010000000000000000000000000002140003000000000000000000000000000000000014000300fe880000000000000000000000000101"], 0x64}, 0x1, 0x0, 0x0, 0x8804}, 0x8c7) r3 = syz_open_dev$vcsa(&(0x7f0000000340), 0x8, 0x1150c1) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000080)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00082abd7000fedbdfadc5006b003c0004802c0007800800010019000000080001020000000008000100180000000800040008020000080004000200797a3100"/74], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40) [ 2646.063507] FAULT_INJECTION: forcing a failure. [ 2646.063507] name failslab, interval 1, probability 0, space 0, times 0 [ 2646.064735] CPU: 0 PID: 27290 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2646.065320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2646.066018] Call Trace: [ 2646.066257] dump_stack+0x107/0x167 [ 2646.066582] should_fail.cold+0x5/0xa [ 2646.066916] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2646.067371] ? create_object.isra.0+0x3a/0xa20 [ 2646.067771] should_failslab+0x5/0x20 [ 2646.068107] kmem_cache_alloc+0x5b/0x310 [ 2646.068461] ? mark_held_locks+0x9e/0xe0 [ 2646.068842] create_object.isra.0+0x3a/0xa20 [ 2646.069223] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2646.069672] kmem_cache_alloc_node+0x169/0x330 [ 2646.070204] __alloc_skb+0x6d/0x5b0 [ 2646.070533] skb_segment+0x9d8/0x3aa0 [ 2646.070929] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2646.071366] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2646.071812] ? SOFTIRQ_verbose+0x10/0x10 [ 2646.072173] __udp_gso_segment+0x11c6/0x1830 [ 2646.072550] ? __sk_receive_skb+0x830/0x830 [ 2646.073018] udp4_ufo_fragment+0x528/0x720 [ 2646.073392] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2646.073828] inet_gso_segment+0x4fb/0x11a0 [ 2646.074222] skb_mac_gso_segment+0x273/0x570 [ 2646.074601] ? inet_sock_destruct+0x840/0x840 [ 2646.074986] ? skb_network_protocol+0x650/0x650 [ 2646.075382] ? skb_crc32c_csum_help+0x80/0x80 [ 2646.075767] ? lock_acquire+0x197/0x470 [ 2646.076112] ? __dev_queue_xmit+0x1c2/0x2710 [ 2646.076501] __skb_gso_segment+0x32d/0x6d0 [ 2646.076955] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2646.077408] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2646.077809] __dev_queue_xmit+0x87b/0x2710 [ 2646.078193] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2646.078604] ? mark_held_locks+0x9e/0xe0 [ 2646.078962] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2646.079416] neigh_connected_output+0x382/0x4d0 [ 2646.079837] ip_finish_output2+0x6f1/0x21f0 [ 2646.080211] ? nf_hook_slow+0xfc/0x1e0 [ 2646.080550] ? ip_frag_next+0x9e0/0x9e0 [ 2646.080961] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2646.081402] __ip_finish_output.part.0+0x5f3/0xb50 [ 2646.081830] ? ip_fragment.constprop.0+0x240/0x240 [ 2646.082243] ? nf_hook+0x510/0x510 [ 2646.082571] ip_output+0x2f7/0x600 [ 2646.082890] ip_send_skb+0xdd/0x260 [ 2646.083217] udp_send_skb+0x6da/0x11d0 [ 2646.083575] udp_sendmsg+0x139a/0x2160 [ 2646.083912] ? tracing_generic_entry_update+0x1ed/0x270 [ 2646.084370] ? ip_frag_init+0x350/0x350 [ 2646.084791] ? tracing_generic_entry_update+0x1ed/0x270 [ 2646.085257] ? udp_setsockopt+0xc0/0xc0 [ 2646.085604] ? perf_event_switch_output+0x7d0/0x7d0 [ 2646.086067] ? lock_chain_count+0x20/0x20 [ 2646.086431] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2646.086857] ? lock_chain_count+0x20/0x20 [ 2646.087216] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2646.087657] ? perf_trace_lock+0x2bd/0x490 [ 2646.088021] ? perf_swevent_event+0x6c/0x550 [ 2646.088396] ? __lockdep_reset_lock+0x180/0x180 [ 2646.089911] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2646.090272] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2646.090723] ? udp_v6_push_pending_frames+0x360/0x360 [ 2646.091163] ? SOFTIRQ_verbose+0x10/0x10 [ 2646.091539] ? lock_acquire+0x197/0x470 [ 2646.091879] ? find_held_lock+0x2c/0x110 [ 2646.092240] ? __might_fault+0xd3/0x180 [ 2646.092583] ? lock_downgrade+0x6d0/0x6d0 [ 2646.092966] ? lock_downgrade+0x6d0/0x6d0 [ 2646.093329] ? sock_has_perm+0x1ea/0x280 [ 2646.093680] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2646.094130] ? _copy_from_user+0xfb/0x1b0 [ 2646.094511] ? __import_iovec+0x458/0x590 [ 2646.094870] ? udp_v6_push_pending_frames+0x360/0x360 [ 2646.095324] inet6_sendmsg+0x105/0x140 [ 2646.095660] ? inet6_compat_ioctl+0x320/0x320 [ 2646.096044] __sock_sendmsg+0xf2/0x190 [ 2646.096389] ____sys_sendmsg+0x70d/0x870 [ 2646.096811] ? sock_write_iter+0x3d0/0x3d0 [ 2646.097173] ? do_recvmmsg+0x6d0/0x6d0 [ 2646.097508] ? perf_trace_lock+0x2bd/0x490 [ 2646.097880] ? SOFTIRQ_verbose+0x10/0x10 [ 2646.098234] ? __lockdep_reset_lock+0x180/0x180 [ 2646.098641] ___sys_sendmsg+0xf3/0x170 [ 2646.098979] ? sendmsg_copy_msghdr+0x160/0x160 [ 2646.099377] ? __fget_files+0x2cf/0x520 [ 2646.099717] ? lock_downgrade+0x6d0/0x6d0 [ 2646.100076] ? find_held_lock+0x2c/0x110 [ 2646.100443] ? __fget_files+0x2f8/0x520 [ 2646.100874] ? __fget_light+0xea/0x290 [ 2646.101225] __sys_sendmsg+0xe5/0x1b0 [ 2646.101553] ? __sys_sendmsg_sock+0x40/0x40 [ 2646.101926] ? rcu_read_lock_any_held+0x75/0xa0 [ 2646.102376] do_syscall_64+0x33/0x40 [ 2646.102698] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2646.103136] RIP: 0033:0x7fa05acd5b19 [ 2646.103456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2646.105060] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2646.105712] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2646.106311] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2646.106906] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2646.107500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2646.108095] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:01:01 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000280)={0x0, 0x9, 0x3, 0x0, 0x6, "f175b5f4103b839ae1d2910535c3d0939f8584", 0xd2, 0x8001}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000240)={0x8}) copy_file_range(r1, &(0x7f0000000080)=0xc, r2, &(0x7f0000000100)=0xff, 0x1, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x1, @tid=r3}, &(0x7f0000000340)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) fadvise64(r4, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x5, 0x0, 0x6, 0x8, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x76a, 0x4, @perf_config_ext={0x1, 0x8}, 0x88401, 0x8, 0x80, 0x4, 0x7f, 0x7fff, 0x2, 0x0, 0x3, 0x0, 0x5}, r3, 0x8, r4, 0x2) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000240)={0x0, 0x4000000, 0x0, 0x7, 0x0, "0489fdc1843fc745ea52a5fff7962e807836db"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_aout(r5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1018) 13:01:01 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x4}, 0xa90}) 13:01:01 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x0, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:01:01 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) r1 = syz_open_dev$sg(0x0, 0x0, 0x2001) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x4002, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000380)) ioctl$RTC_AIE_ON(r2, 0x7002) signalfd4(r2, &(0x7f0000000180)={[0x2]}, 0x8, 0x800) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{r2}, "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"}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, {0x308}, 0xac1414a3, {0x2, 0x1000, @broadcast}}) fallocate(r3, 0x1d, 0xfffffffffffffffe, 0xb35c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={r0, 0x5, 0xf55, 0x1}) ioctl$RTC_UIE_ON(r4, 0x7003) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) setns(r5, 0x4000000) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x14400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000002c0)={[{@noacl}]}) 13:01:01 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:01:01 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 43) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:01:01 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r1 = socket$inet(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:01:01 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2667.054345] FAULT_INJECTION: forcing a failure. [ 2667.054345] name failslab, interval 1, probability 0, space 0, times 0 [ 2667.055412] CPU: 0 PID: 27416 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2667.056009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2667.056707] Call Trace: [ 2667.060973] dump_stack+0x107/0x167 [ 2667.061297] should_fail.cold+0x5/0xa [ 2667.061639] should_failslab+0x5/0x20 [ 2667.061967] __kmalloc_node_track_caller+0x74/0x3b0 [ 2667.062398] ? skb_segment+0x9d8/0x3aa0 [ 2667.062753] __alloc_skb+0xb1/0x5b0 [ 2667.063080] skb_segment+0x9d8/0x3aa0 [ 2667.063482] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2667.063921] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2667.064367] ? SOFTIRQ_verbose+0x10/0x10 [ 2667.064732] __udp_gso_segment+0x11c6/0x1830 [ 2667.065128] ? __sk_receive_skb+0x830/0x830 [ 2667.065516] udp4_ufo_fragment+0x528/0x720 [ 2667.065888] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2667.066317] inet_gso_segment+0x4fb/0x11a0 [ 2667.066706] skb_mac_gso_segment+0x273/0x570 [ 2667.067085] ? inet_sock_destruct+0x840/0x840 [ 2667.067470] ? skb_network_protocol+0x650/0x650 [ 2667.067865] ? skb_crc32c_csum_help+0x80/0x80 [ 2667.068250] ? lock_acquire+0x197/0x470 [ 2667.068589] ? __dev_queue_xmit+0x1c2/0x2710 [ 2667.068992] __skb_gso_segment+0x32d/0x6d0 [ 2667.069366] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2667.069818] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2667.070214] __dev_queue_xmit+0x87b/0x2710 [ 2667.070599] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2667.071007] ? mark_held_locks+0x9e/0xe0 [ 2667.071365] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2667.071823] neigh_connected_output+0x382/0x4d0 [ 2667.072246] ip_finish_output2+0x6f1/0x21f0 [ 2667.072622] ? nf_hook_slow+0xfc/0x1e0 [ 2667.072974] ? ip_frag_next+0x9e0/0x9e0 [ 2667.073316] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2667.073760] __ip_finish_output.part.0+0x5f3/0xb50 [ 2667.074184] ? ip_fragment.constprop.0+0x240/0x240 [ 2667.074602] ? nf_hook+0x510/0x510 [ 2667.074930] ip_output+0x2f7/0x600 [ 2667.075248] ip_send_skb+0xdd/0x260 [ 2667.075572] udp_send_skb+0x6da/0x11d0 [ 2667.075929] udp_sendmsg+0x139a/0x2160 [ 2667.076265] ? tracing_generic_entry_update+0x1ed/0x270 [ 2667.076724] ? ip_frag_init+0x350/0x350 [ 2667.077083] ? tracing_generic_entry_update+0x1ed/0x270 [ 2667.077550] ? udp_setsockopt+0xc0/0xc0 [ 2667.077897] ? perf_event_switch_output+0x7d0/0x7d0 [ 2667.078357] ? lock_chain_count+0x20/0x20 [ 2667.078717] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2667.079146] ? lock_chain_count+0x20/0x20 [ 2667.079503] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2667.079944] ? perf_trace_lock+0x2bd/0x490 [ 2667.080311] ? perf_swevent_event+0x6c/0x550 [ 2667.080688] ? __lockdep_reset_lock+0x180/0x180 [ 2667.081122] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2667.081478] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2667.081923] ? udp_v6_push_pending_frames+0x360/0x360 [ 2667.082362] ? SOFTIRQ_verbose+0x10/0x10 [ 2667.082738] ? lock_acquire+0x197/0x470 [ 2667.083080] ? find_held_lock+0x2c/0x110 [ 2667.083440] ? __might_fault+0xd3/0x180 [ 2667.083786] ? lock_downgrade+0x6d0/0x6d0 [ 2667.084151] ? lock_downgrade+0x6d0/0x6d0 [ 2667.084516] ? sock_has_perm+0x1ea/0x280 [ 2667.084886] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2667.085337] ? _copy_from_user+0xfb/0x1b0 [ 2667.085718] ? __import_iovec+0x458/0x590 [ 2667.086076] ? udp_v6_push_pending_frames+0x360/0x360 [ 2667.086525] inet6_sendmsg+0x105/0x140 [ 2667.086861] ? inet6_compat_ioctl+0x320/0x320 [ 2667.087244] __sock_sendmsg+0xf2/0x190 [ 2667.087583] ____sys_sendmsg+0x70d/0x870 [ 2667.087938] ? sock_write_iter+0x3d0/0x3d0 [ 2667.088298] ? do_recvmmsg+0x6d0/0x6d0 [ 2667.088635] ? perf_trace_lock+0x2bd/0x490 [ 2667.089011] ? SOFTIRQ_verbose+0x10/0x10 [ 2667.089368] ? __lockdep_reset_lock+0x180/0x180 [ 2667.089774] ___sys_sendmsg+0xf3/0x170 [ 2667.090114] ? sendmsg_copy_msghdr+0x160/0x160 [ 2667.090517] ? __fget_files+0x2cf/0x520 [ 2667.090862] ? lock_downgrade+0x6d0/0x6d0 [ 2667.091220] ? find_held_lock+0x2c/0x110 [ 2667.091592] ? __fget_files+0x2f8/0x520 [ 2667.091952] ? __fget_light+0xea/0x290 [ 2667.092303] __sys_sendmsg+0xe5/0x1b0 [ 2667.092634] ? __sys_sendmsg_sock+0x40/0x40 [ 2667.097038] ? rcu_read_lock_any_held+0x75/0xa0 [ 2667.097484] do_syscall_64+0x33/0x40 [ 2667.097806] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2667.098241] RIP: 0033:0x7fa05acd5b19 [ 2667.098563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2667.100094] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2667.100737] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2667.101349] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2667.101945] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2667.102541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2667.103142] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:01:01 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:01:01 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) creat(&(0x7f0000000040)='./file0\x00', 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="bd478c8349f3bcfe944c6f660811c04f1287016fb2c89b8de51aaf95a3f86e3203bf631f3b1c8606b11364d551bb2f5d1d09f16a45b407eb7ee041d94318002dfb018a8b1562d5e90d893212740440f92428c74396007e8ad7e33907777dcb61169ab816ce918f68e4a2c0eb35475a6ea8a729a3d82e42a0df58af618cb0708b9eb005c363cf091bf08b297192b4dd03f84be877b1b73abf913d26cbc21cfff94771150eff39c2aeb0f562d105fd65fc909369258219e50b55f701a0177eaf9e9d9bf169894672a7616aef256e17d996ed4e40b376d901167dcac7e8bfbc6b9902"]) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc02, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x3, 0x0, 0x5e, 0x248e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r1, 0x6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_complete(0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000000)) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x7, 0xffffffff) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x56, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000080)) [ 2667.196188] kauditd_printk_skb: 35 callbacks suppressed [ 2667.196202] audit: type=1326 audit(1724245261.863:368): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=27402 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbe8a2b19 code=0x7ffc0000 [ 2667.199103] audit: type=1326 audit(1724245261.863:369): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=27402 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbe8a2b19 code=0x7ffc0000 13:01:01 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x5}, 0xa90}) 13:01:01 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) clone3(&(0x7f00000008c0)={0x3050100, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x5a, 0x0, 0x0, 0x0, {r0}}, 0x56) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:01:01 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:01:01 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 44) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:01:02 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000000)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x206140) r1 = fork() ptrace(0x10, r1) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x1200, 0x0) waitid(0x1, r1, &(0x7f00000001c0), 0x8, &(0x7f00000002c0)) fcntl$setown(r0, 0x8, r1) 13:01:02 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2667.885981] FAULT_INJECTION: forcing a failure. [ 2667.885981] name failslab, interval 1, probability 0, space 0, times 0 [ 2667.887026] CPU: 1 PID: 27746 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2667.887745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2667.888461] Call Trace: [ 2667.888737] dump_stack+0x107/0x167 [ 2667.889148] should_fail.cold+0x5/0xa [ 2667.889597] ? create_object.isra.0+0x3a/0xa20 [ 2667.890111] should_failslab+0x5/0x20 [ 2667.890547] kmem_cache_alloc+0x5b/0x310 [ 2667.891030] create_object.isra.0+0x3a/0xa20 [ 2667.891519] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2667.892194] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2667.892780] ? skb_segment+0x9d8/0x3aa0 [ 2667.893221] __alloc_skb+0xb1/0x5b0 [ 2667.893649] skb_segment+0x9d8/0x3aa0 [ 2667.894095] ? lock_chain_count+0x20/0x20 [ 2667.894629] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2667.895298] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2667.895895] ? SOFTIRQ_verbose+0x10/0x10 [ 2667.896370] __udp_gso_segment+0x11c6/0x1830 [ 2667.896870] ? __sk_receive_skb+0x830/0x830 [ 2667.897382] udp4_ufo_fragment+0x528/0x720 [ 2667.897866] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2667.898440] inet_gso_segment+0x4fb/0x11a0 [ 2667.898948] skb_mac_gso_segment+0x273/0x570 [ 2667.899557] ? inet_sock_destruct+0x840/0x840 [ 2667.900065] ? skb_network_protocol+0x650/0x650 [ 2667.900602] ? skb_crc32c_csum_help+0x80/0x80 [ 2667.901071] ? lock_acquire+0x197/0x470 [ 2667.901455] ? __dev_queue_xmit+0x1c2/0x2710 [ 2667.901875] __skb_gso_segment+0x32d/0x6d0 [ 2667.902292] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2667.902781] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2667.903208] __dev_queue_xmit+0x87b/0x2710 [ 2667.903722] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2667.904156] ? mark_held_locks+0x9e/0xe0 [ 2667.904566] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2667.905068] neigh_connected_output+0x382/0x4d0 [ 2667.905530] ip_finish_output2+0x6f1/0x21f0 [ 2667.905932] ? nf_hook_slow+0xfc/0x1e0 [ 2667.906304] ? ip_frag_next+0x9e0/0x9e0 [ 2667.906695] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2667.907172] __ip_finish_output.part.0+0x5f3/0xb50 [ 2667.907702] ? ip_fragment.constprop.0+0x240/0x240 [ 2667.908144] ? nf_hook+0x510/0x510 [ 2667.908498] ip_output+0x2f7/0x600 [ 2667.908866] ip_send_skb+0xdd/0x260 [ 2667.909214] udp_send_skb+0x6da/0x11d0 [ 2667.909605] udp_sendmsg+0x139a/0x2160 [ 2667.909981] ? mark_lock+0xf5/0x2df0 [ 2667.910337] ? ip_frag_init+0x350/0x350 [ 2667.910815] ? lock_chain_count+0x20/0x20 [ 2667.911219] ? udp_setsockopt+0xc0/0xc0 [ 2667.911586] ? mark_lock+0xf5/0x2df0 [ 2667.911957] ? __lockdep_reset_lock+0x180/0x180 [ 2667.912392] ? lock_chain_count+0x20/0x20 [ 2667.912774] ? mark_lock+0xf5/0x2df0 [ 2667.913159] ? mark_lock+0xf5/0x2df0 [ 2667.913512] ? lock_chain_count+0x20/0x20 [ 2667.913905] ? __lock_acquire+0xbb1/0x5b00 [ 2667.914299] ? lock_chain_count+0x20/0x20 [ 2667.914712] ? perf_trace_lock+0xac/0x490 [ 2667.915198] ? SOFTIRQ_verbose+0x10/0x10 [ 2667.915582] ? __lockdep_reset_lock+0x180/0x180 [ 2667.916041] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2667.916448] ? udp_v6_push_pending_frames+0x360/0x360 [ 2667.916943] ? SOFTIRQ_verbose+0x10/0x10 [ 2667.917343] ? mark_lock+0xf5/0x2df0 [ 2667.917704] ? lock_acquire+0x197/0x470 [ 2667.918074] ? find_held_lock+0x2c/0x110 [ 2667.918473] ? __might_fault+0xd3/0x180 [ 2667.918854] ? lock_downgrade+0x6d0/0x6d0 [ 2667.919364] ? lock_downgrade+0x6d0/0x6d0 [ 2667.919754] ? sock_has_perm+0x1ea/0x280 [ 2667.920135] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2667.920627] ? _copy_from_user+0xfb/0x1b0 [ 2667.921053] ? __import_iovec+0x458/0x590 [ 2667.921456] ? udp_v6_push_pending_frames+0x360/0x360 [ 2667.921931] inet6_sendmsg+0x105/0x140 [ 2667.922303] ? inet6_compat_ioctl+0x320/0x320 [ 2667.922726] __sock_sendmsg+0xf2/0x190 [ 2667.923089] ____sys_sendmsg+0x70d/0x870 [ 2667.923573] ? sock_write_iter+0x3d0/0x3d0 [ 2667.923963] ? do_recvmmsg+0x6d0/0x6d0 [ 2667.924333] ? SOFTIRQ_verbose+0x10/0x10 [ 2667.924727] ? lock_downgrade+0x6d0/0x6d0 [ 2667.925143] ? __lockdep_reset_lock+0x180/0x180 [ 2667.925586] ? SOFTIRQ_verbose+0x10/0x10 [ 2667.925972] ___sys_sendmsg+0xf3/0x170 [ 2667.926345] ? sendmsg_copy_msghdr+0x160/0x160 [ 2667.926787] ? __fget_files+0x2cf/0x520 [ 2667.927161] ? lock_downgrade+0x6d0/0x6d0 [ 2667.927556] ? find_held_lock+0x2c/0x110 [ 2667.928061] ? __fget_files+0x2f8/0x520 [ 2667.928449] ? __fget_light+0xea/0x290 [ 2667.928851] __sys_sendmsg+0xe5/0x1b0 [ 2667.929237] ? __sys_sendmsg_sock+0x40/0x40 [ 2667.929640] ? rcu_read_lock_any_held+0x75/0xa0 [ 2667.930131] do_syscall_64+0x33/0x40 [ 2667.930486] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2667.930957] RIP: 0033:0x7fa05acd5b19 [ 2667.931316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2667.933021] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2667.933708] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2667.934350] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2667.934981] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2667.935634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2667.936376] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:01:02 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x0, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:01:02 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 45) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:01:02 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2668.627310] FAULT_INJECTION: forcing a failure. [ 2668.627310] name failslab, interval 1, probability 0, space 0, times 0 [ 2668.628595] CPU: 1 PID: 28051 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2668.630517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2668.631211] Call Trace: [ 2668.631648] dump_stack+0x107/0x167 [ 2668.631963] should_fail.cold+0x5/0xa [ 2668.632326] ? trace_hardirqs_on+0x5b/0x180 [ 2668.632707] ? __alloc_skb+0x6d/0x5b0 [ 2668.633054] should_failslab+0x5/0x20 [ 2668.633564] kmem_cache_alloc_node+0x55/0x330 [ 2668.633952] __alloc_skb+0x6d/0x5b0 [ 2668.634307] skb_segment+0x9d8/0x3aa0 [ 2668.634648] ? lock_chain_count+0x20/0x20 [ 2668.635045] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2668.635696] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2668.636139] ? SOFTIRQ_verbose+0x10/0x10 [ 2668.636713] __udp_gso_segment+0x11c6/0x1830 [ 2668.637422] ? __sk_receive_skb+0x830/0x830 [ 2668.637932] udp4_ufo_fragment+0x528/0x720 [ 2668.638437] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2668.638990] inet_gso_segment+0x4fb/0x11a0 [ 2668.639543] skb_mac_gso_segment+0x273/0x570 [ 2668.640051] ? inet_sock_destruct+0x840/0x840 [ 2668.641087] ? skb_network_protocol+0x650/0x650 [ 2668.641576] ? skb_crc32c_csum_help+0x80/0x80 [ 2668.641958] ? lock_acquire+0x197/0x470 [ 2668.642507] ? __dev_queue_xmit+0x1c2/0x2710 [ 2668.642892] __skb_gso_segment+0x32d/0x6d0 [ 2668.643532] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2668.643978] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2668.644578] __dev_queue_xmit+0x87b/0x2710 [ 2668.644968] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2668.645622] ? mark_held_locks+0x9e/0xe0 [ 2668.645973] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2668.646638] neigh_connected_output+0x382/0x4d0 [ 2668.647049] ip_finish_output2+0x6f1/0x21f0 [ 2668.647686] ? nf_hook_slow+0xfc/0x1e0 [ 2668.648027] ? ip_frag_next+0x9e0/0x9e0 [ 2668.648469] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2668.649255] __ip_finish_output.part.0+0x5f3/0xb50 [ 2668.649883] ? ip_fragment.constprop.0+0x240/0x240 [ 2668.650349] ? nf_hook+0x510/0x510 [ 2668.650719] ip_output+0x2f7/0x600 [ 2668.655840] ip_send_skb+0xdd/0x260 [ 2668.656255] udp_send_skb+0x6da/0x11d0 [ 2668.656769] udp_sendmsg+0x139a/0x2160 [ 2668.657319] ? mark_lock+0xf5/0x2df0 [ 2668.657765] ? ip_frag_init+0x350/0x350 [ 2668.658191] ? lock_chain_count+0x20/0x20 [ 2668.658779] ? udp_setsockopt+0xc0/0xc0 [ 2668.659206] ? mark_lock+0xf5/0x2df0 [ 2668.659716] ? __lockdep_reset_lock+0x180/0x180 [ 2668.660257] ? lock_chain_count+0x20/0x20 [ 2668.660801] ? mark_lock+0xf5/0x2df0 [ 2668.661210] ? mark_lock+0xf5/0x2df0 [ 2668.661779] ? lock_chain_count+0x20/0x20 [ 2668.662196] ? __lock_acquire+0xbb1/0x5b00 [ 2668.662791] ? lock_chain_count+0x20/0x20 [ 2668.663225] ? perf_trace_lock+0xac/0x490 [ 2668.663931] ? SOFTIRQ_verbose+0x10/0x10 [ 2668.664454] ? __lockdep_reset_lock+0x180/0x180 [ 2668.665584] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2668.666035] ? udp_v6_push_pending_frames+0x360/0x360 [ 2668.666626] ? SOFTIRQ_verbose+0x10/0x10 [ 2668.667063] ? mark_lock+0xf5/0x2df0 [ 2668.667612] ? lock_acquire+0x197/0x470 [ 2668.668038] ? find_held_lock+0x2c/0x110 [ 2668.668486] ? __might_fault+0xd3/0x180 [ 2668.669033] ? lock_downgrade+0x6d0/0x6d0 [ 2668.669513] ? lock_downgrade+0x6d0/0x6d0 [ 2668.669973] ? sock_has_perm+0x1ea/0x280 [ 2668.670494] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2668.671040] ? _copy_from_user+0xfb/0x1b0 [ 2668.671614] ? __import_iovec+0x458/0x590 [ 2668.672072] ? udp_v6_push_pending_frames+0x360/0x360 [ 2668.672661] inet6_sendmsg+0x105/0x140 [ 2668.673457] ? inet6_compat_ioctl+0x320/0x320 [ 2668.673839] __sock_sendmsg+0xf2/0x190 [ 2668.674279] ____sys_sendmsg+0x70d/0x870 [ 2668.674730] ? sock_write_iter+0x3d0/0x3d0 [ 2668.675087] ? do_recvmmsg+0x6d0/0x6d0 [ 2668.675681] ? SOFTIRQ_verbose+0x10/0x10 [ 2668.676026] ? lock_downgrade+0x6d0/0x6d0 [ 2668.676506] ? __lockdep_reset_lock+0x180/0x180 [ 2668.677001] ? SOFTIRQ_verbose+0x10/0x10 [ 2668.677352] ___sys_sendmsg+0xf3/0x170 [ 2668.677932] ? sendmsg_copy_msghdr+0x160/0x160 [ 2668.678325] ? __fget_files+0x2cf/0x520 [ 2668.678896] ? lock_downgrade+0x6d0/0x6d0 [ 2668.679252] ? find_held_lock+0x2c/0x110 [ 2668.679783] ? __fget_files+0x2f8/0x520 [ 2668.680222] ? __fget_light+0xea/0x290 [ 2668.680617] __sys_sendmsg+0xe5/0x1b0 [ 2668.681275] ? __sys_sendmsg_sock+0x40/0x40 [ 2668.681706] ? rcu_read_lock_any_held+0x75/0xa0 [ 2668.682360] do_syscall_64+0x33/0x40 [ 2668.682730] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2668.683464] RIP: 0033:0x7fa05acd5b19 [ 2668.683785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2668.688518] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2668.689306] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2668.690079] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2668.690729] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2668.691537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2668.692910] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:01:24 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x6}, 0xa90}) 13:01:24 executing program 1: r0 = clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000003c0)=""/145, 0x91}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)=""/29, 0x1d}, {&(0x7f0000000680)=""/132, 0x84}], 0x2}}], 0x2, 0x2, &(0x7f0000000840)={r1, r2+10000000}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0) r5 = syz_io_uring_complete(0x0) io_uring_enter(r4, 0x630a, 0xce52, 0x2, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x2c0, r6}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000001940)='./file0\x00', 0x101) clone3(&(0x7f0000001980)={0x848da000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x32}, &(0x7f0000000940)=""/4096, 0x1000, &(0x7f0000000100)=""/187, &(0x7f0000000880)=[r0, r3, r6], 0x3, {r7}}, 0x58) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x2c0}) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000001a00)={0x7, 0x4d, 0x2}, 0x7) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r8) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r9, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:01:24 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x0, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:01:24 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 46) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:01:24 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:01:24 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400000, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r1, 0x0) r4 = syz_io_uring_setup(0x2aeb, &(0x7f0000000340)={0x0, 0x2000000, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x2, 0x1, &(0x7f0000000100)="b9bbb734ec3e0929789a3961a5b9680cd29efec6900cc290bb23b3fcff7d414f2931bb1c90ae40ce334aafb19e494aff84030f5e8849b01598eda6eecb2e661fd9ba3de4b6c8b6131fa48a94503b44258278606ee4f5e1b0c22fe722fc684181a5921c013d67acabe26a09d312cf88bd17c88f3494f58da6b59fe7ed", 0x7, 0x0, 0x0, {0x1}}, 0x2) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61d69414, 0x100000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0) syz_io_uring_submit(r6, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, &(0x7f0000000180)=0x80, &(0x7f00000003c0)=@caif=@rfm, 0x0, 0x100800}, 0x3ff80) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) 13:01:24 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:01:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000180)="90341347721b305d0ae5b943b1b62df9", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="5a21de3b82d98081cc3d01024e6e4996", 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fstatfs(0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000500)='ramfs\x00', 0x88, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2154d4, 0x0) [ 2689.830907] FAULT_INJECTION: forcing a failure. [ 2689.830907] name failslab, interval 1, probability 0, space 0, times 0 [ 2689.831936] CPU: 1 PID: 28067 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2689.832521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2689.833254] Call Trace: [ 2689.833490] dump_stack+0x107/0x167 [ 2689.833804] should_fail.cold+0x5/0xa [ 2689.834132] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2689.834577] ? create_object.isra.0+0x3a/0xa20 [ 2689.834966] should_failslab+0x5/0x20 [ 2689.835291] kmem_cache_alloc+0x5b/0x310 [ 2689.835643] create_object.isra.0+0x3a/0xa20 [ 2689.836015] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2689.836450] kmem_cache_alloc_node+0x169/0x330 [ 2689.836845] __alloc_skb+0x6d/0x5b0 [ 2689.837216] skb_segment+0x9d8/0x3aa0 [ 2689.837542] ? lock_chain_count+0x20/0x20 [ 2689.837941] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2689.838367] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2689.838808] ? SOFTIRQ_verbose+0x10/0x10 [ 2689.839161] __udp_gso_segment+0x11c6/0x1830 [ 2689.839534] ? __sk_receive_skb+0x830/0x830 [ 2689.839910] udp4_ufo_fragment+0x528/0x720 [ 2689.840273] ? skb_udp_tunnel_segment+0x1db0/0x1db0 13:01:24 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2689.840697] inet_gso_segment+0x4fb/0x11a0 [ 2689.845114] skb_mac_gso_segment+0x273/0x570 [ 2689.845489] ? inet_sock_destruct+0x840/0x840 [ 2689.845868] ? skb_network_protocol+0x650/0x650 [ 2689.846259] ? skb_crc32c_csum_help+0x80/0x80 [ 2689.857202] ? lock_acquire+0x197/0x470 [ 2689.857538] ? __dev_queue_xmit+0x1c2/0x2710 [ 2689.857916] __skb_gso_segment+0x32d/0x6d0 [ 2689.858281] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2689.858725] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2689.859114] __dev_queue_xmit+0x87b/0x2710 [ 2689.859484] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2689.859880] ? mark_held_locks+0x9e/0xe0 [ 2689.860230] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2689.860682] neigh_connected_output+0x382/0x4d0 [ 2689.861136] ip_finish_output2+0x6f1/0x21f0 [ 2689.861514] ? nf_hook_slow+0xfc/0x1e0 [ 2689.861849] ? ip_frag_next+0x9e0/0x9e0 [ 2689.862186] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2689.862620] __ip_finish_output.part.0+0x5f3/0xb50 [ 2689.863039] ? ip_fragment.constprop.0+0x240/0x240 [ 2689.863450] ? nf_hook+0x510/0x510 [ 2689.863765] ip_output+0x2f7/0x600 [ 2689.864074] ip_send_skb+0xdd/0x260 [ 2689.864388] udp_send_skb+0x6da/0x11d0 [ 2689.864731] udp_sendmsg+0x139a/0x2160 [ 2689.865101] ? mark_lock+0xf5/0x2df0 [ 2689.865423] ? ip_frag_init+0x350/0x350 [ 2689.865762] ? lock_chain_count+0x20/0x20 [ 2689.866119] ? udp_setsockopt+0xc0/0xc0 [ 2689.866453] ? mark_lock+0xf5/0x2df0 [ 2689.866779] ? __lockdep_reset_lock+0x180/0x180 [ 2689.867174] ? lock_chain_count+0x20/0x20 [ 2689.867527] ? mark_lock+0xf5/0x2df0 [ 2689.867847] ? mark_lock+0xf5/0x2df0 [ 2689.868164] ? lock_chain_count+0x20/0x20 [ 2689.868514] ? __lock_acquire+0xbb1/0x5b00 [ 2689.868875] ? lock_chain_count+0x20/0x20 [ 2689.869273] ? perf_trace_lock+0xac/0x490 [ 2689.869626] ? SOFTIRQ_verbose+0x10/0x10 [ 2689.869970] ? __lockdep_reset_lock+0x180/0x180 [ 2689.870376] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2689.870738] ? udp_v6_push_pending_frames+0x360/0x360 [ 2689.871171] ? SOFTIRQ_verbose+0x10/0x10 [ 2689.871523] ? mark_lock+0xf5/0x2df0 [ 2689.871846] ? lock_acquire+0x197/0x470 [ 2689.872182] ? find_held_lock+0x2c/0x110 [ 2689.872532] ? __might_fault+0xd3/0x180 [ 2689.872874] ? lock_downgrade+0x6d0/0x6d0 [ 2689.873266] ? lock_downgrade+0x6d0/0x6d0 [ 2689.873629] ? sock_has_perm+0x1ea/0x280 [ 2689.873984] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2689.874437] ? _copy_from_user+0xfb/0x1b0 [ 2689.874807] ? __import_iovec+0x458/0x590 [ 2689.875161] ? udp_v6_push_pending_frames+0x360/0x360 [ 2689.875605] inet6_sendmsg+0x105/0x140 [ 2689.875938] ? inet6_compat_ioctl+0x320/0x320 [ 2689.876319] __sock_sendmsg+0xf2/0x190 [ 2689.876653] ____sys_sendmsg+0x70d/0x870 [ 2689.877025] ? sock_write_iter+0x3d0/0x3d0 [ 2689.877402] ? do_recvmmsg+0x6d0/0x6d0 [ 2689.877740] ? SOFTIRQ_verbose+0x10/0x10 [ 2689.878085] ? lock_downgrade+0x6d0/0x6d0 [ 2689.878443] ? __lockdep_reset_lock+0x180/0x180 [ 2689.878836] ? SOFTIRQ_verbose+0x10/0x10 [ 2689.879188] ___sys_sendmsg+0xf3/0x170 [ 2689.879524] ? sendmsg_copy_msghdr+0x160/0x160 [ 2689.879918] ? __fget_files+0x2cf/0x520 [ 2689.880257] ? lock_downgrade+0x6d0/0x6d0 [ 2689.880612] ? find_held_lock+0x2c/0x110 [ 2689.880970] ? __fget_files+0x2f8/0x520 [ 2689.885360] ? __fget_light+0xea/0x290 [ 2689.885702] __sys_sendmsg+0xe5/0x1b0 [ 2689.886029] ? __sys_sendmsg_sock+0x40/0x40 [ 2689.886395] ? rcu_read_lock_any_held+0x75/0xa0 [ 2689.886819] do_syscall_64+0x33/0x40 [ 2689.887137] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2689.887569] RIP: 0033:0x7fa05acd5b19 [ 2689.887885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2689.889446] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2689.890114] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2689.890734] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2689.891367] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2689.891987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2689.892609] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:01:24 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 47) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:01:24 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) dup2(r1, r2) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000005200210e000000000000000000000000e2f3fc87d5b00bf3a0352cfcb50b13ea12ea650934392332139a845015efb4392207a7941989e5afdc328bc1509acce9358bef366206a7dc521bc56886b0776362d802862926084c817f6bc0867af66bc237f1bfaa9262d265343c967a5968c2ec4235af175bd982f93c70d894eb5a4c3dc443bac34721ec23c408f7353af0e5e9aed66e756a00234c7ae3bdc18ff1426d374a8a5156a4c615173f030968668eda1d456897458937199faf645578b427b1126f61db55"], 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) r3 = openat$cgroup(r0, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r5) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000040)={0x1, 'veth1_vlan\x00', {}, 0xffff}) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14400000100002"], 0x14}}, 0x0) fcntl$dupfd(r3, 0x0, r4) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) 13:01:24 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0x0, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:01:24 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:01:24 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x7}, 0xa90}) 13:01:24 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x20000, &(0x7f0000000140)=ANY=[@ANYBLOB="10"]) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) write$P9_RREADDIR(r0, &(0x7f0000000200)={0x128, 0x29, 0x2, {0x6, [{{0x20, 0xb4}, 0x5b, 0x4, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0xb8, 0x80, 0xd, './file0/file0'}, {{0x8, 0x3}, 0x56, 0x2, 0x7, './file0'}, {{0x4, 0x4, 0x3}, 0x79, 0x84, 0x7, './file0'}, {{0x2, 0x3}, 0x2, 0x7, 0x7, './file0'}, {{0x0, 0x3, 0x8}, 0x10000, 0x20, 0x7, './file0'}, {{0xd2f5974dece693ad, 0x3, 0x1}, 0x7, 0x5, 0x7, './file0'}, {{0x40, 0x1, 0x1}, 0x7ff, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x7}, 0x4, 0x1, 0x7, './file0'}]}}, 0x128) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x12c0088, 0x0) [ 2690.992677] FAULT_INJECTION: forcing a failure. [ 2690.992677] name failslab, interval 1, probability 0, space 0, times 0 [ 2690.997771] CPU: 0 PID: 28507 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2691.005150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2691.005839] Call Trace: [ 2691.006075] dump_stack+0x107/0x167 [ 2691.006397] should_fail.cold+0x5/0xa [ 2691.006739] should_failslab+0x5/0x20 [ 2691.007069] __kmalloc_node_track_caller+0x74/0x3b0 [ 2691.007505] ? skb_segment+0x9d8/0x3aa0 [ 2691.007863] __alloc_skb+0xb1/0x5b0 [ 2691.008196] skb_segment+0x9d8/0x3aa0 [ 2691.008597] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2691.009054] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2691.009511] ? SOFTIRQ_verbose+0x10/0x10 [ 2691.009876] __udp_gso_segment+0x11c6/0x1830 [ 2691.010261] ? __sk_receive_skb+0x830/0x830 [ 2691.010650] udp4_ufo_fragment+0x528/0x720 [ 2691.011028] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2691.011459] inet_gso_segment+0x4fb/0x11a0 [ 2691.011854] skb_mac_gso_segment+0x273/0x570 [ 2691.012235] ? inet_sock_destruct+0x840/0x840 [ 2691.012621] ? skb_network_protocol+0x650/0x650 [ 2691.013032] ? skb_crc32c_csum_help+0x80/0x80 [ 2691.013429] ? lock_acquire+0x197/0x470 [ 2691.013776] ? __dev_queue_xmit+0x1c2/0x2710 [ 2691.014170] __skb_gso_segment+0x32d/0x6d0 [ 2691.014550] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2691.015007] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2691.015409] __dev_queue_xmit+0x87b/0x2710 [ 2691.015800] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2691.016215] ? mark_held_locks+0x9e/0xe0 [ 2691.016582] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2691.017066] neigh_connected_output+0x382/0x4d0 [ 2691.017514] ip_finish_output2+0x6f1/0x21f0 [ 2691.017902] ? nf_hook_slow+0xfc/0x1e0 [ 2691.018243] ? ip_frag_next+0x9e0/0x9e0 [ 2691.018593] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2691.019043] __ip_finish_output.part.0+0x5f3/0xb50 [ 2691.019473] ? ip_fragment.constprop.0+0x240/0x240 [ 2691.019894] ? nf_hook+0x510/0x510 [ 2691.020221] ip_output+0x2f7/0x600 [ 2691.020542] ip_send_skb+0xdd/0x260 [ 2691.020868] udp_send_skb+0x6da/0x11d0 [ 2691.021253] udp_sendmsg+0x139a/0x2160 [ 2691.021595] ? tracing_generic_entry_update+0x1ed/0x270 [ 2691.022055] ? ip_frag_init+0x350/0x350 [ 2691.022399] ? tracing_generic_entry_update+0x1ed/0x270 [ 2691.022871] ? udp_setsockopt+0xc0/0xc0 [ 2691.023225] ? perf_event_switch_output+0x7d0/0x7d0 [ 2691.023688] ? lock_chain_count+0x20/0x20 [ 2691.024051] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2691.024478] ? lock_chain_count+0x20/0x20 [ 2691.024842] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2691.025293] ? perf_trace_lock+0x2bd/0x490 [ 2691.025656] ? perf_swevent_event+0x6c/0x550 [ 2691.026029] ? __lockdep_reset_lock+0x180/0x180 [ 2691.026445] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2691.026804] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2691.027257] ? udp_v6_push_pending_frames+0x360/0x360 [ 2691.027701] ? SOFTIRQ_verbose+0x10/0x10 [ 2691.028077] ? lock_acquire+0x197/0x470 [ 2691.028418] ? find_held_lock+0x2c/0x110 [ 2691.028783] ? __might_fault+0xd3/0x180 [ 2691.029148] ? lock_downgrade+0x6d0/0x6d0 [ 2691.029513] ? lock_downgrade+0x6d0/0x6d0 [ 2691.029884] ? sock_has_perm+0x1ea/0x280 [ 2691.030233] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2691.030681] ? _copy_from_user+0xfb/0x1b0 [ 2691.031061] ? __import_iovec+0x458/0x590 [ 2691.031418] ? udp_v6_push_pending_frames+0x360/0x360 [ 2691.031877] inet6_sendmsg+0x105/0x140 [ 2691.032213] ? inet6_compat_ioctl+0x320/0x320 [ 2691.032596] __sock_sendmsg+0xf2/0x190 [ 2691.032934] ____sys_sendmsg+0x70d/0x870 [ 2691.033315] ? sock_write_iter+0x3d0/0x3d0 [ 2691.033680] ? do_recvmmsg+0x6d0/0x6d0 [ 2691.034022] ? perf_trace_lock+0x2bd/0x490 [ 2691.034396] ? SOFTIRQ_verbose+0x10/0x10 [ 2691.034753] ? __lockdep_reset_lock+0x180/0x180 [ 2691.035159] ___sys_sendmsg+0xf3/0x170 [ 2691.035499] ? sendmsg_copy_msghdr+0x160/0x160 [ 2691.035903] ? __fget_files+0x2cf/0x520 [ 2691.036253] ? lock_downgrade+0x6d0/0x6d0 [ 2691.036613] ? find_held_lock+0x2c/0x110 [ 2691.036982] ? __fget_files+0x2f8/0x520 [ 2691.037359] ? __fget_light+0xea/0x290 [ 2691.037717] __sys_sendmsg+0xe5/0x1b0 [ 2691.038051] ? __sys_sendmsg_sock+0x40/0x40 [ 2691.038422] ? rcu_read_lock_any_held+0x75/0xa0 [ 2691.038868] do_syscall_64+0x33/0x40 [ 2691.039192] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2691.039629] RIP: 0033:0x7fa05acd5b19 [ 2691.039959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2691.041508] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2691.042166] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2691.042775] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2691.043384] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2691.043985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2691.044588] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:01:44 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 48) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:01:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x2e0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) write(r0, &(0x7f0000000100)='U', 0xfeb5) 13:01:44 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x200000d4) pread64(r0, &(0x7f00000001c0)=""/4107, 0x100b, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="bed716987b050f6cd0e8442bea41aeecd3fda43e37550703bdd9797cfb39042a12e621a2e45432e624c1b558e9b9"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_mount_image$ext4(&(0x7f0000001480)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x1, &(0x7f0000000100)=[{&(0x7f0000001280)="6063f5f02f2048a0b05046f3ddd1193e22716ceb436b89fa223184f06d237974c341a45c9188af56d06abdb28ee20aa460f6168fb01a2f8d942e259d6ec57153213d09841b0fe8de6d2f5849c89f", 0x4e, 0x74}], 0x180011, &(0x7f00000014c0)={[], [{@context={'context', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, 'dioread_lock'}}, {@uid_gt={'uid>', r1}}, {@euid_gt={'euid>', 0xee00}}]}) ftruncate(r2, 0x8) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONE(r3, 0x40049409, r4) ioctl$SG_EMULATED_HOST(r3, 0x127c, &(0x7f0000000000)) 13:01:44 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:01:44 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x80) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0xb4, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x480c4}, 0x40011) 13:01:44 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x300}, 0xa90}) 13:01:44 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:01:44 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0x0, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) [ 2710.052940] FAULT_INJECTION: forcing a failure. [ 2710.052940] name failslab, interval 1, probability 0, space 0, times 0 [ 2710.053975] CPU: 0 PID: 28711 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2710.054560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2710.055261] Call Trace: [ 2710.055503] dump_stack+0x107/0x167 [ 2710.055830] should_fail.cold+0x5/0xa [ 2710.056170] ? create_object.isra.0+0x3a/0xa20 [ 2710.056573] should_failslab+0x5/0x20 [ 2710.056906] kmem_cache_alloc+0x5b/0x310 [ 2710.057357] create_object.isra.0+0x3a/0xa20 [ 2710.057740] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2710.058184] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2710.058619] ? skb_segment+0x9d8/0x3aa0 [ 2710.058974] __alloc_skb+0xb1/0x5b0 [ 2710.059301] skb_segment+0x9d8/0x3aa0 [ 2710.059700] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2710.060136] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2710.060583] ? SOFTIRQ_verbose+0x10/0x10 [ 2710.060944] __udp_gso_segment+0x11c6/0x1830 [ 2710.061353] ? __sk_receive_skb+0x830/0x830 [ 2710.061744] udp4_ufo_fragment+0x528/0x720 [ 2710.062117] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2710.062547] inet_gso_segment+0x4fb/0x11a0 [ 2710.062935] skb_mac_gso_segment+0x273/0x570 [ 2710.063313] ? inet_sock_destruct+0x840/0x840 [ 2710.063697] ? skb_network_protocol+0x650/0x650 [ 2710.064092] ? skb_crc32c_csum_help+0x80/0x80 [ 2710.064478] ? lock_acquire+0x197/0x470 [ 2710.064818] ? __dev_queue_xmit+0x1c2/0x2710 [ 2710.065232] __skb_gso_segment+0x32d/0x6d0 [ 2710.065617] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2710.066070] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2710.066469] __dev_queue_xmit+0x87b/0x2710 [ 2710.066852] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2710.067262] ? mark_held_locks+0x9e/0xe0 [ 2710.067622] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2710.068080] neigh_connected_output+0x382/0x4d0 [ 2710.068506] ip_finish_output2+0x6f1/0x21f0 [ 2710.068884] ? nf_hook_slow+0xfc/0x1e0 [ 2710.069256] ? ip_frag_next+0x9e0/0x9e0 [ 2710.069609] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2710.070056] __ip_finish_output.part.0+0x5f3/0xb50 [ 2710.070485] ? ip_fragment.constprop.0+0x240/0x240 [ 2710.070902] ? nf_hook+0x510/0x510 [ 2710.071230] ip_output+0x2f7/0x600 [ 2710.071549] ip_send_skb+0xdd/0x260 [ 2710.071872] udp_send_skb+0x6da/0x11d0 [ 2710.072232] udp_sendmsg+0x139a/0x2160 [ 2710.072571] ? tracing_generic_entry_update+0x1ed/0x270 [ 2710.073030] ? ip_frag_init+0x350/0x350 [ 2710.073406] ? tracing_generic_entry_update+0x1ed/0x270 [ 2710.073875] ? udp_setsockopt+0xc0/0xc0 [ 2710.074223] ? perf_event_switch_output+0x7d0/0x7d0 [ 2710.074682] ? lock_chain_count+0x20/0x20 [ 2710.075039] ? perf_tp_event+0x5ce/0xc00 [ 2710.075389] ? lock_chain_count+0x20/0x20 [ 2710.075761] ? perf_event_switch_output+0x7d0/0x7d0 [ 2710.076190] ? perf_swevent_event+0x6c/0x550 [ 2710.076588] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2710.076941] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2710.077419] ? udp_v6_push_pending_frames+0x360/0x360 [ 2710.077860] ? SOFTIRQ_verbose+0x10/0x10 [ 2710.078237] ? lock_acquire+0x197/0x470 [ 2710.078580] ? find_held_lock+0x2c/0x110 [ 2710.078942] ? __might_fault+0xd3/0x180 [ 2710.079286] ? lock_downgrade+0x6d0/0x6d0 [ 2710.079654] ? lock_downgrade+0x6d0/0x6d0 [ 2710.080019] ? sock_has_perm+0x1ea/0x280 [ 2710.080372] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2710.080825] ? _copy_from_user+0xfb/0x1b0 [ 2710.081389] ? __import_iovec+0x458/0x590 [ 2710.081766] ? udp_v6_push_pending_frames+0x360/0x360 [ 2710.082220] inet6_sendmsg+0x105/0x140 [ 2710.082564] ? inet6_compat_ioctl+0x320/0x320 [ 2710.082952] __sock_sendmsg+0xf2/0x190 [ 2710.083293] ____sys_sendmsg+0x70d/0x870 [ 2710.083652] ? sock_write_iter+0x3d0/0x3d0 [ 2710.084015] ? do_recvmmsg+0x6d0/0x6d0 [ 2710.084358] ? perf_trace_lock+0x2bd/0x490 [ 2710.084726] ? SOFTIRQ_verbose+0x10/0x10 [ 2710.085085] ? __lockdep_reset_lock+0x180/0x180 [ 2710.085527] ___sys_sendmsg+0xf3/0x170 [ 2710.085872] ? sendmsg_copy_msghdr+0x160/0x160 [ 2710.086277] ? __fget_files+0x2cf/0x520 [ 2710.086624] ? lock_downgrade+0x6d0/0x6d0 [ 2710.086988] ? find_held_lock+0x2c/0x110 [ 2710.087363] ? __fget_files+0x2f8/0x520 [ 2710.087725] ? __fget_light+0xea/0x290 [ 2710.088081] __sys_sendmsg+0xe5/0x1b0 [ 2710.088414] ? __sys_sendmsg_sock+0x40/0x40 [ 2710.088791] ? rcu_read_lock_any_held+0x75/0xa0 [ 2710.089274] do_syscall_64+0x33/0x40 [ 2710.089641] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2710.090118] RIP: 0033:0x7fa05acd5b19 [ 2710.090490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2710.092103] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2710.092779] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2710.093462] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2710.094097] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2710.094719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2710.095313] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:01:44 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:01:44 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x20000, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="407099afa5645930ae8d3752723388e572ba296e75e5f2922659bf59da1bda38b32258b5784ff19090580fadaa2eacc4cd991cd9e237d3363e32152548e2c0956c3111c9cf082ef7deb92c410ff19ad005436ce3ff27a4092393c346018cd9bc48a0d92cdfb3a2227d997a20b1a2188cfe41ef69904456a9dbf7b012d55481dcf795019f55a2d55a5d061de669d85a6017faf647a50e2813cf7faf0fad86d875710e8c09dacae4cdc924bb502dff50c58999f56084b65e2debce550b671ab6fdcfd343e05ba6d6f62870606e9abb"]) 13:01:44 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 49) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:01:44 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:01:44 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0x0, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:01:44 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x500}, 0xa90}) 13:01:44 executing program 1: clone3(&(0x7f00000008c0)={0x23040100, 0x0, 0x0, 0x0, {0x3f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:01:44 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0xffffffffffffff04, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}]) r4 = dup3(r0, r1, 0x80000) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x48104, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) io_submit(r3, 0x3, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x6, r1, &(0x7f0000000080)="534c4a95c811", 0x6, 0x0, 0x0, 0x2, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x6, r5, &(0x7f0000000280)="ac4ad3837f57671a4d422186613b816880d3cf8930a0452cf765741914794ecd7db47dac1829a2efd84f4ca90553f2644f20790c36cd6beeb34fac67679c28", 0x3f, 0x2414}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x6, r6, &(0x7f0000000400)="c76b0838bf8e5d803f6c5d08a8f06b1f37633a73ec7d838a4efed4589565b83d06fcb781eb0d3c8cb8faab82ab57aa8d2b72976cbcec1031ee72bc8c05d783de5bb8e0f673b10fd9006ce756ab7e8d3659d02da8ccb4600ea3188dfb2f2973bf715b0a7d163de87cc9e85994d46b7a6bbdd370986dbc8d4f5b77f0251db0d211", 0x80, 0x100000000, 0x0, 0x1}]) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x2, 0x1, 0x101}, 0x14}}, 0x0) [ 2710.988047] FAULT_INJECTION: forcing a failure. [ 2710.988047] name failslab, interval 1, probability 0, space 0, times 0 [ 2710.989215] CPU: 0 PID: 29042 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2710.989883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2710.990706] Call Trace: [ 2710.990979] dump_stack+0x107/0x167 [ 2710.991353] should_fail.cold+0x5/0xa [ 2710.991745] ? trace_hardirqs_on+0x5b/0x180 [ 2710.992171] ? __alloc_skb+0x6d/0x5b0 [ 2710.992570] should_failslab+0x5/0x20 [ 2710.992950] kmem_cache_alloc_node+0x55/0x330 [ 2710.993445] __alloc_skb+0x6d/0x5b0 [ 2710.993837] skb_segment+0x9d8/0x3aa0 [ 2710.994289] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2710.994777] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2710.995958] ? SOFTIRQ_verbose+0x10/0x10 [ 2710.996401] __udp_gso_segment+0x11c6/0x1830 [ 2710.996871] ? __sk_receive_skb+0x830/0x830 [ 2710.997369] udp4_ufo_fragment+0x528/0x720 [ 2710.997831] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2710.998359] inet_gso_segment+0x4fb/0x11a0 [ 2710.998827] skb_mac_gso_segment+0x273/0x570 [ 2710.999298] ? inet_sock_destruct+0x840/0x840 [ 2710.999769] ? skb_network_protocol+0x650/0x650 [ 2711.000269] ? skb_crc32c_csum_help+0x80/0x80 [ 2711.000752] ? lock_acquire+0x197/0x470 [ 2711.001170] ? __dev_queue_xmit+0x1c2/0x2710 [ 2711.001668] __skb_gso_segment+0x32d/0x6d0 [ 2711.002139] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2711.002685] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2711.003153] __dev_queue_xmit+0x87b/0x2710 [ 2711.003618] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2711.004121] ? mark_held_locks+0x9e/0xe0 [ 2711.004548] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2711.005037] neigh_connected_output+0x382/0x4d0 [ 2711.005490] ip_finish_output2+0x6f1/0x21f0 [ 2711.005873] ? nf_hook_slow+0xfc/0x1e0 [ 2711.006212] ? ip_frag_next+0x9e0/0x9e0 [ 2711.006560] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2711.007003] __ip_finish_output.part.0+0x5f3/0xb50 [ 2711.007428] ? ip_fragment.constprop.0+0x240/0x240 [ 2711.007843] ? nf_hook+0x510/0x510 [ 2711.008171] ip_output+0x2f7/0x600 [ 2711.008489] ip_send_skb+0xdd/0x260 [ 2711.008811] udp_send_skb+0x6da/0x11d0 [ 2711.009183] udp_sendmsg+0x139a/0x2160 [ 2711.009546] ? tracing_generic_entry_update+0x1ed/0x270 [ 2711.010004] ? ip_frag_init+0x350/0x350 [ 2711.010345] ? tracing_generic_entry_update+0x1ed/0x270 [ 2711.010810] ? udp_setsockopt+0xc0/0xc0 [ 2711.011157] ? perf_event_switch_output+0x7d0/0x7d0 [ 2711.011618] ? lock_chain_count+0x20/0x20 [ 2711.011976] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2711.012402] ? lock_chain_count+0x20/0x20 [ 2711.012757] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2711.013250] ? perf_trace_lock+0x2bd/0x490 [ 2711.014243] ? perf_swevent_event+0x6c/0x550 [ 2711.014700] ? __lockdep_reset_lock+0x180/0x180 [ 2711.015222] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2711.015652] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2711.016188] ? udp_v6_push_pending_frames+0x360/0x360 [ 2711.016719] ? SOFTIRQ_verbose+0x10/0x10 [ 2711.017190] ? lock_acquire+0x197/0x470 [ 2711.017659] ? find_held_lock+0x2c/0x110 [ 2711.018107] ? __might_fault+0xd3/0x180 [ 2711.018539] ? lock_downgrade+0x6d0/0x6d0 [ 2711.018994] ? lock_downgrade+0x6d0/0x6d0 [ 2711.019441] ? sock_has_perm+0x1ea/0x280 [ 2711.019861] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2711.020398] ? _copy_from_user+0xfb/0x1b0 [ 2711.020862] ? __import_iovec+0x458/0x590 [ 2711.021338] ? udp_v6_push_pending_frames+0x360/0x360 [ 2711.021922] inet6_sendmsg+0x105/0x140 [ 2711.022371] ? inet6_compat_ioctl+0x320/0x320 [ 2711.022875] __sock_sendmsg+0xf2/0x190 [ 2711.023320] ____sys_sendmsg+0x70d/0x870 [ 2711.023795] ? sock_write_iter+0x3d0/0x3d0 [ 2711.024273] ? do_recvmmsg+0x6d0/0x6d0 [ 2711.024718] ? perf_trace_lock+0x2bd/0x490 [ 2711.025206] ? SOFTIRQ_verbose+0x10/0x10 [ 2711.025690] ? __lockdep_reset_lock+0x180/0x180 [ 2711.026221] ___sys_sendmsg+0xf3/0x170 [ 2711.026652] ? sendmsg_copy_msghdr+0x160/0x160 [ 2711.027128] ? __fget_files+0x2cf/0x520 [ 2711.027531] ? lock_downgrade+0x6d0/0x6d0 [ 2711.027975] ? find_held_lock+0x2c/0x110 [ 2711.028434] ? __fget_files+0x2f8/0x520 [ 2711.028812] ? __fget_light+0xea/0x290 [ 2711.029181] __sys_sendmsg+0xe5/0x1b0 [ 2711.029555] ? __sys_sendmsg_sock+0x40/0x40 [ 2711.029964] ? rcu_read_lock_any_held+0x75/0xa0 [ 2711.030470] do_syscall_64+0x33/0x40 [ 2711.030833] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2711.031316] RIP: 0033:0x7fa05acd5b19 [ 2711.031673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2711.033356] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2711.034071] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2711.034735] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2711.035399] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2711.036061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2711.036713] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 [ 2711.114124] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2711.125337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=29206 comm=syz-executor.6 13:02:06 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:02:06 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:02:06 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, r0, 0x8000000) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000300)=0xe, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x200681, 0x104) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed}, 0x32) r4 = dup2(r3, r2) inotify_rm_watch(r4, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000640)="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") signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x2]}, 0x8) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000340)="1cf2e2f5d3637de1e79489e7f9668090a3a2d966386b18737171c377e1fbce263ba6c5979a2da8ac7888090000005e3435348bef9927beec61945a4d6cdfa22f0562156ffb731691f7103e7fe621b8e480d514e7c6ab140bd6e11f0bb66253ab6786f27147c513660c987f73c2e8aaf0d7f47ef653dd58fa2c41920293d7f120b3a261d1db025e6fa61046ad382f0dc52de87b90103ca1508545afea946b977bfc701bef32734c2a6e1f7eff14fb6950f8da5aa2573c80881c7c4bd1ce4c66ca8fa20c2864cdc2efa416f4ae89a9bdfc8b775edb9401858f642e1d76a55cf2ddc6a5d511f328980e5b06a084afac0954a1107a6067974642c13fa804721f0916") fstatfs(r2, &(0x7f0000000280)=""/89) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 13:02:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a0870925cdb5d80eb689f80ea6ff07d3876a48c6519dad01907103c1df3928cb15b27437eb6e9", 0x91, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000180)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x72900, 0x40) 13:02:06 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:02:06 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x600}, 0xa90}) 13:02:06 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 50) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:02:06 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02000000009b04f4072860f5050a39067cd64a88e13cbd1db225c5460000000000000000000000000000528482a38bf1354e248989a7b1a1cb939764e4be40785056c4aa1dca8a029c28ecac36c19997a73747dd6b07455459180911a46eb0049253b40a34cd25373b0d821a186d20815477e60d00c95c5a1ae5db401a01a0485682"], 0x14}}, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000d, 0x30, r1, 0x58030000) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) [ 2732.242575] FAULT_INJECTION: forcing a failure. [ 2732.242575] name failslab, interval 1, probability 0, space 0, times 0 [ 2732.243638] CPU: 0 PID: 29363 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2732.244222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2732.244919] Call Trace: [ 2732.245159] dump_stack+0x107/0x167 [ 2732.245510] should_fail.cold+0x5/0xa [ 2732.245846] ? trace_hardirqs_on+0x5b/0x180 [ 2732.246227] ? __alloc_skb+0x6d/0x5b0 [ 2732.246575] should_failslab+0x5/0x20 [ 2732.246910] kmem_cache_alloc_node+0x55/0x330 [ 2732.247315] __alloc_skb+0x6d/0x5b0 [ 2732.247650] skb_segment+0x9d8/0x3aa0 [ 2732.248058] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2732.248502] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2732.248959] ? SOFTIRQ_verbose+0x10/0x10 [ 2732.249328] __udp_gso_segment+0x11c6/0x1830 [ 2732.249741] ? __sk_receive_skb+0x830/0x830 [ 2732.250137] udp4_ufo_fragment+0x528/0x720 [ 2732.250518] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2732.250961] inet_gso_segment+0x4fb/0x11a0 [ 2732.251358] skb_mac_gso_segment+0x273/0x570 [ 2732.251746] ? inet_sock_destruct+0x840/0x840 [ 2732.252138] ? skb_network_protocol+0x650/0x650 [ 2732.252543] ? skb_crc32c_csum_help+0x80/0x80 [ 2732.252937] ? lock_acquire+0x197/0x470 [ 2732.253284] ? __dev_queue_xmit+0x1c2/0x2710 [ 2732.253701] __skb_gso_segment+0x32d/0x6d0 [ 2732.254087] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2732.254546] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2732.254952] __dev_queue_xmit+0x87b/0x2710 [ 2732.255344] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2732.255767] ? mark_held_locks+0x9e/0xe0 [ 2732.256133] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2732.256604] neigh_connected_output+0x382/0x4d0 [ 2732.257036] ip_finish_output2+0x6f1/0x21f0 [ 2732.257435] ? nf_hook_slow+0xfc/0x1e0 [ 2732.257784] ? ip_frag_next+0x9e0/0x9e0 [ 2732.258135] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2732.258589] __ip_finish_output.part.0+0x5f3/0xb50 [ 2732.259023] ? ip_fragment.constprop.0+0x240/0x240 [ 2732.259446] ? nf_hook+0x510/0x510 [ 2732.259787] ip_output+0x2f7/0x600 [ 2732.260112] ip_send_skb+0xdd/0x260 [ 2732.260440] udp_send_skb+0x6da/0x11d0 [ 2732.260805] udp_sendmsg+0x139a/0x2160 [ 2732.261149] ? tracing_generic_entry_update+0x1ed/0x270 [ 2732.261633] ? ip_frag_init+0x350/0x350 [ 2732.261984] ? tracing_generic_entry_update+0x1ed/0x270 [ 2732.262458] ? udp_setsockopt+0xc0/0xc0 [ 2732.262813] ? perf_event_switch_output+0x7d0/0x7d0 [ 2732.263281] ? lock_chain_count+0x20/0x20 [ 2732.263647] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2732.269689] ? lock_chain_count+0x20/0x20 [ 2732.270045] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2732.270486] ? perf_trace_lock+0x2bd/0x490 [ 2732.270850] ? perf_swevent_event+0x6c/0x550 [ 2732.271225] ? __lockdep_reset_lock+0x180/0x180 [ 2732.271647] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2732.272001] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2732.272446] ? udp_v6_push_pending_frames+0x360/0x360 [ 2732.272889] ? SOFTIRQ_verbose+0x10/0x10 [ 2732.273265] ? lock_acquire+0x197/0x470 [ 2732.277629] ? find_held_lock+0x2c/0x110 [ 2732.277992] ? __might_fault+0xd3/0x180 [ 2732.278336] ? lock_downgrade+0x6d0/0x6d0 [ 2732.278702] ? lock_downgrade+0x6d0/0x6d0 [ 2732.279066] ? sock_has_perm+0x1ea/0x280 [ 2732.279418] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2732.279869] ? _copy_from_user+0xfb/0x1b0 [ 2732.280249] ? __import_iovec+0x458/0x590 [ 2732.280609] ? udp_v6_push_pending_frames+0x360/0x360 [ 2732.281059] inet6_sendmsg+0x105/0x140 [ 2732.281419] ? inet6_compat_ioctl+0x320/0x320 [ 2732.281811] __sock_sendmsg+0xf2/0x190 [ 2732.282151] ____sys_sendmsg+0x70d/0x870 [ 2732.282508] ? sock_write_iter+0x3d0/0x3d0 [ 2732.282874] ? do_recvmmsg+0x6d0/0x6d0 [ 2732.283211] ? perf_trace_lock+0x2bd/0x490 [ 2732.283575] ? SOFTIRQ_verbose+0x10/0x10 [ 2732.283933] ? __lockdep_reset_lock+0x180/0x180 [ 2732.284343] ___sys_sendmsg+0xf3/0x170 [ 2732.284689] ? sendmsg_copy_msghdr+0x160/0x160 [ 2732.285090] ? __fget_files+0x2cf/0x520 [ 2732.285450] ? lock_downgrade+0x6d0/0x6d0 [ 2732.285811] ? find_held_lock+0x2c/0x110 [ 2732.286183] ? __fget_files+0x2f8/0x520 [ 2732.286544] ? __fget_light+0xea/0x290 [ 2732.286898] __sys_sendmsg+0xe5/0x1b0 [ 2732.287230] ? __sys_sendmsg_sock+0x40/0x40 [ 2732.287600] ? rcu_read_lock_any_held+0x75/0xa0 [ 2732.288048] do_syscall_64+0x33/0x40 [ 2732.288370] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2732.288808] RIP: 0033:0x7fa05acd5b19 [ 2732.289131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2732.290698] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2732.291346] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2732.291949] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2732.292552] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2732.293156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2732.293779] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:02:06 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:02:07 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:02:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x70) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x1, r6, 0x1, 0x8, 0x6, @random="190002400a00"}, 0x14) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40041}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05fd15967b20000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 13:02:07 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000001900)=[{0x0, 0x0, 0x7fff}]) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup(r0) pidfd_send_signal(r1, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r2 = syz_io_uring_setup(0x15c, &(0x7f0000000480)={0x0, 0x0, 0x34, 0x0, 0x372, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000440)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xfdef) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2, 0x0, 0xc}, 0x20) syz_io_uring_submit(r3, 0x0, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@nl=@unspec}, 0x1) syz_io_uring_setup(0x5b7e, &(0x7f0000000380)={0x0, 0xd819, 0x0, 0x2, 0x4e, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x5}, 0x3) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x989680}, 0x1, 0x0, 0x1}, 0x0) 13:02:07 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x10882, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:02:07 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 51) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:02:07 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x700}, 0xa90}) [ 2733.208992] FAULT_INJECTION: forcing a failure. [ 2733.208992] name failslab, interval 1, probability 0, space 0, times 0 [ 2733.214077] CPU: 0 PID: 29846 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2733.214667] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2733.215356] Call Trace: [ 2733.215595] dump_stack+0x107/0x167 [ 2733.215917] should_fail.cold+0x5/0xa [ 2733.216264] should_failslab+0x5/0x20 [ 2733.216598] __kmalloc_node_track_caller+0x74/0x3b0 [ 2733.217028] ? skb_segment+0x9d8/0x3aa0 [ 2733.217407] __alloc_skb+0xb1/0x5b0 [ 2733.217744] skb_segment+0x9d8/0x3aa0 [ 2733.218144] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2733.218585] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2733.219035] ? SOFTIRQ_verbose+0x10/0x10 [ 2733.219407] __udp_gso_segment+0x11c6/0x1830 [ 2733.219787] ? __sk_receive_skb+0x830/0x830 [ 2733.220176] udp4_ufo_fragment+0x528/0x720 [ 2733.220553] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2733.220987] inet_gso_segment+0x4fb/0x11a0 [ 2733.221394] skb_mac_gso_segment+0x273/0x570 [ 2733.221782] ? inet_sock_destruct+0x840/0x840 [ 2733.222168] ? skb_network_protocol+0x650/0x650 [ 2733.222566] ? skb_crc32c_csum_help+0x80/0x80 [ 2733.222954] ? lock_acquire+0x197/0x470 [ 2733.223300] ? __dev_queue_xmit+0x1c2/0x2710 [ 2733.223695] __skb_gso_segment+0x32d/0x6d0 [ 2733.224076] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2733.224532] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2733.224934] __dev_queue_xmit+0x87b/0x2710 [ 2733.225320] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2733.225747] ? mark_held_locks+0x9e/0xe0 [ 2733.226109] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2733.226572] neigh_connected_output+0x382/0x4d0 [ 2733.227000] ip_finish_output2+0x6f1/0x21f0 [ 2733.227386] ? nf_hook_slow+0xfc/0x1e0 [ 2733.227736] ? ip_frag_next+0x9e0/0x9e0 [ 2733.228082] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2733.228531] __ip_finish_output.part.0+0x5f3/0xb50 [ 2733.228959] ? ip_fragment.constprop.0+0x240/0x240 [ 2733.229396] ? nf_hook+0x510/0x510 [ 2733.229734] ip_output+0x2f7/0x600 [ 2733.230052] ip_send_skb+0xdd/0x260 [ 2733.230382] udp_send_skb+0x6da/0x11d0 [ 2733.230743] udp_sendmsg+0x139a/0x2160 [ 2733.231080] ? tracing_generic_entry_update+0x1ed/0x270 [ 2733.231541] ? ip_frag_init+0x350/0x350 [ 2733.231883] ? tracing_generic_entry_update+0x1ed/0x270 [ 2733.232347] ? udp_setsockopt+0xc0/0xc0 [ 2733.232697] ? perf_event_switch_output+0x7d0/0x7d0 [ 2733.233153] ? lock_chain_count+0x20/0x20 [ 2733.233536] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2733.233964] ? lock_chain_count+0x20/0x20 [ 2733.234319] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2733.234787] ? perf_trace_lock+0x2bd/0x490 [ 2733.235153] ? perf_swevent_event+0x6c/0x550 [ 2733.235527] ? __lockdep_reset_lock+0x180/0x180 [ 2733.241781] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2733.242136] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2733.242580] ? udp_v6_push_pending_frames+0x360/0x360 [ 2733.243018] ? SOFTIRQ_verbose+0x10/0x10 [ 2733.243393] ? lock_acquire+0x197/0x470 [ 2733.243733] ? find_held_lock+0x2c/0x110 [ 2733.244094] ? __might_fault+0xd3/0x180 [ 2733.244439] ? lock_downgrade+0x6d0/0x6d0 [ 2733.244802] ? lock_downgrade+0x6d0/0x6d0 [ 2733.245165] ? sock_has_perm+0x1ea/0x280 [ 2733.245524] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2733.245985] ? _copy_from_user+0xfb/0x1b0 [ 2733.246368] ? __import_iovec+0x458/0x590 [ 2733.246726] ? udp_v6_push_pending_frames+0x360/0x360 [ 2733.247182] inet6_sendmsg+0x105/0x140 [ 2733.247528] ? inet6_compat_ioctl+0x320/0x320 [ 2733.247915] __sock_sendmsg+0xf2/0x190 [ 2733.248255] ____sys_sendmsg+0x70d/0x870 [ 2733.248611] ? sock_write_iter+0x3d0/0x3d0 [ 2733.248972] ? do_recvmmsg+0x6d0/0x6d0 [ 2733.249308] ? perf_trace_lock+0x2bd/0x490 [ 2733.249686] ? SOFTIRQ_verbose+0x10/0x10 [ 2733.250042] ? __lockdep_reset_lock+0x180/0x180 [ 2733.250452] ___sys_sendmsg+0xf3/0x170 [ 2733.250794] ? sendmsg_copy_msghdr+0x160/0x160 [ 2733.251197] ? __fget_files+0x2cf/0x520 [ 2733.251541] ? lock_downgrade+0x6d0/0x6d0 [ 2733.251901] ? find_held_lock+0x2c/0x110 [ 2733.252271] ? __fget_files+0x2f8/0x520 [ 2733.252631] ? __fget_light+0xea/0x290 [ 2733.252985] __sys_sendmsg+0xe5/0x1b0 [ 2733.253315] ? __sys_sendmsg_sock+0x40/0x40 [ 2733.253709] ? rcu_read_lock_any_held+0x75/0xa0 [ 2733.254156] do_syscall_64+0x33/0x40 [ 2733.254480] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2733.254917] RIP: 0033:0x7fa05acd5b19 [ 2733.255237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2733.256785] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2733.257461] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2733.258066] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2733.258668] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2733.259268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2733.259874] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:02:26 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r2 = socket$inet(0x2, 0x800, 0xffdffffe) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:02:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x70) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x1, r6, 0x1, 0x8, 0x6, @random="190002400a00"}, 0x14) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40041}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05fd15967b20000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 13:02:26 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 52) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:02:26 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:02:26 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x4000}, 0xa90}) 13:02:26 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:02:26 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:02:26 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2752.191021] FAULT_INJECTION: forcing a failure. [ 2752.191021] name failslab, interval 1, probability 0, space 0, times 0 [ 2752.192712] CPU: 0 PID: 30002 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2752.193338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2752.194125] Call Trace: [ 2752.194385] dump_stack+0x107/0x167 [ 2752.194746] should_fail.cold+0x5/0xa [ 2752.195127] should_failslab+0x5/0x20 [ 2752.195497] __kmalloc_node_track_caller+0x74/0x3b0 [ 2752.195986] ? skb_segment+0x9d8/0x3aa0 [ 2752.196387] __alloc_skb+0xb1/0x5b0 [ 2752.196752] skb_segment+0x9d8/0x3aa0 [ 2752.197193] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2752.197682] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2752.198468] ? SOFTIRQ_verbose+0x10/0x10 [ 2752.198872] __udp_gso_segment+0x11c6/0x1830 [ 2752.199959] ? __sk_receive_skb+0x830/0x830 [ 2752.200390] udp4_ufo_fragment+0x528/0x720 [ 2752.200808] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2752.201290] inet_gso_segment+0x4fb/0x11a0 [ 2752.201734] skb_mac_gso_segment+0x273/0x570 [ 2752.202162] ? inet_sock_destruct+0x840/0x840 [ 2752.202594] ? skb_network_protocol+0x650/0x650 [ 2752.203044] ? skb_crc32c_csum_help+0x80/0x80 [ 2752.203475] ? lock_acquire+0x197/0x470 [ 2752.203859] ? __dev_queue_xmit+0x1c2/0x2710 [ 2752.204298] __skb_gso_segment+0x32d/0x6d0 [ 2752.204717] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2752.205231] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2752.205685] __dev_queue_xmit+0x87b/0x2710 [ 2752.206115] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2752.206576] ? mark_held_locks+0x9e/0xe0 [ 2752.207830] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2752.208419] neigh_connected_output+0x382/0x4d0 [ 2752.208962] ip_finish_output2+0x6f1/0x21f0 [ 2752.209430] ? nf_hook_slow+0xfc/0x1e0 [ 2752.209947] ? ip_frag_next+0x9e0/0x9e0 [ 2752.210325] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2752.210983] __ip_finish_output.part.0+0x5f3/0xb50 [ 2752.211546] ? ip_fragment.constprop.0+0x240/0x240 [ 2752.212144] ? nf_hook+0x510/0x510 [ 2752.212617] ip_output+0x2f7/0x600 [ 2752.213039] ip_send_skb+0xdd/0x260 [ 2752.213516] udp_send_skb+0x6da/0x11d0 [ 2752.214046] udp_sendmsg+0x139a/0x2160 [ 2752.214530] ? tracing_generic_entry_update+0x1ed/0x270 [ 2752.215171] ? ip_frag_init+0x350/0x350 [ 2752.217203] ? tracing_generic_entry_update+0x1ed/0x270 [ 2752.217965] ? udp_setsockopt+0xc0/0xc0 [ 2752.218914] ? perf_event_switch_output+0x7d0/0x7d0 [ 2752.219586] ? lock_chain_count+0x20/0x20 [ 2752.220152] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2752.221328] ? lock_chain_count+0x20/0x20 [ 2752.223504] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2752.226519] ? perf_trace_lock+0x2bd/0x490 [ 2752.228556] ? perf_swevent_event+0x6c/0x550 [ 2752.230988] ? __lockdep_reset_lock+0x180/0x180 [ 2752.234256] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2752.236308] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2752.238482] ? udp_v6_push_pending_frames+0x360/0x360 [ 2752.238974] ? SOFTIRQ_verbose+0x10/0x10 [ 2752.239387] ? lock_acquire+0x197/0x470 [ 2752.239764] ? find_held_lock+0x2c/0x110 [ 2752.241989] ? __might_fault+0xd3/0x180 [ 2752.243489] ? lock_downgrade+0x6d0/0x6d0 [ 2752.243893] ? lock_downgrade+0x6d0/0x6d0 [ 2752.244286] ? sock_has_perm+0x1ea/0x280 [ 2752.245876] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2752.246750] ? _copy_from_user+0xfb/0x1b0 [ 2752.247170] ? __import_iovec+0x458/0x590 [ 2752.247564] ? udp_v6_push_pending_frames+0x360/0x360 [ 2752.251093] inet6_sendmsg+0x105/0x140 [ 2752.251463] ? inet6_compat_ioctl+0x320/0x320 [ 2752.251886] __sock_sendmsg+0xf2/0x190 [ 2752.252260] ____sys_sendmsg+0x70d/0x870 [ 2752.252658] ? sock_write_iter+0x3d0/0x3d0 [ 2752.253057] ? do_recvmmsg+0x6d0/0x6d0 [ 2752.253426] ? perf_trace_lock+0x2bd/0x490 [ 2752.253838] ? SOFTIRQ_verbose+0x10/0x10 [ 2752.254236] ? __lockdep_reset_lock+0x180/0x180 [ 2752.254686] ___sys_sendmsg+0xf3/0x170 [ 2752.255057] ? sendmsg_copy_msghdr+0x160/0x160 [ 2752.255483] ? __fget_files+0x2cf/0x520 [ 2752.261009] ? lock_downgrade+0x6d0/0x6d0 [ 2752.264078] ? find_held_lock+0x2c/0x110 [ 2752.264643] ? __fget_files+0x2f8/0x520 [ 2752.265828] ? __fget_light+0xea/0x290 [ 2752.266963] __sys_sendmsg+0xe5/0x1b0 [ 2752.268073] ? __sys_sendmsg_sock+0x40/0x40 [ 2752.269943] ? rcu_read_lock_any_held+0x75/0xa0 [ 2752.271528] do_syscall_64+0x33/0x40 [ 2752.272579] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2752.273943] RIP: 0033:0x7fa05acd5b19 [ 2752.275906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2752.282108] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2752.284266] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2752.286438] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2752.289133] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2752.291185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2752.293313] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:02:27 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:02:27 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x804, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000082505a1a440000102030109023e000101c1e015090400fb0321550d24ff0000cb0351775d8bc25e841b017d09050302"], &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x45, &(0x7f0000000080)={0x5, 0xf, 0x45, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x73, "27d7474d5e78b47fb717d5d3f77cfbac"}, @ssp_cap={0x18, 0x10, 0xa, 0x47, 0x3, 0x3, 0x880, 0x3704, [0xbe00, 0xffc000, 0xde]}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x5, 0xf00, 0x3, [0x3f00, 0x3e8f]}]}, 0x1, [{0x2, &(0x7f0000000280)=@string={0x2}}]}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0xc0304, 0x20) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000340)={0x1, 0x10, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0]}) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) sendfile(r1, r0, 0x0, 0x10001) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x1d, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x1, 0x0, 0x0, @u32}]}, 0x24}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4040, 0x42) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:02:27 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4004004) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:02:27 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:02:27 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:02:27 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 53) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:02:27 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:02:27 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x20000}, 0xa90}) [ 2753.014688] FAULT_INJECTION: forcing a failure. [ 2753.014688] name failslab, interval 1, probability 0, space 0, times 0 [ 2753.015865] CPU: 0 PID: 30330 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2753.016543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2753.017333] Call Trace: [ 2753.017609] dump_stack+0x107/0x167 [ 2753.017986] should_fail.cold+0x5/0xa [ 2753.018372] ? trace_hardirqs_on+0x5b/0x180 [ 2753.018803] ? __alloc_skb+0x6d/0x5b0 [ 2753.019187] should_failslab+0x5/0x20 [ 2753.019567] kmem_cache_alloc_node+0x55/0x330 [ 2753.020016] __alloc_skb+0x6d/0x5b0 [ 2753.020394] skb_segment+0x9d8/0x3aa0 [ 2753.020849] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2753.021363] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2753.021886] ? SOFTIRQ_verbose+0x10/0x10 [ 2753.022923] __udp_gso_segment+0x11c6/0x1830 [ 2753.023385] ? __sk_receive_skb+0x830/0x830 [ 2753.023845] udp4_ufo_fragment+0x528/0x720 [ 2753.024295] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2753.024807] inet_gso_segment+0x4fb/0x11a0 [ 2753.025275] skb_mac_gso_segment+0x273/0x570 [ 2753.025747] ? inet_sock_destruct+0x840/0x840 [ 2753.026209] ? skb_network_protocol+0x650/0x650 [ 2753.026679] ? skb_crc32c_csum_help+0x80/0x80 [ 2753.027143] ? lock_acquire+0x197/0x470 [ 2753.027558] ? __dev_queue_xmit+0x1c2/0x2710 [ 2753.028030] __skb_gso_segment+0x32d/0x6d0 [ 2753.028480] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2753.029033] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2753.029521] __dev_queue_xmit+0x87b/0x2710 [ 2753.029986] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2753.030484] ? mark_held_locks+0x9e/0xe0 [ 2753.030912] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2753.031461] neigh_connected_output+0x382/0x4d0 [ 2753.031961] ip_finish_output2+0x6f1/0x21f0 [ 2753.032414] ? nf_hook_slow+0xfc/0x1e0 [ 2753.032831] ? ip_frag_next+0x9e0/0x9e0 [ 2753.033243] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2753.033792] __ip_finish_output.part.0+0x5f3/0xb50 [ 2753.034305] ? ip_fragment.constprop.0+0x240/0x240 [ 2753.034803] ? nf_hook+0x510/0x510 [ 2753.035199] ip_output+0x2f7/0x600 [ 2753.035537] ip_send_skb+0xdd/0x260 [ 2753.035865] udp_send_skb+0x6da/0x11d0 [ 2753.036227] udp_sendmsg+0x139a/0x2160 [ 2753.037011] ? tracing_generic_entry_update+0x1ed/0x270 [ 2753.037578] ? ip_frag_init+0x350/0x350 [ 2753.038531] ? tracing_generic_entry_update+0x1ed/0x270 [ 2753.039796] ? udp_setsockopt+0xc0/0xc0 [ 2753.040722] ? perf_event_switch_output+0x7d0/0x7d0 [ 2753.041941] ? lock_chain_count+0x20/0x20 [ 2753.042933] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2753.044124] ? lock_chain_count+0x20/0x20 [ 2753.045109] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2753.046317] ? perf_trace_lock+0x2bd/0x490 [ 2753.047320] ? perf_swevent_event+0x6c/0x550 [ 2753.048373] ? __lockdep_reset_lock+0x180/0x180 [ 2753.049500] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2753.050474] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2753.051672] ? udp_v6_push_pending_frames+0x360/0x360 [ 2753.052885] ? SOFTIRQ_verbose+0x10/0x10 [ 2753.053895] ? lock_acquire+0x197/0x470 [ 2753.054850] ? find_held_lock+0x2c/0x110 [ 2753.055837] ? __might_fault+0xd3/0x180 [ 2753.056788] ? lock_downgrade+0x6d0/0x6d0 [ 2753.057799] ? lock_downgrade+0x6d0/0x6d0 [ 2753.058782] ? sock_has_perm+0x1ea/0x280 [ 2753.059745] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2753.060990] ? _copy_from_user+0xfb/0x1b0 [ 2753.061992] ? __import_iovec+0x458/0x590 [ 2753.062972] ? udp_v6_push_pending_frames+0x360/0x360 [ 2753.064206] inet6_sendmsg+0x105/0x140 [ 2753.065134] ? inet6_compat_ioctl+0x320/0x320 [ 2753.065768] __sock_sendmsg+0xf2/0x190 [ 2753.066291] ____sys_sendmsg+0x70d/0x870 [ 2753.066744] ? sock_write_iter+0x3d0/0x3d0 [ 2753.067367] ? do_recvmmsg+0x6d0/0x6d0 [ 2753.067939] ? perf_trace_lock+0x2bd/0x490 [ 2753.068595] ? SOFTIRQ_verbose+0x10/0x10 [ 2753.069021] ? __lockdep_reset_lock+0x180/0x180 [ 2753.069513] ___sys_sendmsg+0xf3/0x170 [ 2753.069942] ? sendmsg_copy_msghdr+0x160/0x160 [ 2753.070420] ? __fget_files+0x2cf/0x520 [ 2753.070834] ? lock_downgrade+0x6d0/0x6d0 [ 2753.071261] ? find_held_lock+0x2c/0x110 [ 2753.071701] ? __fget_files+0x2f8/0x520 [ 2753.072130] ? __fget_light+0xea/0x290 [ 2753.072548] __sys_sendmsg+0xe5/0x1b0 [ 2753.073367] ? __sys_sendmsg_sock+0x40/0x40 [ 2753.073953] ? rcu_read_lock_any_held+0x75/0xa0 [ 2753.074477] do_syscall_64+0x33/0x40 [ 2753.074871] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2753.075393] RIP: 0033:0x7fa05acd5b19 [ 2753.075779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2753.077577] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2753.078345] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 13:02:27 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2753.079052] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2753.079674] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2753.080280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2753.085958] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:02:27 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 54) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) [ 2753.487990] FAULT_INJECTION: forcing a failure. [ 2753.487990] name failslab, interval 1, probability 0, space 0, times 0 [ 2753.489148] CPU: 0 PID: 30640 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2753.489837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2753.490628] Call Trace: [ 2753.490896] dump_stack+0x107/0x167 [ 2753.491257] should_fail.cold+0x5/0xa [ 2753.491646] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2753.492159] ? create_object.isra.0+0x3a/0xa20 [ 2753.492612] should_failslab+0x5/0x20 [ 2753.492986] kmem_cache_alloc+0x5b/0x310 [ 2753.493391] ? mark_held_locks+0x9e/0xe0 [ 2753.494287] create_object.isra.0+0x3a/0xa20 [ 2753.494751] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2753.496089] kmem_cache_alloc_node+0x169/0x330 [ 2753.497159] __alloc_skb+0x6d/0x5b0 [ 2753.497562] skb_segment+0x9d8/0x3aa0 [ 2753.498537] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2753.499669] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2753.500879] ? SOFTIRQ_verbose+0x10/0x10 [ 2753.501832] __udp_gso_segment+0x11c6/0x1830 [ 2753.502836] ? __sk_receive_skb+0x830/0x830 [ 2753.503827] udp4_ufo_fragment+0x528/0x720 [ 2753.504803] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2753.505957] inet_gso_segment+0x4fb/0x11a0 [ 2753.506954] skb_mac_gso_segment+0x273/0x570 [ 2753.507954] ? inet_sock_destruct+0x840/0x840 [ 2753.508981] ? skb_network_protocol+0x650/0x650 [ 2753.510050] ? skb_crc32c_csum_help+0x80/0x80 [ 2753.511057] ? lock_acquire+0x197/0x470 [ 2753.511913] ? __dev_queue_xmit+0x1c2/0x2710 [ 2753.512888] __skb_gso_segment+0x32d/0x6d0 [ 2753.513827] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2753.514969] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2753.516012] __dev_queue_xmit+0x87b/0x2710 [ 2753.516993] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2753.518047] ? mark_held_locks+0x9e/0xe0 [ 2753.518986] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2753.520181] neigh_connected_output+0x382/0x4d0 [ 2753.521266] ip_finish_output2+0x6f1/0x21f0 [ 2753.522264] ? nf_hook_slow+0xfc/0x1e0 [ 2753.523173] ? ip_frag_next+0x9e0/0x9e0 [ 2753.524079] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2753.525241] __ip_finish_output.part.0+0x5f3/0xb50 [ 2753.526381] ? ip_fragment.constprop.0+0x240/0x240 [ 2753.527498] ? nf_hook+0x510/0x510 [ 2753.528323] ip_output+0x2f7/0x600 [ 2753.529151] ip_send_skb+0xdd/0x260 [ 2753.529992] udp_send_skb+0x6da/0x11d0 [ 2753.530911] udp_sendmsg+0x139a/0x2160 [ 2753.531797] ? tracing_generic_entry_update+0x1ed/0x270 [ 2753.532995] ? ip_frag_init+0x350/0x350 [ 2753.533674] ? tracing_generic_entry_update+0x1ed/0x270 [ 2753.534615] ? udp_setsockopt+0xc0/0xc0 [ 2753.536572] ? perf_event_switch_output+0x7d0/0x7d0 [ 2753.537747] ? lock_chain_count+0x20/0x20 [ 2753.538681] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2753.539807] ? lock_chain_count+0x20/0x20 [ 2753.540745] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2753.541933] ? perf_trace_lock+0x2bd/0x490 [ 2753.542887] ? perf_swevent_event+0x6c/0x550 [ 2753.543893] ? __lockdep_reset_lock+0x180/0x180 [ 2753.544979] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2753.545932] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2753.547103] ? udp_v6_push_pending_frames+0x360/0x360 [ 2753.548295] ? SOFTIRQ_verbose+0x10/0x10 [ 2753.549241] ? lock_acquire+0x197/0x470 [ 2753.550143] ? find_held_lock+0x2c/0x110 [ 2753.551077] ? __might_fault+0xd3/0x180 [ 2753.551989] ? lock_downgrade+0x6d0/0x6d0 [ 2753.552938] ? lock_downgrade+0x6d0/0x6d0 [ 2753.553893] ? sock_has_perm+0x1ea/0x280 [ 2753.554818] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2753.556014] ? _copy_from_user+0xfb/0x1b0 [ 2753.556977] ? __import_iovec+0x458/0x590 [ 2753.557944] ? udp_v6_push_pending_frames+0x360/0x360 [ 2753.559121] inet6_sendmsg+0x105/0x140 [ 2753.560010] ? inet6_compat_ioctl+0x320/0x320 [ 2753.561014] __sock_sendmsg+0xf2/0x190 [ 2753.561929] ____sys_sendmsg+0x70d/0x870 [ 2753.563371] ? sock_write_iter+0x3d0/0x3d0 [ 2753.564338] ? do_recvmmsg+0x6d0/0x6d0 [ 2753.565221] ? perf_trace_lock+0x2bd/0x490 [ 2753.566194] ? SOFTIRQ_verbose+0x10/0x10 [ 2753.567185] ? __lockdep_reset_lock+0x180/0x180 [ 2753.568263] ___sys_sendmsg+0xf3/0x170 [ 2753.569143] ? sendmsg_copy_msghdr+0x160/0x160 [ 2753.570218] ? __fget_files+0x2cf/0x520 [ 2753.571121] ? lock_downgrade+0x6d0/0x6d0 [ 2753.572068] ? find_held_lock+0x2c/0x110 [ 2753.572999] ? __fget_files+0x2f8/0x520 [ 2753.573931] ? __fget_light+0xea/0x290 [ 2753.574824] __sys_sendmsg+0xe5/0x1b0 [ 2753.575695] ? __sys_sendmsg_sock+0x40/0x40 [ 2753.576665] ? rcu_read_lock_any_held+0x75/0xa0 [ 2753.577792] do_syscall_64+0x33/0x40 [ 2753.578633] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2753.579807] RIP: 0033:0x7fa05acd5b19 [ 2753.580643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2753.584842] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2753.586592] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2753.588239] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2753.589856] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2753.591483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2753.593088] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:02:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x2260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0x100000000}) 13:02:47 executing program 1: r0 = clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) r2 = getpgid(r0) clone3(&(0x7f0000000340)={0x88801000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x3c}, &(0x7f0000000100)=""/181, 0xb5, &(0x7f00000001c0)=""/74, &(0x7f0000000300)=[r1, r0, r0, r2], 0x4}, 0x58) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r3) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:02:47 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:02:47 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 55) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:02:47 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x1000000}, 0xa90}) 13:02:47 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:02:47 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:02:47 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2772.816783] FAULT_INJECTION: forcing a failure. [ 2772.816783] name failslab, interval 1, probability 0, space 0, times 0 [ 2772.818927] CPU: 1 PID: 30651 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2772.820681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2772.822806] Call Trace: [ 2772.823492] dump_stack+0x107/0x167 [ 2772.824426] should_fail.cold+0x5/0xa [ 2772.825373] should_failslab+0x5/0x20 [ 2772.826347] __kmalloc_node_track_caller+0x74/0x3b0 [ 2772.827591] ? skb_segment+0x9d8/0x3aa0 [ 2772.828547] __alloc_skb+0xb1/0x5b0 [ 2772.829476] skb_segment+0x9d8/0x3aa0 [ 2772.830418] ? lock_chain_count+0x20/0x20 [ 2772.831515] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2772.832739] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2772.834077] ? SOFTIRQ_verbose+0x10/0x10 [ 2772.835103] __udp_gso_segment+0x11c6/0x1830 [ 2772.836197] ? __sk_receive_skb+0x830/0x830 [ 2772.837282] udp4_ufo_fragment+0x528/0x720 [ 2772.838342] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2772.839599] inet_gso_segment+0x4fb/0x11a0 [ 2772.840680] skb_mac_gso_segment+0x273/0x570 [ 2772.841791] ? inet_sock_destruct+0x840/0x840 [ 2772.842911] ? skb_network_protocol+0x650/0x650 [ 2772.844064] ? skb_crc32c_csum_help+0x80/0x80 [ 2772.845181] ? lock_acquire+0x197/0x470 [ 2772.845876] ? __dev_queue_xmit+0x1c2/0x2710 [ 2772.846300] __skb_gso_segment+0x32d/0x6d0 [ 2772.846710] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2772.847205] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2772.847641] __dev_queue_xmit+0x87b/0x2710 [ 2772.848060] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2772.848505] ? mark_held_locks+0x9e/0xe0 [ 2772.848897] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2772.849406] neigh_connected_output+0x382/0x4d0 [ 2772.849905] ip_finish_output2+0x6f1/0x21f0 [ 2772.850324] ? nf_hook+0x3e3/0x510 [ 2772.850664] ? ip_frag_next+0x9e0/0x9e0 [ 2772.851037] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2772.851523] __ip_finish_output.part.0+0x5f3/0xb50 [ 2772.851982] ? ip_fragment.constprop.0+0x240/0x240 [ 2772.852428] ? nf_hook+0x510/0x510 [ 2772.852771] ip_output+0x2f7/0x600 [ 2772.853118] ip_send_skb+0xdd/0x260 [ 2772.853899] udp_send_skb+0x6da/0x11d0 [ 2772.854832] udp_sendmsg+0x139a/0x2160 [ 2772.855742] ? mark_lock+0xf5/0x2df0 [ 2772.856581] ? ip_frag_init+0x350/0x350 [ 2772.857477] ? lock_chain_count+0x20/0x20 [ 2772.858422] ? udp_setsockopt+0xc0/0xc0 [ 2772.859313] ? mark_lock+0xf5/0x2df0 [ 2772.860136] ? __lockdep_reset_lock+0x180/0x180 [ 2772.861139] ? lock_chain_count+0x20/0x20 [ 2772.862066] ? mark_lock+0xf5/0x2df0 [ 2772.862878] ? mark_lock+0xf5/0x2df0 [ 2772.863681] ? lock_chain_count+0x20/0x20 [ 2772.864612] ? __lock_acquire+0xbb1/0x5b00 [ 2772.865550] ? lock_chain_count+0x20/0x20 [ 2772.866532] ? perf_trace_lock+0xac/0x490 [ 2772.867469] ? SOFTIRQ_verbose+0x10/0x10 [ 2772.868370] ? __lockdep_reset_lock+0x180/0x180 [ 2772.869429] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2772.870389] ? udp_v6_push_pending_frames+0x360/0x360 [ 2772.871514] ? SOFTIRQ_verbose+0x10/0x10 [ 2772.872394] ? mark_lock+0xf5/0x2df0 [ 2772.873201] ? lock_acquire+0x197/0x470 [ 2772.874101] ? find_held_lock+0x2c/0x110 [ 2772.875074] ? __might_fault+0xd3/0x180 [ 2772.876008] ? lock_downgrade+0x6d0/0x6d0 [ 2772.876982] ? lock_downgrade+0x6d0/0x6d0 [ 2772.878026] ? sock_has_perm+0x1ea/0x280 [ 2772.878972] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2772.880191] ? _copy_from_user+0xfb/0x1b0 [ 2772.881171] ? __import_iovec+0x458/0x590 [ 2772.882167] ? udp_v6_push_pending_frames+0x360/0x360 [ 2772.883388] inet6_sendmsg+0x105/0x140 [ 2772.884301] ? inet6_compat_ioctl+0x320/0x320 [ 2772.885344] __sock_sendmsg+0xf2/0x190 [ 2772.886286] ____sys_sendmsg+0x70d/0x870 [ 2772.887232] ? sock_write_iter+0x3d0/0x3d0 [ 2772.888226] ? do_recvmmsg+0x6d0/0x6d0 [ 2772.889148] ? SOFTIRQ_verbose+0x10/0x10 [ 2772.890123] ? lock_downgrade+0x6d0/0x6d0 [ 2772.891091] ? __lockdep_reset_lock+0x180/0x180 [ 2772.892178] ? SOFTIRQ_verbose+0x10/0x10 [ 2772.893138] ___sys_sendmsg+0xf3/0x170 [ 2772.894093] ? sendmsg_copy_msghdr+0x160/0x160 [ 2772.895180] ? __fget_files+0x2cf/0x520 [ 2772.896112] ? lock_downgrade+0x6d0/0x6d0 [ 2772.897094] ? find_held_lock+0x2c/0x110 [ 2772.898114] ? __fget_files+0x2f8/0x520 [ 2772.899053] ? __fget_light+0xea/0x290 [ 2772.899978] __sys_sendmsg+0xe5/0x1b0 [ 2772.900865] ? __sys_sendmsg_sock+0x40/0x40 [ 2772.901910] ? rcu_read_lock_any_held+0x75/0xa0 [ 2772.903039] do_syscall_64+0x33/0x40 [ 2772.903910] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2772.905121] RIP: 0033:0x7fa05acd5b19 [ 2772.906032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2772.910391] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2772.912183] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2772.913898] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2772.918932] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2772.920606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2772.922301] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:02:47 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:03:07 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:03:07 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:03:07 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:03:07 executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_setup(0x7f, &(0x7f0000000880)=0x0) r2 = openat$cgroup_pressure(r0, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) fallocate(r2, 0x1, 0x9, 0x1) io_submit(r1, 0x2, &(0x7f0000001100)=[&(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 13:03:07 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c000000eafe600876191ed4d2e98860bad9343e2c8dc104a62aac9c3f289118d06529a64751dc947a71055259d6fab143506213011ed36c620668f722258cd921dc8c7245104194b1598a364e4a6d0d7e7efb1bb122f5460cf8ea37c888692e1f42383bb6238e214249d0a5877db5a7b141c567f5873577da9c817060fa76f86af4bc6e9e12e082cef044775ed25a633063c9b0cd3a50586d22819328d8e4512272f2a789648f718c73b98543fd73acb13cb9", @ANYRES16=r2, @ANYBLOB="0800e3000000fbdbdf2542000000080001007063690003000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500000000000000004001007063690011000200303030303a30303a31172e3000000000010083000100af8f3b436391aa5d15e347e44e62391536033f92dbc0252c754ac650635e0000"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000044) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r4, 0xff, 0x1, 0x0, &(0x7f0000000000)=0xfffffffffffffdee) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r5, 0xff, 0x1, 0x0, &(0x7f0000000000)=0xfffffffffffffdee) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@mcast1, @in=@empty}}, {{@in6=@private0}, 0x0, @in6=@private0}}, &(0x7f00000000c0)=0xe8) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:03:07 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 56) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:03:07 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x2000000}, 0xa90}) 13:03:07 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x81, 0x3f, 0x40, 0x3, 0x0, 0x91, 0x4881, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x51206, 0xffffffff, 0xffffff7f, 0x0, 0x100000001, 0x1fa, 0x3, 0x0, 0x4, 0x0, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, r0, 0x2) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001280), 0x0, &(0x7f0000001300)={[{@fat=@nfs_nostale_ro}]}) [ 2792.962241] FAULT_INJECTION: forcing a failure. [ 2792.962241] name failslab, interval 1, probability 0, space 0, times 0 [ 2792.963254] CPU: 1 PID: 30988 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2792.963840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2792.964539] Call Trace: [ 2792.964775] dump_stack+0x107/0x167 [ 2792.965098] should_fail.cold+0x5/0xa [ 2792.965427] ? ___slab_alloc+0x155/0x700 [ 2792.965780] ? create_object.isra.0+0x3a/0xa20 [ 2792.966195] should_failslab+0x5/0x20 [ 2792.966523] kmem_cache_alloc+0x5b/0x310 [ 2792.966879] create_object.isra.0+0x3a/0xa20 [ 2792.967256] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2792.967696] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2792.968135] ? skb_segment+0x9d8/0x3aa0 [ 2792.968485] __alloc_skb+0xb1/0x5b0 [ 2792.968806] skb_segment+0x9d8/0x3aa0 [ 2792.969135] ? lock_chain_count+0x20/0x20 [ 2792.969534] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2792.970021] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2792.970469] ? SOFTIRQ_verbose+0x10/0x10 [ 2792.970828] __udp_gso_segment+0x11c6/0x1830 [ 2792.971209] ? __sk_receive_skb+0x830/0x830 [ 2792.971591] udp4_ufo_fragment+0x528/0x720 [ 2792.971960] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2792.972389] inet_gso_segment+0x4fb/0x11a0 [ 2792.972768] skb_mac_gso_segment+0x273/0x570 [ 2792.973146] ? inet_sock_destruct+0x840/0x840 [ 2792.973530] ? skb_network_protocol+0x650/0x650 [ 2792.973936] ? skb_crc32c_csum_help+0x80/0x80 [ 2792.974322] ? lock_acquire+0x197/0x470 [ 2792.974663] ? __dev_queue_xmit+0x1c2/0x2710 [ 2792.975048] __skb_gso_segment+0x32d/0x6d0 [ 2792.975419] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2792.975868] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2792.976262] __dev_queue_xmit+0x87b/0x2710 [ 2792.976638] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2792.977044] ? mark_held_locks+0x9e/0xe0 [ 2792.977400] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2792.977854] neigh_connected_output+0x382/0x4d0 [ 2792.978286] ip_finish_output2+0x6f1/0x21f0 [ 2792.978660] ? nf_hook_slow+0xfc/0x1e0 [ 2792.978996] ? ip_frag_next+0x9e0/0x9e0 [ 2792.979340] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2792.979779] __ip_finish_output.part.0+0x5f3/0xb50 [ 2792.980207] ? ip_fragment.constprop.0+0x240/0x240 [ 2792.980623] ? nf_hook+0x510/0x510 [ 2792.980942] ip_output+0x2f7/0x600 [ 2792.981255] ip_send_skb+0xdd/0x260 [ 2792.981575] udp_send_skb+0x6da/0x11d0 [ 2792.981934] udp_sendmsg+0x139a/0x2160 [ 2792.982269] ? mark_lock+0xf5/0x2df0 [ 2792.982594] ? ip_frag_init+0x350/0x350 [ 2792.982939] ? lock_chain_count+0x20/0x20 [ 2792.983301] ? udp_setsockopt+0xc0/0xc0 [ 2792.983641] ? mark_lock+0xf5/0x2df0 [ 2792.983966] ? __lockdep_reset_lock+0x180/0x180 [ 2792.984366] ? lock_chain_count+0x20/0x20 [ 2792.984725] ? mark_lock+0xf5/0x2df0 [ 2792.985050] ? mark_lock+0xf5/0x2df0 [ 2792.985372] ? lock_chain_count+0x20/0x20 [ 2792.985730] ? __lock_acquire+0xbb1/0x5b00 [ 2792.986111] ? lock_chain_count+0x20/0x20 [ 2792.986480] ? perf_trace_lock+0xac/0x490 [ 2792.986834] ? SOFTIRQ_verbose+0x10/0x10 [ 2792.987181] ? __lockdep_reset_lock+0x180/0x180 [ 2792.987591] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2792.987956] ? udp_v6_push_pending_frames+0x360/0x360 [ 2792.988393] ? SOFTIRQ_verbose+0x10/0x10 [ 2792.988746] ? mark_lock+0xf5/0x2df0 [ 2792.989073] ? lock_acquire+0x197/0x470 [ 2792.989412] ? find_held_lock+0x2c/0x110 [ 2792.989767] ? __might_fault+0xd3/0x180 [ 2792.990125] ? lock_downgrade+0x6d0/0x6d0 [ 2792.990485] ? lock_downgrade+0x6d0/0x6d0 [ 2792.990843] ? sock_has_perm+0x1ea/0x280 [ 2792.991191] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2792.991637] ? _copy_from_user+0xfb/0x1b0 [ 2792.992006] ? __import_iovec+0x458/0x590 [ 2792.992363] ? udp_v6_push_pending_frames+0x360/0x360 [ 2792.992809] inet6_sendmsg+0x105/0x140 [ 2792.993145] ? inet6_compat_ioctl+0x320/0x320 [ 2792.993528] __sock_sendmsg+0xf2/0x190 [ 2792.993874] ____sys_sendmsg+0x70d/0x870 [ 2792.994236] ? sock_write_iter+0x3d0/0x3d0 [ 2792.994597] ? do_recvmmsg+0x6d0/0x6d0 [ 2792.994937] ? SOFTIRQ_verbose+0x10/0x10 [ 2792.995283] ? lock_downgrade+0x6d0/0x6d0 [ 2792.995644] ? __lockdep_reset_lock+0x180/0x180 [ 2792.996040] ? SOFTIRQ_verbose+0x10/0x10 [ 2792.996394] ___sys_sendmsg+0xf3/0x170 [ 2792.996733] ? sendmsg_copy_msghdr+0x160/0x160 [ 2792.997131] ? __fget_files+0x2cf/0x520 [ 2792.997475] ? lock_downgrade+0x6d0/0x6d0 [ 2792.997832] ? find_held_lock+0x2c/0x110 [ 2792.998211] ? __fget_files+0x2f8/0x520 [ 2792.998563] ? __fget_light+0xea/0x290 [ 2792.998907] __sys_sendmsg+0xe5/0x1b0 [ 2792.999241] ? __sys_sendmsg_sock+0x40/0x40 [ 2792.999611] ? rcu_read_lock_any_held+0x75/0xa0 [ 2793.000040] do_syscall_64+0x33/0x40 [ 2793.000360] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2793.000795] RIP: 0033:0x7fa05acd5b19 [ 2793.001116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2793.002678] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2793.003331] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2793.003936] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2793.004540] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2793.005143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2793.005749] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:03:07 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:03:07 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:03:07 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 57) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:03:07 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x38, 0x2d, 0x38, 0x2d]}}}}]}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1a0a000, &(0x7f0000000180)={'trans=unix,', {[{@cachetag={'cachetag', 0x3d, 'mpol'}}], [{@fowner_gt={'fowner>', r0}}, {@euid_gt={'euid>', r1}}, {@smackfsdef={'smackfsdef', 0x3d, 'prefer'}}, {@uid_lt={'uid<', r2}}]}}) r3 = syz_open_dev$vcsa(&(0x7f0000000200), 0x0, 0x100) open_tree(r3, &(0x7f0000000280)='./file0\x00', 0x88001) 13:03:07 executing program 0: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:03:07 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x3000000}, 0xa90}) 13:03:07 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x300, 0x18}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:03:07 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x8) setsockopt(r2, 0x8, 0x7, &(0x7f0000000300)="1259cae9cf76d3c9c792609e6c91e8fa1b2d8291566d1773941501edc1094280aafb96b662289c2dd4b053f8c7ddd241781d00ed5f3781d938d528738a20b44cdae746c9049877f3c03974c1b3e65978ab43a7d5971b23ab12e95e8cd147c759ea9c58578fdcad8cc1575ea95dba946f3b122010f8a60f0e493adbe67d869f2edae32443c2155859e13f0ea010f6fe4766ae2f9a1d5b538489ba38073021cf7d4078f0320c62c847b1972a240b6778a82685d8be896ae5e51b01f3012fda66286f5f8ca2b3a2be3941afa577052d2ad294bf4912f3f4ab9abd6a6b7e8e89c9344da9ece8eddff74e", 0xe8) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7ff, 0x42}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x20000010) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450000240000000000119078ac1e0001ad1414aa0074a6004e200010907802000000000018877afd76d4217fdcf0dcdf127719b82d953420af388598314072620b14acb406818a171ba410c553054df641bd60681665713c7e7bc6e6920f8ff693678330e87b23417dd3e08da78de1f11b004b42d08e7bb3ffac5c98fdb8c12d6f1c90dad5cc02ee23f427723e04352bd5242b0e0bfc931e9ae1129c1137a634e112cfce9a21964a7bd2f0af4779f9289a35069d0ef26a7de1aa04a28845ceb7ed43cccb779a78ca1516f506fb3fd8fa09a55f6f91a7"], 0x0) [ 2793.347396] tmpfs: Bad value for 'mpol' 13:03:08 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2793.391792] FAULT_INJECTION: forcing a failure. [ 2793.391792] name failslab, interval 1, probability 0, space 0, times 0 [ 2793.395956] CPU: 1 PID: 31298 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2793.396634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2793.397491] Call Trace: [ 2793.397761] dump_stack+0x107/0x167 [ 2793.398187] should_fail.cold+0x5/0xa [ 2793.398563] ? trace_hardirqs_on+0x5b/0x180 [ 2793.399041] ? __alloc_skb+0x6d/0x5b0 [ 2793.399427] should_failslab+0x5/0x20 [ 2793.399803] kmem_cache_alloc_node+0x55/0x330 [ 2793.400334] __alloc_skb+0x6d/0x5b0 [ 2793.401261] skb_segment+0x9d8/0x3aa0 [ 2793.401656] ? lock_chain_count+0x20/0x20 [ 2793.402191] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2793.403386] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2793.404745] ? SOFTIRQ_verbose+0x10/0x10 [ 2793.405164] __udp_gso_segment+0x11c6/0x1830 [ 2793.406066] ? __sk_receive_skb+0x830/0x830 [ 2793.406615] udp4_ufo_fragment+0x528/0x720 [ 2793.407595] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2793.408719] inet_gso_segment+0x4fb/0x11a0 [ 2793.409699] skb_mac_gso_segment+0x273/0x570 [ 2793.410697] ? inet_sock_destruct+0x840/0x840 [ 2793.411731] ? skb_network_protocol+0x650/0x650 [ 2793.412831] ? skb_crc32c_csum_help+0x80/0x80 [ 2793.413849] ? lock_acquire+0x197/0x470 [ 2793.414933] ? __dev_queue_xmit+0x1c2/0x2710 [ 2793.416087] __skb_gso_segment+0x32d/0x6d0 [ 2793.417209] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2793.418582] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2793.419799] __dev_queue_xmit+0x87b/0x2710 [ 2793.420892] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2793.422029] ? mark_held_locks+0x9e/0xe0 [ 2793.423017] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2793.424289] neigh_connected_output+0x382/0x4d0 [ 2793.425511] ip_finish_output2+0x6f1/0x21f0 [ 2793.426609] ? nf_hook_slow+0xfc/0x1e0 [ 2793.427522] ? ip_frag_next+0x9e0/0x9e0 [ 2793.428409] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2793.429554] __ip_finish_output.part.0+0x5f3/0xb50 [ 2793.430686] ? ip_fragment.constprop.0+0x240/0x240 [ 2793.431782] ? nf_hook+0x510/0x510 [ 2793.432594] ip_output+0x2f7/0x600 [ 2793.433410] ip_send_skb+0xdd/0x260 [ 2793.434241] udp_send_skb+0x6da/0x11d0 [ 2793.435141] udp_sendmsg+0x139a/0x2160 [ 2793.436023] ? mark_lock+0xf5/0x2df0 [ 2793.436879] ? ip_frag_init+0x350/0x350 [ 2793.437783] ? lock_chain_count+0x20/0x20 [ 2793.439192] ? udp_setsockopt+0xc0/0xc0 [ 2793.440233] ? mark_lock+0xf5/0x2df0 [ 2793.441081] ? __lockdep_reset_lock+0x180/0x180 [ 2793.442148] ? lock_chain_count+0x20/0x20 [ 2793.443104] ? mark_lock+0xf5/0x2df0 [ 2793.443963] ? mark_lock+0xf5/0x2df0 [ 2793.444735] ? lock_chain_count+0x20/0x20 [ 2793.445512] ? __lock_acquire+0xbb1/0x5b00 [ 2793.446306] ? lock_chain_count+0x20/0x20 [ 2793.446884] ? perf_trace_lock+0xac/0x490 [ 2793.447311] ? SOFTIRQ_verbose+0x10/0x10 [ 2793.447721] ? __lockdep_reset_lock+0x180/0x180 [ 2793.448204] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2793.448631] ? udp_v6_push_pending_frames+0x360/0x360 [ 2793.449155] ? SOFTIRQ_verbose+0x10/0x10 [ 2793.449575] ? mark_lock+0xf5/0x2df0 [ 2793.449970] ? lock_acquire+0x197/0x470 [ 2793.450376] ? find_held_lock+0x2c/0x110 [ 2793.450797] ? __might_fault+0xd3/0x180 [ 2793.451201] ? lock_downgrade+0x6d0/0x6d0 [ 2793.451630] ? lock_downgrade+0x6d0/0x6d0 [ 2793.452064] ? sock_has_perm+0x1ea/0x280 [ 2793.452479] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2793.453005] ? _copy_from_user+0xfb/0x1b0 [ 2793.453435] ? __import_iovec+0x458/0x590 [ 2793.453857] ? udp_v6_push_pending_frames+0x360/0x360 [ 2793.454381] inet6_sendmsg+0x105/0x140 [ 2793.454769] ? inet6_compat_ioctl+0x320/0x320 [ 2793.455212] __sock_sendmsg+0xf2/0x190 [ 2793.455602] ____sys_sendmsg+0x70d/0x870 [ 2793.456009] ? sock_write_iter+0x3d0/0x3d0 [ 2793.456434] ? do_recvmmsg+0x6d0/0x6d0 [ 2793.456833] ? SOFTIRQ_verbose+0x10/0x10 [ 2793.457237] ? lock_downgrade+0x6d0/0x6d0 [ 2793.457661] ? __lockdep_reset_lock+0x180/0x180 [ 2793.458138] ? SOFTIRQ_verbose+0x10/0x10 [ 2793.458553] ___sys_sendmsg+0xf3/0x170 [ 2793.458952] ? sendmsg_copy_msghdr+0x160/0x160 [ 2793.459417] ? __fget_files+0x2cf/0x520 [ 2793.459817] ? lock_downgrade+0x6d0/0x6d0 [ 2793.460237] ? find_held_lock+0x2c/0x110 [ 2793.460660] ? __fget_files+0x2f8/0x520 [ 2793.461071] ? __fget_light+0xea/0x290 [ 2793.461473] __sys_sendmsg+0xe5/0x1b0 [ 2793.461860] ? __sys_sendmsg_sock+0x40/0x40 [ 2793.462756] ? rcu_read_lock_any_held+0x75/0xa0 [ 2793.463699] do_syscall_64+0x33/0x40 [ 2793.464431] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2793.465388] RIP: 0033:0x7fa05acd5b19 [ 2793.465761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2793.467835] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2793.468700] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2793.469624] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2793.470383] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2793.471101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2793.471861] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:03:08 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=ANY=[@ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0}, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x401}, 0x0, 0x0, 0x0, 0x8bd39d0ce5493015, 0x800, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x6040085}, 0x40041) fallocate(r2, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x800, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000580)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='-:\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c) fstat(r4, &(0x7f0000000600)) 13:03:08 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:03:08 executing program 0: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:03:08 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 58) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) [ 2793.778942] FAULT_INJECTION: forcing a failure. [ 2793.778942] name failslab, interval 1, probability 0, space 0, times 0 [ 2793.781237] CPU: 0 PID: 31620 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2793.782350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2793.783178] Call Trace: [ 2793.783464] dump_stack+0x107/0x167 [ 2793.783849] should_fail.cold+0x5/0xa [ 2793.784240] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2793.784773] ? create_object.isra.0+0x3a/0xa20 [ 2793.785240] should_failslab+0x5/0x20 [ 2793.785631] kmem_cache_alloc+0x5b/0x310 [ 2793.786054] ? mark_held_locks+0x9e/0xe0 [ 2793.786480] create_object.isra.0+0x3a/0xa20 [ 2793.786934] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2793.787458] kmem_cache_alloc_node+0x169/0x330 [ 2793.787942] __alloc_skb+0x6d/0x5b0 [ 2793.788332] skb_segment+0x9d8/0x3aa0 [ 2793.788783] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2793.789299] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2793.789830] ? SOFTIRQ_verbose+0x10/0x10 [ 2793.790262] __udp_gso_segment+0x11c6/0x1830 [ 2793.790717] ? __sk_receive_skb+0x830/0x830 [ 2793.791168] udp4_ufo_fragment+0x528/0x720 [ 2793.791613] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2793.792122] inet_gso_segment+0x4fb/0x11a0 [ 2793.792583] skb_mac_gso_segment+0x273/0x570 [ 2793.793029] ? inet_sock_destruct+0x840/0x840 [ 2793.793486] ? skb_network_protocol+0x650/0x650 [ 2793.793959] ? skb_crc32c_csum_help+0x80/0x80 [ 2793.794413] ? lock_acquire+0x197/0x470 [ 2793.794813] ? __dev_queue_xmit+0x1c2/0x2710 [ 2793.795261] __skb_gso_segment+0x32d/0x6d0 [ 2793.795701] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2793.796215] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2793.796681] __dev_queue_xmit+0x87b/0x2710 [ 2793.797120] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2793.797595] ? mark_held_locks+0x9e/0xe0 [ 2793.798241] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2793.798777] neigh_connected_output+0x382/0x4d0 [ 2793.799338] ip_finish_output2+0x6f1/0x21f0 [ 2793.799774] ? nf_hook_slow+0xfc/0x1e0 [ 2793.800240] ? ip_frag_next+0x9e0/0x9e0 [ 2793.800640] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2793.801148] __ip_finish_output.part.0+0x5f3/0xb50 [ 2793.801740] ? ip_fragment.constprop.0+0x240/0x240 [ 2793.802190] ? nf_hook+0x510/0x510 [ 2793.802628] ip_output+0x2f7/0x600 [ 2793.802974] ip_send_skb+0xdd/0x260 [ 2793.803364] udp_send_skb+0x6da/0x11d0 [ 2793.803847] udp_sendmsg+0x139a/0x2160 [ 2793.804239] ? tracing_generic_entry_update+0x1ed/0x270 [ 2793.804876] ? ip_frag_init+0x350/0x350 [ 2793.805283] ? tracing_generic_entry_update+0x1ed/0x270 [ 2793.805928] ? udp_setsockopt+0xc0/0xc0 [ 2793.806398] ? perf_event_switch_output+0x7d0/0x7d0 [ 2793.806990] ? lock_chain_count+0x20/0x20 [ 2793.807402] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2793.807977] ? lock_chain_count+0x20/0x20 [ 2793.808410] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2793.808983] ? perf_swevent_event+0x6c/0x550 [ 2793.809442] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2793.809859] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2793.810482] ? udp_v6_push_pending_frames+0x360/0x360 [ 2793.810994] ? SOFTIRQ_verbose+0x10/0x10 [ 2793.811531] ? lock_acquire+0x197/0x470 [ 2793.811928] ? find_held_lock+0x2c/0x110 [ 2793.812449] ? __might_fault+0xd3/0x180 [ 2793.812848] ? lock_downgrade+0x6d0/0x6d0 [ 2793.813366] ? lock_downgrade+0x6d0/0x6d0 [ 2793.813788] ? sock_has_perm+0x1ea/0x280 [ 2793.814208] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2793.814814] ? _copy_from_user+0xfb/0x1b0 [ 2793.815246] ? __import_iovec+0x458/0x590 [ 2793.815792] ? udp_v6_push_pending_frames+0x360/0x360 [ 2793.816311] inet6_sendmsg+0x105/0x140 [ 2793.816776] ? inet6_compat_ioctl+0x320/0x320 [ 2793.817220] __sock_sendmsg+0xf2/0x190 [ 2793.817689] ____sys_sendmsg+0x70d/0x870 [ 2793.818113] ? sock_write_iter+0x3d0/0x3d0 [ 2793.818527] ? do_recvmmsg+0x6d0/0x6d0 [ 2793.818994] ? perf_trace_lock+0x2bd/0x490 [ 2793.819438] ? SOFTIRQ_verbose+0x10/0x10 [ 2793.819910] ? __lockdep_reset_lock+0x180/0x180 [ 2793.820316] ___sys_sendmsg+0xf3/0x170 [ 2793.820752] ? sendmsg_copy_msghdr+0x160/0x160 [ 2793.821219] ? __fget_files+0x2cf/0x520 [ 2793.821666] ? lock_downgrade+0x6d0/0x6d0 [ 2793.822082] ? find_held_lock+0x2c/0x110 [ 2793.822546] ? __fget_files+0x2f8/0x520 [ 2793.822950] ? __fget_light+0xea/0x290 [ 2793.823445] __sys_sendmsg+0xe5/0x1b0 [ 2793.823830] ? __sys_sendmsg_sock+0x40/0x40 [ 2793.824266] ? rcu_read_lock_any_held+0x75/0xa0 [ 2793.825843] do_syscall_64+0x33/0x40 [ 2793.826233] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2793.826838] RIP: 0033:0x7fa05acd5b19 [ 2793.827212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2793.829955] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2793.830798] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2793.831526] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2793.832285] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2793.833074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2793.833811] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:03:28 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x4000000}, 0xa90}) 13:03:28 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:03:28 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 59) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:03:28 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x1, r4, 0x1, 0x8, 0x6, @random="190002400a00"}, 0x14) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x4, 0x70bd2d, 0x25dfdbfe, {{@in=@remote, @in=@broadcast, 0x4e22, 0x13, 0x4e20, 0xfffa, 0xfc2eb7286638e8e2, 0x0, 0x0, 0x54, r4, r5}, {0x4, 0x100000001, 0x5, 0x8, 0x8, 0x8001, 0x7, 0x8}, {0xffff, 0x2, 0x7, 0x9}, 0xffff8000, 0x6e6bc0, 0x2, 0x1, 0x2, 0x2}}, 0xb8}}, 0x4040081) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000005c0)=@updsa={0x1bc, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@multicast1, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0xc4, 0x14, {{'sha256\x00'}, 0x3c0, 0x0, "5a6855fde7707c1b7cae3c147135f9c2ba7b610ac300bd06b2f009bd0537d7580c0bb8bc4a600300009ebf1fd296cb32d8347608236c9004d559f11fac88076804527b3839e6b2eb1bfbff2583102c3acdd40d498078a0e5414843d514f7feef875b4d8b47d8028280268536e3fd7a983c0ce3f890c1bb41"}}, @XFRMA_SET_MARK={0x8}]}, 0x1bc}}, 0x0) lseek(0xffffffffffffffff, 0x1, 0x4) 13:03:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:03:28 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:03:28 executing program 0: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:03:28 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xffffffffffffffff, 0xee00, 0x0) ioctl$VT_RESIZE(r0, 0x5609, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x54, 0x3f, 0x81, 0x0, 0x2, 0x3b, 0x8, 0x31f, 0x40, 0xad, 0xd3, 0x6, 0x38, 0x1, 0xac, 0x3, 0x2}, [{0x70000000, 0x8, 0xa59, 0x4, 0x1, 0xfc4c, 0xc4d3, 0x1}], "62a86a25c561ba7e848b790aacbc8e28e54b5b2611ce825c8bcb14f393c45525a0189b2b7f925f9876c1c85c258c2269dc8e32d52b8bea47a83f1c533b3615cf52f17855b14dfc59fb331364445fc7e62a0b005948085428b76bca33", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9d4) [ 2813.828770] FAULT_INJECTION: forcing a failure. [ 2813.828770] name failslab, interval 1, probability 0, space 0, times 0 [ 2813.829766] CPU: 1 PID: 31632 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2813.830402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2813.831101] Call Trace: [ 2813.831323] dump_stack+0x107/0x167 [ 2813.831629] should_fail.cold+0x5/0xa [ 2813.831984] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2813.832406] ? create_object.isra.0+0x3a/0xa20 [ 2813.832774] should_failslab+0x5/0x20 [ 2813.833129] kmem_cache_alloc+0x5b/0x310 [ 2813.833455] ? mark_held_locks+0x9e/0xe0 [ 2813.833785] create_object.isra.0+0x3a/0xa20 [ 2813.834202] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2813.834620] kmem_cache_alloc_node+0x169/0x330 [ 2813.835061] __alloc_skb+0x6d/0x5b0 [ 2813.835362] skb_segment+0x9d8/0x3aa0 [ 2813.835664] ? lock_chain_count+0x20/0x20 [ 2813.836082] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2813.836487] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2813.836955] ? SOFTIRQ_verbose+0x10/0x10 [ 2813.837292] __udp_gso_segment+0x11c6/0x1830 [ 2813.837648] ? __sk_receive_skb+0x830/0x830 [ 2813.838055] udp4_ufo_fragment+0x528/0x720 [ 2813.838406] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2813.838804] inet_gso_segment+0x4fb/0x11a0 [ 2813.839221] skb_mac_gso_segment+0x273/0x570 [ 2813.839575] ? inet_sock_destruct+0x840/0x840 [ 2813.839978] ? skb_network_protocol+0x650/0x650 [ 2813.840349] ? skb_crc32c_csum_help+0x80/0x80 [ 2813.840712] ? lock_acquire+0x197/0x470 [ 2813.841083] ? __dev_queue_xmit+0x1c2/0x2710 [ 2813.841443] __skb_gso_segment+0x32d/0x6d0 [ 2813.841790] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2813.842265] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2813.842635] __dev_queue_xmit+0x87b/0x2710 [ 2813.843031] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2813.843413] ? mark_held_locks+0x9e/0xe0 [ 2813.843743] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2813.844234] neigh_connected_output+0x382/0x4d0 [ 2813.844623] ip_finish_output2+0x6f1/0x21f0 [ 2813.845023] ? nf_hook_slow+0xfc/0x1e0 [ 2813.845338] ? ip_frag_next+0x9e0/0x9e0 [ 2813.845656] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2813.846120] __ip_finish_output.part.0+0x5f3/0xb50 [ 2813.846519] ? ip_fragment.constprop.0+0x240/0x240 [ 2813.846953] ? nf_hook+0x510/0x510 [ 2813.847254] ip_output+0x2f7/0x600 [ 2813.847552] ip_send_skb+0xdd/0x260 [ 2813.847886] udp_send_skb+0x6da/0x11d0 [ 2813.848221] udp_sendmsg+0x139a/0x2160 [ 2813.848532] ? mark_lock+0xf5/0x2df0 [ 2813.848833] ? ip_frag_init+0x350/0x350 [ 2813.849223] ? lock_chain_count+0x20/0x20 [ 2813.849562] ? udp_setsockopt+0xc0/0xc0 [ 2813.849921] ? mark_lock+0xf5/0x2df0 [ 2813.850236] ? __lockdep_reset_lock+0x180/0x180 [ 2813.850608] ? lock_chain_count+0x20/0x20 [ 2813.850988] ? mark_lock+0xf5/0x2df0 [ 2813.851292] ? mark_lock+0xf5/0x2df0 [ 2813.851592] ? lock_chain_count+0x20/0x20 [ 2813.851967] ? __lock_acquire+0xbb1/0x5b00 [ 2813.852309] ? lock_chain_count+0x20/0x20 [ 2813.852654] ? perf_trace_lock+0xac/0x490 [ 2813.853056] ? SOFTIRQ_verbose+0x10/0x10 [ 2813.853381] ? __lockdep_reset_lock+0x180/0x180 [ 2813.853764] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2813.854163] ? udp_v6_push_pending_frames+0x360/0x360 [ 2813.854574] ? SOFTIRQ_verbose+0x10/0x10 [ 2813.854953] ? mark_lock+0xf5/0x2df0 [ 2813.855261] ? lock_acquire+0x197/0x470 [ 2813.855579] ? find_held_lock+0x2c/0x110 [ 2813.855955] ? __might_fault+0xd3/0x180 [ 2813.856275] ? lock_downgrade+0x6d0/0x6d0 [ 2813.856615] ? lock_downgrade+0x6d0/0x6d0 [ 2813.857022] ? sock_has_perm+0x1ea/0x280 [ 2813.857349] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2813.857763] ? _copy_from_user+0xfb/0x1b0 [ 2813.858167] ? __import_iovec+0x458/0x590 [ 2813.858502] ? udp_v6_push_pending_frames+0x360/0x360 [ 2813.858965] inet6_sendmsg+0x105/0x140 [ 2813.859280] ? inet6_compat_ioctl+0x320/0x320 [ 2813.859644] __sock_sendmsg+0xf2/0x190 [ 2813.860004] ____sys_sendmsg+0x70d/0x870 [ 2813.860337] ? sock_write_iter+0x3d0/0x3d0 [ 2813.860673] ? do_recvmmsg+0x6d0/0x6d0 [ 2813.861061] ? SOFTIRQ_verbose+0x10/0x10 [ 2813.861386] ? lock_downgrade+0x6d0/0x6d0 [ 2813.861722] ? __lockdep_reset_lock+0x180/0x180 [ 2813.862148] ? SOFTIRQ_verbose+0x10/0x10 [ 2813.862480] ___sys_sendmsg+0xf3/0x170 [ 2813.862793] ? sendmsg_copy_msghdr+0x160/0x160 [ 2813.863209] ? __fget_files+0x2cf/0x520 [ 2813.863529] ? lock_downgrade+0x6d0/0x6d0 [ 2813.863903] ? find_held_lock+0x2c/0x110 [ 2813.864246] ? __fget_files+0x2f8/0x520 [ 2813.864575] ? __fget_light+0xea/0x290 [ 2813.864970] __sys_sendmsg+0xe5/0x1b0 [ 2813.865278] ? __sys_sendmsg_sock+0x40/0x40 [ 2813.865624] ? rcu_read_lock_any_held+0x75/0xa0 [ 2813.866076] do_syscall_64+0x33/0x40 [ 2813.866381] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2813.866793] RIP: 0033:0x7fa05acd5b19 [ 2813.867135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2813.868613] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2813.869285] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2813.869883] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2813.870466] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2813.871071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2813.871635] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:03:28 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1d, 0xe21, 0x0, 0x0, {0x7}, [@typed={0x2, 0x0, 0x0, 0x0, @uid}, @generic="10"]}, 0x20}}, 0x0) 13:03:28 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a", 0xc}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r5, r6) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x0, 0x0, 0x88, 0x0, 0x5, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffffffd}, 0x1506, 0x3, 0x6, 0x5, 0x5, 0x3, 0x7, 0x0, 0x3, 0x0, 0x984}, 0x0, 0xe, r5, 0xa) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2814.003849] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 13:03:28 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:03:28 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:03:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r6, 0x0, 0x80000001) 13:03:28 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 60) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:03:28 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x5000000}, 0xa90}) 13:03:28 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x300, 0x18}, './file0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x154, 0x1e, 0xe21, 0x0, 0x0, {0x1}, [@nested={0x13f, 0x50, 0x0, 0x1, [@generic="a746fe56b978f61843652e1d7581ca334a6cefe48143b5fbae53729684b448529a3c3827ec39c292a82ba9ad8fb7d2e231de473edebb3bc946e9d83edfb1bae59fe525cbd96392e8bd3323159dbe84645145152dec90933a93b3328c702a5d8d2f8c90f0447d13ce5769ed18c9905189496fe12eb6bc5f5f34ebc5ca2320f472c6dc61", @generic="c47254cd0cd37a7561088492961e30b5f6059ce5dd09b74642c6603aa9dac6ca08f43936146ee5474b6d9771b6c05ecf9136384a9212d2b2c7056c666df1e6deb277521551ccfe8cbfbc4d839bda3eb37db7d5c355114b9905e06fe1907971a5d77e23eea98a75da5aac4a00fbc413b401f068bf888460043dc1551b177161f841b133922cae307018a6971d16766f2a6de462665b1744cdf4e8004a69c41920c44fd7d042deab58fd0f1d1fb385724250ec3f693a881fb1"]}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r3) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = syz_io_uring_complete(0x0) io_uring_enter(0xffffffffffffffff, 0x630a, 0xce52, 0x2, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x2c0, r6}) syz_open_procfs(r6, &(0x7f0000000040)='net/nf_conntrack\x00') r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r7, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:03:28 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000002c0), &(0x7f0000000480)={'U-', 0xbef9}, 0x16, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/72, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001b00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400001667b600ab5a6e1ca451f4ff2d23f9ec5fe424df49631bffbb447db92844ef8c5f6ca472674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4620190535515b4ddf76554abd753c66cbe240d21e7b6584a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1f9484cc658d1cd5845643215e67753735e7ec58ca14a8942b98d019524f7cbcf9549edfe85123ccadbfdd8115263c8ede43491d41a285c98c3f524c9f68b1f96938f6eba7f921d4f712f54ed5d40c1b7675a48218b277c6715916ded2ec77690bb45ef6027d1d879a0617420be517a60e8ad77cfa4a483385fd10a8043847d417fa033ff85b375edb880ef3ce2c9e8f4aae21dd27c1d432eaff66d36bf31607698b32f24ae48b400a1e3445cdeceb1bac889dcd5801ff82113a69e3bd88cb2fca4af6bac3713d61e3c01c782e02201e48ff0eda1e23a4a56ea27b73107d351480bf837c4d445aa179b092d12b4a0d44b0e0088053b3de630c0ee3276c92bf3226bb4e3e92e0289ce4f47047f4defb1475f024ec2ccc5162d0033cf120733cf3304cefada69a386b6f84179a8a7e3ae44138b565c55ed9b1c4407c0e8a8a7c2bfd0b1915f57989fab31fced757723703bab4b2fe250084bf0965b7b6d2b1a697cba528a7029c605bc76420acec1c2dff7fa92c469894c16eed7c59d77a3357edb8e2e1b62fc76b977aed4464d21919897b40ceb4379a2f0792c0cee90170d48fc778479092fd35081b252c0b1b165bbbd21df52ab43615adc1ece78abf1137f7aa07b3b1"]) getdents(r3, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x900, 0x0) getdents64(r4, &(0x7f0000001500)=""/125, 0x7d) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x837013, 0x0) unshare(0x48020200) [ 2814.236782] FAULT_INJECTION: forcing a failure. [ 2814.236782] name failslab, interval 1, probability 0, space 0, times 0 [ 2814.237731] CPU: 1 PID: 32064 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2814.238295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2814.238957] Call Trace: [ 2814.239181] dump_stack+0x107/0x167 [ 2814.239483] should_fail.cold+0x5/0xa [ 2814.239941] ? create_object.isra.0+0x3a/0xa20 [ 2814.240402] should_failslab+0x5/0x20 [ 2814.240827] kmem_cache_alloc+0x5b/0x310 [ 2814.241164] create_object.isra.0+0x3a/0xa20 [ 2814.241520] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2814.241936] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2814.242360] ? skb_segment+0x9d8/0x3aa0 [ 2814.242690] __alloc_skb+0xb1/0x5b0 [ 2814.242993] skb_segment+0x9d8/0x3aa0 [ 2814.243304] ? lock_chain_count+0x20/0x20 [ 2814.243686] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2814.244094] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2814.244644] ? SOFTIRQ_verbose+0x10/0x10 [ 2814.244981] __udp_gso_segment+0x11c6/0x1830 [ 2814.245498] ? __sk_receive_skb+0x830/0x830 [ 2814.245898] udp4_ufo_fragment+0x528/0x720 [ 2814.246263] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2814.246668] inet_gso_segment+0x4fb/0x11a0 [ 2814.247025] skb_mac_gso_segment+0x273/0x570 [ 2814.247382] ? inet_sock_destruct+0x840/0x840 [ 2814.247743] ? skb_network_protocol+0x650/0x650 [ 2814.248117] ? skb_crc32c_csum_help+0x80/0x80 [ 2814.248582] ? lock_acquire+0x197/0x470 [ 2814.249066] ? __dev_queue_xmit+0x1c2/0x2710 [ 2814.249471] __skb_gso_segment+0x32d/0x6d0 [ 2814.249821] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2814.250371] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2814.250923] __dev_queue_xmit+0x87b/0x2710 [ 2814.251282] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2814.251741] ? mark_held_locks+0x9e/0xe0 [ 2814.252144] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2814.252705] neigh_connected_output+0x382/0x4d0 [ 2814.253097] ip_finish_output2+0x6f1/0x21f0 [ 2814.253561] ? nf_hook_slow+0xfc/0x1e0 [ 2814.253939] ? ip_frag_next+0x9e0/0x9e0 [ 2814.254440] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2814.254854] __ip_finish_output.part.0+0x5f3/0xb50 [ 2814.255352] ? ip_fragment.constprop.0+0x240/0x240 [ 2814.255741] ? nf_hook+0x510/0x510 [ 2814.255775] autofs4:pid:32066:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc018937d) [ 2814.256041] ip_output+0x2f7/0x600 [ 2814.257120] autofs4:pid:32066:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937d) [ 2814.257371] ip_send_skb+0xdd/0x260 [ 2814.257390] udp_send_skb+0x6da/0x11d0 [ 2814.257417] udp_sendmsg+0x139a/0x2160 [ 2814.259166] ? mark_lock+0xf5/0x2df0 [ 2814.259471] ? ip_frag_init+0x350/0x350 [ 2814.259801] ? lock_chain_count+0x20/0x20 [ 2814.260143] ? udp_setsockopt+0xc0/0xc0 [ 2814.260464] ? mark_lock+0xf5/0x2df0 [ 2814.260774] ? __lockdep_reset_lock+0x180/0x180 [ 2814.261152] ? lock_chain_count+0x20/0x20 [ 2814.261494] ? mark_lock+0xf5/0x2df0 [ 2814.261806] ? mark_lock+0xf5/0x2df0 [ 2814.262117] ? lock_chain_count+0x20/0x20 [ 2814.262450] ? __lock_acquire+0xbb1/0x5b00 [ 2814.262963] ? lock_chain_count+0x20/0x20 [ 2814.263375] ? perf_trace_lock+0xac/0x490 [ 2814.263706] ? SOFTIRQ_verbose+0x10/0x10 [ 2814.264035] ? __lockdep_reset_lock+0x180/0x180 [ 2814.264541] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2814.265005] ? udp_v6_push_pending_frames+0x360/0x360 [ 2814.265495] ? SOFTIRQ_verbose+0x10/0x10 [ 2814.265830] ? mark_lock+0xf5/0x2df0 [ 2814.266151] ? lock_acquire+0x197/0x470 [ 2814.266575] ? find_held_lock+0x2c/0x110 [ 2814.266910] ? __might_fault+0xd3/0x180 [ 2814.267372] ? lock_downgrade+0x6d0/0x6d0 [ 2814.267754] ? lock_downgrade+0x6d0/0x6d0 [ 2814.268094] ? sock_has_perm+0x1ea/0x280 [ 2814.268422] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2814.268950] ? _copy_from_user+0xfb/0x1b0 [ 2814.269374] ? __import_iovec+0x458/0x590 [ 2814.269841] ? udp_v6_push_pending_frames+0x360/0x360 [ 2814.270271] inet6_sendmsg+0x105/0x140 [ 2814.270587] ? inet6_compat_ioctl+0x320/0x320 [ 2814.271067] __sock_sendmsg+0xf2/0x190 [ 2814.271388] ____sys_sendmsg+0x70d/0x870 [ 2814.271733] ? sock_write_iter+0x3d0/0x3d0 [ 2814.272264] ? do_recvmmsg+0x6d0/0x6d0 [ 2814.272587] ? SOFTIRQ_verbose+0x10/0x10 [ 2814.272914] ? lock_downgrade+0x6d0/0x6d0 [ 2814.273258] ? __lockdep_reset_lock+0x180/0x180 [ 2814.273635] ? SOFTIRQ_verbose+0x10/0x10 [ 2814.274105] ___sys_sendmsg+0xf3/0x170 [ 2814.274431] ? sendmsg_copy_msghdr+0x160/0x160 [ 2814.274926] ? __fget_files+0x2cf/0x520 [ 2814.275312] ? lock_downgrade+0x6d0/0x6d0 [ 2814.275654] ? find_held_lock+0x2c/0x110 [ 2814.275996] ? __fget_files+0x2f8/0x520 [ 2814.276334] ? __fget_light+0xea/0x290 [ 2814.276662] __sys_sendmsg+0xe5/0x1b0 [ 2814.276972] ? __sys_sendmsg_sock+0x40/0x40 [ 2814.277319] ? rcu_read_lock_any_held+0x75/0xa0 [ 2814.277728] do_syscall_64+0x33/0x40 [ 2814.278030] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2814.278297] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2814.278449] RIP: 0033:0x7fa05acd5b19 [ 2814.278462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2814.278470] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2814.278491] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2814.282088] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2814.282658] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2814.283235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2814.283803] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:03:49 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:03:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140), 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="a219a00a57361021b5514b30bdcf6c047acc27b62a0f30427a1aac5eeb682520308d6925e0fdd6679b47332bc564b72cc0e7e963d42012ae6c08718332e4b51b5ac86c446a69df598a2f17c6804ab51cb58b040997bea87d700eec97f8a031bd0ebc636e396755970e32440d8fd7bf", 0x6f}, {&(0x7f0000000c00)="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", 0x1000}], 0x2, &(0x7f0000000700)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @tclass={{0x14, 0x29, 0x43, 0xfffffffb}}, @rthdr={{0x38, 0x29, 0x39, {0x3b, 0x4, 0x1, 0x3f, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}], 0x68}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)="af4226d7437a975b03fccc54f6461912431c8b43900ae8710d6ad440f9aca151853f6dc094965156fe703da5f470f398e1fc7d153fee8273a5f61986cf31f68bccd487843ee4e8bffb496a9455f20fba82d31ace9371a8131f6c50b2d56b0500a9c1e0899875e9d8ec79f6c562f034525007b394", 0x74}, {&(0x7f0000000800)="b68b17878cfeda15a5ab0f103200eb2cc2e0b28c87dfef94dd93269e68edc78161314b23469f0e26d2eda2b567bd67ec11fb69f40605333c4571982e6c4925d83923fc82b220e1d9c11d1daaa9b6e3fc56411047d750f7b5c3b1f88c5fff53002a7a972b766a3f9595e0ca2fbfae69fdcb3caecf86", 0x75}], 0x2}}, {{&(0x7f00000008c0)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x7}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000900)="a44fb1845139d1a983ac50284f06734163dfb00cd211cd7bef7b4fdecd22bedebdcc284ca854c395c8f49dc8bbe42a35ed59be60d1e55a7a4be8343692528693c364b9b1b2d324de058006ed4b19a6a70ddba9c0a9cf545a3e4f526df4f38d088960e714fe4c2a830d2d3584021b4cad4bdebf30a5596445689883fc3ceb1a433303e3d8c4e9", 0x86}, {&(0x7f00000009c0)="665956ea7687a25d9be84a02cfe274eb74050295b60db0734b48d61288bc23b92df728944ea4de2dd0a0fdf3ad83891ef6e2f26f04", 0x35}], 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"/348], 0x2b0}}], 0x3, 0x4004000) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)}], 0x1}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000a80), 0x5, 0x6000) bind$inet6(r1, &(0x7f0000000b80)={0xa, 0x4e24, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) 13:03:49 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x3040000, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766746e6f3d14e4dcbe919bbd280e61759b7157186bd8357d2cdf7dfa17e3fc26a2d56f5fcb01837fc7fac85541cc9c51375cfcc4250ece8abd08b6", @ANYRESHEX=r1, @ANYBLOB=',cache=fscache,version=9p2000.u,nodevmap,appraise_type=imasig,fowner<', @ANYRESDEC=r2, @ANYBLOB=',smackfshat=,\x00']) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0x105400, 0x0) fcntl$setstatus(r3, 0x4, 0xc4000) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) syz_io_uring_setup(0x7057, &(0x7f00000002c0)={0x0, 0x40fb, 0x10, 0x2, 0x11a, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000340)) 13:03:49 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r6, 0x0, 0x80000001) 13:03:49 executing program 4: socketpair(0xb, 0x0, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x1, r5, 0x1, 0x8, 0x6, @random="190002400a00"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000001380)={'ip6_vti0\x00', &(0x7f0000001300)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x5, 0x4, 0x69, @dev={0xfe, 0x80, '\x00', 0x26}, @dev={0xfe, 0x80, '\x00', 0x22}, 0x0, 0x8, 0x6, 0x10000}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002580)={'vxcan0\x00', 0x0}) sendmmsg$inet6(r2, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="8f1bf9de16eea31e68f8ca5af31b46ddac11d924e8e9aa0c0820ef8787dcbb348721ae71fe1cc10baaa4c6f99b1a6163ba0c0d2613d981a12ed18c1cf8a397e405a58375d177751c5171397e87b4c21f438f0377982171c17f37f9f8aa96c28161f1fad4c5d0101725d30bd24a164e55fdc3fcef82578bd61e774bb3b2b6854d03c3a47c9bcd5e2f6c", 0x89}, {&(0x7f00000000c0)="87a4aaf058abc02ce69598e4545c875eaa989a075aa3d934bce00b7ebdcc2a0011b28a545abf6ac21512e448cc9e7ade3f465cbd21c114eb889ad049368fc1f928a46b921d0aedfbcfd163e2ccf59e3f98b448d4e8e32a2e51a1e976938a6cc85a7e7cd78a25b894e275d8ff2d9c4960c86969663686cb8b4f2d8e0bc3b2e6b15415fbf51414eb0e914d52e7a8f610375cde079d767c261f43bf88b9c8bb34fb51e43212c38d897752edb87d12e22844303b4754cf77c9cf539424f45ea1ec5522e5b43a06c113432f549d3b40c863ecc970ba5400249cdb9d8f", 0xda}], 0x2, &(0x7f0000000200)=[@dstopts={{0x50, 0x29, 0x37, {0x5e, 0x6, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x26, 0x1, '\x00', [@pad1, @pad1, @jumbo={0xc2, 0x4, 0x5}]}}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="925e74f1ff58abdb75b44392bcea4098f8945269387e3de2138ec38864715a1b4147755e43c18a57e363cc49a4d69dbaa8940d154fd10ba5067632669a446c446214f66aed3e60a712d049b2f36155ce40958020f4dc972108ea9f71617ab611856d3f32e5f73c4230af93dc28c1e2221146918bb5d875", 0x77}, {&(0x7f0000000300)="8196d56bdbf3d7770489e3be2a3513a74f98a46f", 0x14}], 0x2, &(0x7f0000000380)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x29, 0x8, 0x0, 0x7, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}]}}}, @dstopts_2292={{0xa8, 0x29, 0x4, {0x2f, 0x11, '\x00', [@generic={0x3, 0x84, "c4479b1f1a35dadc6a02a66097f56b0caa83c1cff3a2af162f9cdebb97c4e0b29a1e9cd0299a8a406bccaa7d97addaac49e12ce50bc34c071e5a01f020946c5915028fcb2783e1bbeb3632302ecdc4fe97258fb73280c4496ef931727740823e42cc6e170c9d1cea35c33017526705003fb84baeaba238cb6535483c0e8c768a6c369efd"}, @pad1, @jumbo={0xc2, 0x4, 0xfffffff7}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xffffffff}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00', r5}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0xaa7}}, @hopopts_2292={{0xb0, 0x29, 0x36, {0x33, 0x12, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x0, 0x4, [0x8001, 0x9, 0x7, 0x200, 0x4, 0x4, 0x10001]}}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x38, {0x3, 0xc, 0x80, 0x1, [0x7, 0x9, 0x0, 0x7fff, 0x0, 0x67]}}, @hao={0xc9, 0x10, @loopback}]}}}], 0x238}}, {{&(0x7f00000005c0)={0xa, 0x4e21, 0x80000000, @remote, 0x8001}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000600)="b19beb26dbf0f24294b2a3debdd1ffdf0a7cd2c19f4dd0f2b14927ba5b21efe8e13c4ac2", 0x24}, {&(0x7f0000000640)="d96044bd1e4f681a0cd570606388bb57f99398d8dd0fc56994a00fa08d63ef4545f522604d2acffc3dc24d63825f0fd07f51d17ab7f3e304aef1846a33823640424179a9c38e1e8c42048b812f781b969e7772e86f1d3430af919daca678c5905f4b0ba8f7e898f0c9ea61a2914bac51104bf0e283d280e95dc1ea86106e187dcf41fc3d8c244cb87364771ab2f2", 0x8e}, {&(0x7f0000000700)="62af9b9813ff6924cfa06c53f4ec7c4e46d0e04a51f30374e6e97a4f05e273e781b5d3c2f83326a372641e2ab5023adb1bb82496e76742e6a69a04e6bc7497033cc6e87d861e9ac9e7ef445c2debd64d335f143844dbd00c569a1b72842d5eae5c983d9e0d555e05cc8a31e8ca554e75327f4d793d018f802f7666a5da4f48d335fa5432b22bcc792e464e6eaced0dbc478848362adca88673fb1ce72add91076f1a824c369a7432a7cbae9e774852e4413c4e51f593a8bc3c4beeaaa45d2b1715d2bef6", 0xc4}, {&(0x7f0000000800)="fd", 0x1}, {&(0x7f0000000840)="216787a47d180f44a0fd05e175d9c51c085c8d679c03e6ac74d800295b44da372cfd3184413c6907aa4e", 0x2a}, {&(0x7f0000000880)="38652db7892935c89bfd65dc252b98564c6ac6c642af0839a7c3bd922eaecade9738ce07f270881dee4b8b1faa2911c2cdfe52665824ff89a8194a5a1fe0f0fc0a363b4e2a4f6847c0d227bffb5e9a1c4c74fbb4cb251ea32e1e7f2f391fa3d883f47babe6adace5cda1e6eb14357b20c7c6ae78501d2e0b3a6eb179d9c66dd377940e7757b8dba40c54d1a0cecf7a30c3969d331cc34e2c5a946661e60212b4304f2ad1e4b4ac61969ed2fb134b0059215f22f8d81c1f25ba13f9401e367a7faf798d4eec473b032d68f6aa72e57b8af8870d17de32368b5cd3f00e5f", 0xdd}], 0x6, &(0x7f0000000a00)=[@rthdr={{0x78, 0x29, 0x39, {0x0, 0xc, 0x1, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3f}, @empty]}}}], 0x78}}, {{&(0x7f0000000a80)={0xa, 0x4e24, 0x8, @private1, 0x5}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="4d80ab8f32dac75e5e5c7c43df46cd83d0d429964374b89bf2fc2470909e13a9344b798a9d1ddb093eb1e69046aa66a81eaa44fe5f4b0bb4d1ff936626ee6766e98053c9b6922fa2447278f048709863fcf3b5aeeb37de17aa61094116b35bc405b0c00e30a9acff69df3795bec47a9194f75c30eab90711b520cbc87d59a7b4c78af24311ec8081cbfaa474ac58bcbb02e0c1abd716d7e45857f43dd2a62536cb7cbef7b106957c3b4609e06157a43abd6d837be233ac0265ab015f2ce86627066c85b006a3392cc9351dbc641ca0ea7ac8c05e2817300e", 0xd8}, {&(0x7f0000000bc0)="a1617d5c89a9427841af6a71b806e4b75746d3df8db2f2126208158e360f3dff504e3c0d1ae18149003bf8eefcaf02a90bef00c685566690ef3030e0a8d33722994c3cd3351fd3bad50a1b75e1f637d65b9c8dcf97ea70b48035ec6f9ee676161348d0d49c70baa7a9db8476a40a1e69592d699d709f9043105ce541fa", 0x7d}], 0x2, &(0x7f0000000c80)=[@dstopts={{0x120, 0x29, 0x37, {0x5e, 0x20, '\x00', [@hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x200}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x3f, 0xe4, "e914e2d954c984f0e518a22d0194c77c497fc558f5a872734a0b23594fef1f20920569a1cf81a896eb4c52041f1ea2b522c4544206ea6f708acc0250b2db1858b9107fdec9c1541cb102263329429e9249abb4536100ec12eca54ce1fa84488d48d14d4c1167935a3b6231680f6d9f99399a7caf63557181cda0eb38b65e44a6321b1a91e05b080c7bfa0ac108c40d682c6f44a53d553a0e9b49f5d31df81abeccbf46bd6c587c4396977a2a58b1751845dea692de36eeac4fefb2cc9fdf33f2d75b816cfd27d47cc33f71524819aec337993f13b2ff699dd537e341ecec02980f42ebf1"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0xcb}}, @flowinfo={{0x14, 0x29, 0xb, 0x400}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0xfffffff9}}], 0x198}}, {{&(0x7f0000000e40)={0xa, 0x4e22, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000000e80)="68bbb5e4af6846abbe5f05a3ed5096d2403890b8f6025c567e6ddf7502f6b30e60355611e7c90402141b181d8a36e2884899ddd24ba4763bfaab0e24c2b746fef2bff739fe733f46a511d8926d7147856e31a04904d32d0ebc3eaa311fbb885c4c3f46bf6f65f86d5b0677174adb324297bf9c4a6cd888145b3d3bb87d60b5c267f1f5cf5475b02bed5bdd48c7132bf1d95c375eb7390f7ecb809473a58588a8fa12f375cf88e80b1fe5591d07f69784f72507d2650d747f5f2fea0afa4eae52", 0xc0}, {&(0x7f0000000f40)="d1517ac15cb23b618bd2e6e6ebf8db035e959852813a50a7cbcc17d779976cc761fbde84af808b9c2b67278bc259837dcb51027c5a476e5497e2403f64f54d2df1e602ed34c62fad46a0a4080b1a952453544ff989bc1b44469d6e2b4219397371d976ec9a984c034166dc6d136b08a42e6c3478ce0d7d6ca3ba85aaf9fb2c82f1b524f940bfea9126c6efb9dbc56e0877fe5668e8b8185ce4b6c6c036a58ec3a6b2a5a3afb65329f68324daa7ff02620a13b26ce3dccc91441a9a8e0d5bef78acca4ba1496878ef3ddfb089f760f93ba184a7d7b01700488294a80db03a67a508ac034b761125bcf7a50e", 0xeb}, {&(0x7f0000001040)="944b8df27eec3d7ca1b3f90840acf5c89d5822edf6eecf876cabe514bb57735f01955a15f7b81797c0d6aa81a604de06b6a8c2a45205aafe7ee73e46f77088efafb1a6078ebdba9e", 0x48}, {&(0x7f00000010c0)="dd34c76bf64c5bd94cbe00a42fc331930935895913b985c631f9b5ec9d6305e42ae290f40eb2a5663e469a1a00a83e88e6f56c4acea7ff3222ce216d1c4ed2349552da550366c2bc3b12fbb03635c2c56b0967af561877142442414d688fe62b1068b021967b53b8e044012747bdbc49344d99016e3547b9a80ffc211d96c92ced37333bdc561449d418b481", 0x8c}, {&(0x7f0000001180)="1b7afd22d7a738c2c45041879bf5779cb1f525af7bb758333914c3ee7cc1f092b5f4dc2e7be1dab1a9dcda1207b4bb56dbb22d6ae1368f53bbf3ebec4743f4b9fdd53b8243b464e8c5fa750a490dc2252845ca7dbe6555d1e9d0c523a67274099ebdad97de3b3d155ffcb4d1d02a92f28dc3cf9f6a9ae225802eef9adc9ff74ae28275b8bf91fd1ec1e7c03d60d419ce2be1b78823c1fe8ad741f3566728ffefd7cb10ce89cf11103afe90c7d46aa7740aa0bd6f03b79608fb11a67ea1f9b97a3a5b211534d8813113beb86c421f8acda406ab6d5dfd830a5d171276087c16d586cf1873cbb7bacfa8", 0xe9}], 0x5, &(0x7f0000003fc0)=ANY=[@ANYBLOB="24000000000000002900000032000000fc010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="00000000bcbf7822e02644338ee7c3ae7338132b4c06b3bfb37a2f5215cdd25690e5fd2f54f72874e13d7890c7873a54d4bb299d9a38c7c6a135366eddd425fb580bed6367bb9e89bbc78a2b476a48813fccfde074ae521018a4591a7492284f75b1f6fbb4d821a1061ef19628f4568d54e766049e05da97e5fc612119078cf0ac055e55eb565c2631e5edb7640a5d19340df21c02d46617fe7c74dd6191df79ae091848f7fd32f41f20df2474115c2ff08891cacb09f97008b15159f08aa84e2467c40782efdafa5669c82f"], 0x1c8}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000015c0)="a17ae042d8e96bff24ab001517b7c8cd28e21e089ff5423e0f1f31b5d57c008e63b3c67fa25a8b2fae3327145b58c61036e9dc938e971f9eb5765e76da8bb5a9bf2762f46234266f6cf3fc805d7bb08f981789d03619fc78ffbc1ca8c56537b01b66d1d041d8556131321301acf281c63f1d8751bfe67f894550e67f6aab1e6a25c8ef63b07290be1d", 0x89}, {&(0x7f0000001680)="365413fb5dd20c32457961bb67e5df3757a291d7c7d83f193f6edaab76debd3a88c24fa42bfd3638071e6986c527b8540180eda08c4951e52d5bd9a3263dabbd4f27c3c999701f9511b90fc2d1b57645440be82ad682a64df5f9bfb53f36e19987f680146e43b031334bd0d1da2d45385ad0e4337ce7f40b58173a199441ca4de2dc7a024f8a79c6b2f0e8872c3b2953066bdaf737a93f0728abac17ced4ecb0b4b76339b94bd81cd9412985399c5c26becdd696ff0b295467432523da7bc9b15c958dc6ef1eda", 0xc7}, {&(0x7f0000001780)="bff5d08ac1d1c6b5ebd31ca398bd2bb4ecbbd49ac36dc69b40c7b59c7d551a7d302160459e94fcab5be2d4c09ae472cdd4207d14b6679555fb4115832229787961e2c1e4c2511ba4d6f6acacd7126f050bdab985dda0675c509aab140fba588e28044261b429ec378da175c3ed74b0b795fa", 0x72}, {&(0x7f0000001800)="0abb0b1503560e52a34456ce2446cd9cd0c8ef39f7924b311777803932a29e747436f6dca365c6989c3f56ed56edf32140477e210860e77a9c0b3d6450f511597ea9464a5979bc93eb957cb3ae6973de170f1ea1813d4b01cb6815f3d4ea9d4660a4ccf97f6a578e84b6422d6f376b5bde58f964c7314a88ce5c03a71b25b6ff8ec326ebeb452a1d7e2c39ad", 0x8c}, {&(0x7f00000018c0)="d40e90061f2f41cf60b3b49d72e3a0d19fd9888f8213b53aac38b26df3fbdb054f98e9c62aa37b7b1c1fafa6acdf558759f9edc2bc92cbb153297b926c8a96dc", 0x40}, {&(0x7f0000001900)="4afeba687778845e9fe9cdd6be6520cccb336e0e357d0e2c6b7d0a97d62da2059e0d6b017de45092aeef59365562601b6dfeccbefc15ad5a2f40db4a1038f6b6d9763bcc45710315d515ec035694d324dcea97c99f7d7690d93ca01782d5cc16c7cea47ca4e0d70a19026435aa2eaa0296224d05962081ba74c42977ad655afe96e6d7a3cba1c1466f20d9ec15312e3ed3e83bf15ce0138578d8c58960e28b6c8cf7d00110a5847d75f86da51804e3d5d80ed30be17cbc192dd581486bee5a5ea75968d339367696665242c4c38db6ea0b096fb9ba9612a39d249e1fc925a5446287babdf542d4e45f85c1d0c7b604504c00", 0xf2}], 0x6, &(0x7f0000001a80)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x5e, 0x6, 0x0, 0x1, 0x0, [@private2, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x2c, 0x3, '\x00', [@ra={0x5, 0x2, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x147377c0}, @enc_lim={0x4, 0x1, 0xca}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xc0}]}}}], 0xb8}}, {{&(0x7f0000001b40)={0xa, 0x4e20, 0x6, @remote, 0x1}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000001b80)="b88b5e3966331d44c5ead31ae190379710f30bd0384f6eeee204b82066149a3ce5f66fe617159366a688e5fa1d78ca7a8622745893bfaa7a63fed5198148305d9799ade4db6bcce560c7584c61f6e16fbb857e87f97e7dca92a1e997a0a801d3256725ccf24915bcb6a3da9dd58c8c46bbbb86fe2897710e3b", 0x79}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)="f1124b7af91711cfbc2c2ba60efeb514312e7722f4f909f3519b7c40713eb2ae9ee7bb7432f41a24af87da6e1eed46b051bd39f6f7476900348af77018bb58cb558bbfdea516b6140158f5f22dbb68e9e23d249e81a579a225d7f9ced721c9091b83e0825b1ae8b9e69b7a936a184a6c83033873cd8966448d9536e6757cab6ae0ccc2b0de57faa74bcc539728db36d363f79ddcf1e7568d549a274bef88df5cf69425a16600792bb9fe1bfb6efadc4f668257f985bb2c0296bd3b5c0ad60710941903990532cf5fc1fd38caece050edac027771b8fdddd002908e715ae28443e606", 0xe2}], 0x3, &(0x7f0000002d40)=[@hopopts={{0x110, 0x29, 0x36, {0x73, 0x1e, '\x00', [@generic={0x5, 0xc7, "286c3b122301d2e7d11970bdc77ea29cce0b76005dfb6f1ef19656690de402b7d0f86f0f7e75d4310e7be70c881f12ab333c21ce8a3bbc89d69e18981b82d81d310a98475ce8721491592af6b66a0b534c9a946c0720feaf9cb47b4312884ace94c2059b78e4c90ef94279bb4cd836d51a005ad15f1ed88511949a7a85a710899beffcd02ebf462961baea283845c646e26aea1e1f9c252563bb2d1bfc7c87bf6a73f77e4d4ca61048d56e42f8dbe2c99caab5b7a62c2884865866d7b1ea5074ad1c9550381aba"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x5, 0x2, [0x3aaaad04, 0x800000000000, 0x52, 0x2]}}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x29, 0xe, 0x0, 0xa7, 0x0, [@mcast2, @local, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @dev={0xfe, 0x80, '\x00', 0x3c}, @loopback, @mcast1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @dstopts={{0x1030, 0x29, 0x37, {0x1, 0x202, '\x00', [@hao={0xc9, 0x10, @private1}, @generic={0x2, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x7}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x4e}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x33, 0x3, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x80}, @pad1, @enc_lim={0x4, 0x1, 0x5}]}}}], 0x1248}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002000)="7b438629790e", 0x6}, {&(0x7f0000002040)="25d4c4c7abd3d457a410701df7f88eec7b4f59c914094d23fa9b18f7504749196c6284bb900a207fb59ab4474f019b7af67fbd3d", 0x34}, {&(0x7f0000002080)="53aa93953d1f13f970873b6564802a0c80a541983d033e57253500814b412358dd7d26f65ba72170f334cad2d0c7044f37d3954ddf01928d986d46c8becbdc4100990943da68806f896a17e6ab4711493191d94d47512926a6c1431453982e796fbcbd375331314710b0797b78adb9b323aaa5f59e133f4c2e46bd9493686c84653506e6c1b9f6a1cf51513a1c27312ae278f9c43118c3cd32c91cf0679988333e856ead8760f4b6af8220acc92eea63951016d98e4ffec8bf0a08116a253577aed6fa5d662124ac35e00df49dc8758f01ea6277c0cf78004137dca4bc36ba52492cd61feb040480adff26", 0xeb}, {&(0x7f0000002180)="e29489e08471b710e962cbf18a938f53d76609f2ca2c0d7246b705864acb57d196db0b525a304ab9622682bb55cf28691ca2f149b43bdbb7bf8a305b0a1a82a5138377b503388bf522a71704bd66c2cd98330f7efcf708ca29cbd25fb32933a8eafcdd25be6cfe07847cec1029815aa3c65e96d7a12122b5942202898be0be084fd4a69840448fba09e331602526970dfef2cede208e3cbe29a85b8437ff0b8fdc7057c29bf2bbc76295f7061e4151be0df6b098976fb8855b8c736a2acdc853b5aac92ae917ff727a100a8a93cdec529996ed8f40303b8b17c22d5a19b551edf3ae42398ddc4cf75d5cfb", 0xeb}, {&(0x7f0000002280)='Wg', 0x2}, {&(0x7f00000022c0)="fb309aeaa0553fa4c0e678502072af328559548f5ecd80c5529059b0518a7bb16686a5e8ff2a55a3b4f073b7e300db78953f7b93f32983292b189c4089d7111f917bd33f3c16974b567f1d7bfb3e73", 0x4f}, {&(0x7f0000002340)="d133d346ac0580b5d42e8cf3367d12cdfa88d23f3b14798978f7cced18e9a93344470a65a3c1521cf15307943da771bbfc8b1201f50428768e0284af4603d870df25600db957020ad622e2602d52cc8f9cebb12afc17fc33f6ee9c5d36c5642b008fce4cc115a24df6cae8d0dc096105755b3b37ecff0eecc98962073f8889e5dfc0e2ac024eb77e7d65f6cd256787623d4831ba8bc183050c7aa606bd419384df437bd74608ebefac1ebd7159e448204f9643992dae4c111329", 0xba}, {&(0x7f0000002400)="6949c061b2ad6d8709c1b04e11d954b034a032e0b583147d02e5ff5a889bb41f8cc84015f4e6c7ea60abc65a99ed5bafb173f3a59db8a05f633620b565b518d9fc81083ba3b83c58ce27fb3c53354e879f1d21a5d63754f3ac2c034cbf11207d160283850a72350a2d9e0d18cbce33f70ab3d541b68dc16b2a0b1d74c3eae39f8f02a105b5ee3883b05af89ef71e26a190b8134c97e5eb3e15621d8d7c3565d7e255041b910e584100d563f5c386cf6cb4c15b34cab99a1e21c9cb809eb4e5ae02c8ce047ddfb723fd299046", 0xcc}], 0x8, &(0x7f00000025c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x1000}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r7}}}], 0x40}}, {{&(0x7f0000002600)={0xa, 0x4e23, 0x6, @private0, 0xff}, 0x1c, &(0x7f0000002840)=[{&(0x7f0000002640)="33cc8e63d1367f426400b878e70e3ae0f2338e78a2c7831ddb1eb8325330931e0796b3ebac2132a2aeccf87ca00ba9f544796117478d9b9ee83f50409dfa149b365a38771d4ea568d52d1bf2dbf8f7e119b59f4b5cc6e5800cf872b004a4b71a463c85b49d498cd2e49da76c8435c7d9bf1d12c5fcccaaab8c4a2f6934e011ea9642a85dfd9bfc02300bd6e142cc8584", 0x90}, {&(0x7f0000002700)="739a35926da34a894620dd91f0beca364c19706ce2eab0508deed0496cbb8a4e5ac2b19fb915e706a23e305d5b713eba1f8832f28c1fbec559177ed4bc4b73b792cb1c95c4758709d168a20e5bb196afba1fe6e21c404d43b7a3214e2ce91fdd983976af5d38c761b190ea2e3ad51736b5e30cd7382921", 0x77}, {&(0x7f0000002780)="4de4d89e1f9518c6d87507cb4ae0795b9410889770b0", 0x16}, {&(0x7f00000027c0)="eceba53d5b01640ebc55a20da22d92b2de733533ac3cf77852b1e034257fd5b9e67fe6088fe6833627c3e8486e62ffaf1b0eb1968fcea0498000a3c903b124b0761a213fd928341822baff46970d4f5269189b24b29b534c1f27858678abb2587b5c1f80efcc21d4407521b6f70d12", 0x6f}], 0x4, &(0x7f0000002880)=[@hopopts={{0xf8, 0x29, 0x36, {0x0, 0x1b, '\x00', [@jumbo={0xc2, 0x4, 0x100}, @calipso={0x7, 0x20, {0x0, 0x6, 0x9, 0x1, [0x8, 0x6, 0xfffffffffffffffc]}}, @generic={0x7, 0xa9, "6deb28bc30009b87678eb27e096bd2818fc1c47b484f0284164312afb1f1bd267c89d4a1b653e023bece232cf084bec4724468d5c5fc624f024c15a01e09e2631f94fb2c6b2a095003a098d46ac8bada01f7267275ce71e2012f66026786768c32765274cd5f439c612fad36a939e2aa937030525378faa83b4caabca72a877ad557f44aa91baa1df2ca2f617a038202ff22e4a5de5bc75b9076ab3f997ff17f0f690f76dcda297334"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x67, 0xa, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x9, [0x8, 0x2, 0x1, 0x101]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @enc_lim={0x4, 0x1, 0x3f}, @pad1]}}}, @hopopts_2292={{0xf0, 0x29, 0x36, {0x0, 0x1a, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0x1, 0x9, [0x4]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x40, 0x2, [0x584, 0x4c00, 0x1]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x1, 0x60, [0x1, 0xffffffffffffff23, 0x80000000, 0xd7]}}, @ra={0x5, 0x2, 0x6}, @generic={0x3f, 0x5c, "55da98c6513df14a8abc55b9c2311efd4beb143c48ba17dbbbf43211e9cc1c8c5622f8d627d473a2a5e3c818e4e3335688c04136098434d85580352880126d513bab24f4b8faf3c334667b268e71170f87bcc9efe26a0aed62c1e3e4"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x23}}]}}}], 0x270}}], 0x9, 0x1) 13:03:49 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 61) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:03:49 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x6000000}, 0xa90}) 13:03:49 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2834.893579] FAULT_INJECTION: forcing a failure. [ 2834.893579] name failslab, interval 1, probability 0, space 0, times 0 [ 2834.894660] CPU: 0 PID: 32404 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2834.895255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2834.895970] Call Trace: [ 2834.896221] dump_stack+0x107/0x167 [ 2834.896562] should_fail.cold+0x5/0xa [ 2834.896906] ? trace_hardirqs_on+0x5b/0x180 [ 2834.897298] ? __alloc_skb+0x6d/0x5b0 [ 2834.897653] should_failslab+0x5/0x20 [ 2834.897998] kmem_cache_alloc_node+0x55/0x330 [ 2834.898442] __alloc_skb+0x6d/0x5b0 [ 2834.898790] skb_segment+0x9d8/0x3aa0 [ 2834.899221] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2834.899680] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2834.900148] ? SOFTIRQ_verbose+0x10/0x10 [ 2834.900529] __udp_gso_segment+0x11c6/0x1830 [ 2834.900926] ? __sk_receive_skb+0x830/0x830 [ 2834.901337] udp4_ufo_fragment+0x528/0x720 [ 2834.901733] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2834.902184] inet_gso_segment+0x4fb/0x11a0 [ 2834.902612] skb_mac_gso_segment+0x273/0x570 [ 2834.903013] ? inet_sock_destruct+0x840/0x840 [ 2834.903419] ? skb_network_protocol+0x650/0x650 [ 2834.903831] ? skb_crc32c_csum_help+0x80/0x80 [ 2834.904237] ? lock_acquire+0x197/0x470 [ 2834.904597] ? __dev_queue_xmit+0x1c2/0x2710 [ 2834.905007] __skb_gso_segment+0x32d/0x6d0 [ 2834.905407] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2834.905880] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2834.910331] __dev_queue_xmit+0x87b/0x2710 [ 2834.910737] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2834.911165] ? mark_held_locks+0x9e/0xe0 [ 2834.911539] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2834.912018] neigh_connected_output+0x382/0x4d0 [ 2834.912462] ip_finish_output2+0x6f1/0x21f0 [ 2834.912858] ? nf_hook_slow+0xfc/0x1e0 [ 2834.913211] ? ip_frag_next+0x9e0/0x9e0 [ 2834.913571] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2834.914035] __ip_finish_output.part.0+0x5f3/0xb50 [ 2834.914499] ? ip_fragment.constprop.0+0x240/0x240 [ 2834.914931] ? nf_hook+0x510/0x510 [ 2834.915278] ip_output+0x2f7/0x600 [ 2834.915615] ip_send_skb+0xdd/0x260 [ 2834.915954] udp_send_skb+0x6da/0x11d0 [ 2834.916329] udp_sendmsg+0x139a/0x2160 [ 2834.916682] ? tracing_generic_entry_update+0x1ed/0x270 [ 2834.917160] ? ip_frag_init+0x350/0x350 [ 2834.917518] ? tracing_generic_entry_update+0x1ed/0x270 [ 2834.918246] ? udp_setsockopt+0xc0/0xc0 [ 2834.918624] ? perf_event_switch_output+0x7d0/0x7d0 [ 2834.919105] ? lock_chain_count+0x20/0x20 [ 2834.919482] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2834.919926] ? lock_chain_count+0x20/0x20 [ 2834.920295] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2834.920759] ? perf_trace_lock+0x2bd/0x490 [ 2834.921142] ? perf_swevent_event+0x6c/0x550 [ 2834.921533] ? __lockdep_reset_lock+0x180/0x180 [ 2834.921971] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2834.922362] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2834.922831] ? udp_v6_push_pending_frames+0x360/0x360 [ 2834.923293] ? SOFTIRQ_verbose+0x10/0x10 [ 2834.923692] ? lock_acquire+0x197/0x470 [ 2834.924049] ? find_held_lock+0x2c/0x110 [ 2834.924429] ? __might_fault+0xd3/0x180 [ 2834.924790] ? lock_downgrade+0x6d0/0x6d0 [ 2834.925176] ? lock_downgrade+0x6d0/0x6d0 [ 2834.925556] ? sock_has_perm+0x1ea/0x280 [ 2834.925924] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2834.926418] ? _copy_from_user+0xfb/0x1b0 [ 2834.926821] ? __import_iovec+0x458/0x590 [ 2834.927196] ? udp_v6_push_pending_frames+0x360/0x360 [ 2834.927666] inet6_sendmsg+0x105/0x140 [ 2834.928020] ? inet6_compat_ioctl+0x320/0x320 [ 2834.928422] __sock_sendmsg+0xf2/0x190 [ 2834.928780] ____sys_sendmsg+0x70d/0x870 [ 2834.929155] ? sock_write_iter+0x3d0/0x3d0 [ 2834.929532] ? do_recvmmsg+0x6d0/0x6d0 [ 2834.929889] ? perf_trace_lock+0x2bd/0x490 [ 2834.930281] ? SOFTIRQ_verbose+0x10/0x10 [ 2834.930664] ? __lockdep_reset_lock+0x180/0x180 [ 2834.931093] ___sys_sendmsg+0xf3/0x170 [ 2834.931451] ? sendmsg_copy_msghdr+0x160/0x160 [ 2834.931873] ? __fget_files+0x2cf/0x520 [ 2834.932233] ? lock_downgrade+0x6d0/0x6d0 [ 2834.932612] ? find_held_lock+0x2c/0x110 [ 2834.933003] ? __fget_files+0x2f8/0x520 [ 2834.933384] ? __fget_light+0xea/0x290 [ 2834.933757] __sys_sendmsg+0xe5/0x1b0 [ 2834.934103] ? __sys_sendmsg_sock+0x40/0x40 [ 2834.934510] ? rcu_read_lock_any_held+0x75/0xa0 [ 2834.934985] do_syscall_64+0x33/0x40 [ 2834.935325] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2834.935782] RIP: 0033:0x7fa05acd5b19 [ 2834.936121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2834.937703] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2834.938396] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2834.939014] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2834.939631] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2834.940243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2834.940860] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:03:49 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r6, 0x0, 0x80000001) 13:03:49 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:03:49 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 62) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:03:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0xf88be3b6e549d26f, r0) fremovexattr(r0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x93) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x26a900, 0x20) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x9, 0x40, 0x86, 0x5, 0x0, 0xffffffff, 0x5802, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x724e}, 0x248, 0x6, 0x80, 0x2, 0x1f, 0x7, 0xff, 0x0, 0x7}, 0x0, 0xb, r3, 0xb) 13:03:49 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x7000000}, 0xa90}) 13:03:49 executing program 6: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) tee(0xffffffffffffffff, r1, 0x1, 0x6) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8, 0x1) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @empty, 0x0}, &(0x7f0000000200)=0xc) bind(r1, &(0x7f00000002c0)=@can={0x1d, r4}, 0x80) r5 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x6, 0x4) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0xffffffff}, 0x1, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r0, 0x0, 0x4000007ffffffc) 13:03:49 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:03:49 executing program 1: clone3(&(0x7f0000000000)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r1 = socket$inet(0x2, 0x2, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0) r3 = syz_io_uring_complete(0x0) io_uring_enter(r2, 0x630a, 0xce52, 0x2, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000080)={0x1, 0x0, 0x8, 0x2c0, r4}) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x40, 0x6f) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:03:49 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2835.244860] FAULT_INJECTION: forcing a failure. [ 2835.244860] name failslab, interval 1, probability 0, space 0, times 0 [ 2835.245930] CPU: 0 PID: 32707 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2835.246559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2835.247287] Call Trace: [ 2835.247544] dump_stack+0x107/0x167 [ 2835.247890] should_fail.cold+0x5/0xa [ 2835.248243] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2835.248724] ? create_object.isra.0+0x3a/0xa20 [ 2835.249353] should_failslab+0x5/0x20 [ 2835.249703] kmem_cache_alloc+0x5b/0x310 [ 2835.250085] create_object.isra.0+0x3a/0xa20 [ 2835.250504] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2835.250986] kmem_cache_alloc_node+0x169/0x330 [ 2835.251418] __alloc_skb+0x6d/0x5b0 [ 2835.251770] skb_segment+0x9d8/0x3aa0 [ 2835.252124] ? mark_lock+0xf5/0x2df0 [ 2835.252545] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2835.253010] ? mark_held_locks+0x9e/0xe0 [ 2835.253400] __udp_gso_segment+0x11c6/0x1830 [ 2835.253802] ? __sk_receive_skb+0x830/0x830 [ 2835.254195] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2835.254723] udp4_ufo_fragment+0x528/0x720 [ 2835.255121] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2835.255578] inet_gso_segment+0x4fb/0x11a0 [ 2835.255997] skb_mac_gso_segment+0x273/0x570 [ 2835.256403] ? inet_sock_destruct+0x840/0x840 [ 2835.256811] ? skb_network_protocol+0x650/0x650 [ 2835.257226] ? skb_crc32c_csum_help+0x80/0x80 [ 2835.257638] ? lock_acquire+0x197/0x470 [ 2835.258000] ? __dev_queue_xmit+0x1c2/0x2710 [ 2835.258431] __skb_gso_segment+0x32d/0x6d0 [ 2835.258837] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2835.259315] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2835.259741] __dev_queue_xmit+0x87b/0x2710 [ 2835.260154] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2835.260592] ? mark_held_locks+0x9e/0xe0 [ 2835.260975] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2835.261464] neigh_connected_output+0x382/0x4d0 [ 2835.261917] ip_finish_output2+0x6f1/0x21f0 [ 2835.262337] ? nf_hook_slow+0xfc/0x1e0 [ 2835.262705] ? ip_frag_next+0x9e0/0x9e0 [ 2835.263069] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2835.263544] __ip_finish_output.part.0+0x5f3/0xb50 [ 2835.264570] ? ip_fragment.constprop.0+0x240/0x240 [ 2835.265701] ? nf_hook+0x510/0x510 [ 2835.266095] ip_output+0x2f7/0x600 [ 2835.266956] ip_send_skb+0xdd/0x260 [ 2835.267817] udp_send_skb+0x6da/0x11d0 [ 2835.268735] udp_sendmsg+0x139a/0x2160 [ 2835.269631] ? tracing_generic_entry_update+0x1ed/0x270 [ 2835.270874] ? ip_frag_init+0x350/0x350 [ 2835.271793] ? tracing_generic_entry_update+0x1ed/0x270 [ 2835.273026] ? udp_setsockopt+0xc0/0xc0 [ 2835.273940] ? perf_event_switch_output+0x7d0/0x7d0 [ 2835.275123] ? lock_chain_count+0x20/0x20 [ 2835.276078] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2835.277217] ? lock_chain_count+0x20/0x20 [ 2835.278146] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2835.279315] ? perf_trace_lock+0x2bd/0x490 [ 2835.280278] ? perf_swevent_event+0x6c/0x550 [ 2835.281273] ? __lockdep_reset_lock+0x180/0x180 [ 2835.282372] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2835.283295] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2835.284455] ? udp_v6_push_pending_frames+0x360/0x360 [ 2835.285632] ? SOFTIRQ_verbose+0x10/0x10 [ 2835.286607] ? lock_acquire+0x197/0x470 [ 2835.287517] ? find_held_lock+0x2c/0x110 [ 2835.288454] ? __might_fault+0xd3/0x180 [ 2835.289368] ? lock_downgrade+0x6d0/0x6d0 [ 2835.290340] ? lock_downgrade+0x6d0/0x6d0 [ 2835.291300] ? sock_has_perm+0x1ea/0x280 [ 2835.292235] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2835.293408] ? _copy_from_user+0xfb/0x1b0 [ 2835.294393] ? __import_iovec+0x458/0x590 [ 2835.295345] ? udp_v6_push_pending_frames+0x360/0x360 [ 2835.296515] inet6_sendmsg+0x105/0x140 [ 2835.297416] ? inet6_compat_ioctl+0x320/0x320 [ 2835.298458] __sock_sendmsg+0xf2/0x190 [ 2835.299348] ____sys_sendmsg+0x70d/0x870 [ 2835.300263] ? sock_write_iter+0x3d0/0x3d0 [ 2835.301232] ? do_recvmmsg+0x6d0/0x6d0 [ 2835.302128] ? perf_trace_lock+0x2bd/0x490 [ 2835.303102] ? SOFTIRQ_verbose+0x10/0x10 [ 2835.304041] ? __lockdep_reset_lock+0x180/0x180 [ 2835.305122] ___sys_sendmsg+0xf3/0x170 [ 2835.305997] ? sendmsg_copy_msghdr+0x160/0x160 [ 2835.307052] ? __fget_files+0x2cf/0x520 [ 2835.307963] ? lock_downgrade+0x6d0/0x6d0 [ 2835.308908] ? find_held_lock+0x2c/0x110 [ 2835.309859] ? __fget_files+0x2f8/0x520 [ 2835.310809] ? __fget_light+0xea/0x290 [ 2835.311713] __sys_sendmsg+0xe5/0x1b0 [ 2835.312561] ? __sys_sendmsg_sock+0x40/0x40 [ 2835.313518] ? rcu_read_lock_any_held+0x75/0xa0 [ 2835.314624] do_syscall_64+0x33/0x40 [ 2835.315445] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2835.316585] RIP: 0033:0x7fa05acd5b19 [ 2835.317415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2835.321423] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2835.323083] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2835.324639] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2835.326186] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2835.327755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2835.329333] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 [ 2835.462773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35144 sclass=netlink_route_socket pid=32710 comm=syz-executor.6 [ 2835.479435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34247 sclass=netlink_route_socket pid=32710 comm=syz-executor.6 [ 2835.487001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53893 sclass=netlink_route_socket pid=32710 comm=syz-executor.6 [ 2835.492123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53481 sclass=netlink_route_socket pid=32710 comm=syz-executor.6 [ 2835.552979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35656 sclass=netlink_route_socket pid=32710 comm=syz-executor.6 [ 2835.560798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32710 comm=syz-executor.6 [ 2835.572619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33608 sclass=netlink_route_socket pid=32710 comm=syz-executor.6 [ 2835.575218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35140 sclass=netlink_route_socket pid=32710 comm=syz-executor.6 [ 2835.591557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=32710 comm=syz-executor.6 [ 2835.592833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=32710 comm=syz-executor.6 13:04:09 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:04:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffffffffffff}, 0x89a2, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x6, 0x0, 0x0, 0x0, 0xdf3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000100)='syscall\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x90000, 0x27e}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x40b, 0x7, 0x7f}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 13:04:09 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042acd7000fedbdf2549000000080001003c0000000c009900090000003e000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x240040c1) r2 = socket$inet(0x2, 0xa, 0x3fc000) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:04:09 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 63) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:04:09 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:04:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x327000, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) fadvise64(r2, 0x80000001, 0x1000, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000040)={@id={0x2, 0x0, @b}}) 13:04:09 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {0x40000000}, 0xa90}) 13:04:09 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2854.657404] FAULT_INJECTION: forcing a failure. [ 2854.657404] name failslab, interval 1, probability 0, space 0, times 0 [ 2854.658425] CPU: 1 PID: 33041 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2854.659084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2854.659886] Call Trace: [ 2854.660149] dump_stack+0x107/0x167 [ 2854.660914] should_fail.cold+0x5/0xa [ 2854.661288] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2854.661799] ? create_object.isra.0+0x3a/0xa20 [ 2854.662255] should_failslab+0x5/0x20 [ 2854.662640] kmem_cache_alloc+0x5b/0x310 [ 2854.663041] ? mark_held_locks+0x9e/0xe0 [ 2854.663435] create_object.isra.0+0x3a/0xa20 [ 2854.663863] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2854.664350] kmem_cache_alloc_node+0x169/0x330 [ 2854.664798] __alloc_skb+0x6d/0x5b0 [ 2854.665154] skb_segment+0x9d8/0x3aa0 [ 2854.665514] ? lock_chain_count+0x20/0x20 [ 2854.666090] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2854.666700] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2854.667228] ? SOFTIRQ_verbose+0x10/0x10 [ 2854.667631] __udp_gso_segment+0x11c6/0x1830 [ 2854.668057] ? __sk_receive_skb+0x830/0x830 [ 2854.668813] udp4_ufo_fragment+0x528/0x720 [ 2854.669223] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2854.669931] inet_gso_segment+0x4fb/0x11a0 [ 2854.670348] skb_mac_gso_segment+0x273/0x570 [ 2854.670777] ? inet_sock_destruct+0x840/0x840 [ 2854.671206] ? skb_network_protocol+0x650/0x650 [ 2854.672101] ? skb_crc32c_csum_help+0x80/0x80 [ 2854.672525] ? lock_acquire+0x197/0x470 [ 2854.672903] ? __dev_queue_xmit+0x1c2/0x2710 [ 2854.673326] __skb_gso_segment+0x32d/0x6d0 [ 2854.673740] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2854.674241] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2854.674693] __dev_queue_xmit+0x87b/0x2710 [ 2854.675608] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2854.676210] ? mark_held_locks+0x9e/0xe0 [ 2854.676642] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2854.677318] neigh_connected_output+0x382/0x4d0 [ 2854.677780] ip_finish_output2+0x6f1/0x21f0 [ 2854.678177] ? nf_hook_slow+0xfc/0x1e0 [ 2854.678529] ? ip_frag_next+0x9e0/0x9e0 [ 2854.678871] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2854.679311] __ip_finish_output.part.0+0x5f3/0xb50 [ 2854.679737] ? ip_fragment.constprop.0+0x240/0x240 [ 2854.680153] ? nf_hook+0x510/0x510 [ 2854.680475] ip_output+0x2f7/0x600 [ 2854.680790] ip_send_skb+0xdd/0x260 [ 2854.681109] udp_send_skb+0x6da/0x11d0 [ 2854.681458] udp_sendmsg+0x139a/0x2160 [ 2854.681794] ? mark_lock+0xf5/0x2df0 [ 2854.682118] ? ip_frag_init+0x350/0x350 [ 2854.682470] ? lock_chain_count+0x20/0x20 [ 2854.682875] ? udp_setsockopt+0xc0/0xc0 [ 2854.683243] ? mark_lock+0xf5/0x2df0 [ 2854.684068] ? __lockdep_reset_lock+0x180/0x180 [ 2854.684497] ? lock_chain_count+0x20/0x20 [ 2854.684925] ? mark_lock+0xf5/0x2df0 [ 2854.685293] ? mark_lock+0xf5/0x2df0 [ 2854.685697] ? lock_chain_count+0x20/0x20 [ 2854.686099] ? __lock_acquire+0xbb1/0x5b00 [ 2854.686914] ? lock_chain_count+0x20/0x20 [ 2854.687325] ? perf_trace_lock+0xac/0x490 [ 2854.687731] ? SOFTIRQ_verbose+0x10/0x10 [ 2854.688125] ? __lockdep_reset_lock+0x180/0x180 [ 2854.688581] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2854.688995] ? udp_v6_push_pending_frames+0x360/0x360 [ 2854.689903] ? SOFTIRQ_verbose+0x10/0x10 [ 2854.690293] ? mark_lock+0xf5/0x2df0 [ 2854.690669] ? lock_acquire+0x197/0x470 [ 2854.691047] ? find_held_lock+0x2c/0x110 [ 2854.691450] ? __might_fault+0xd3/0x180 [ 2854.691830] ? lock_downgrade+0x6d0/0x6d0 [ 2854.692249] ? lock_downgrade+0x6d0/0x6d0 [ 2854.693201] ? sock_has_perm+0x1ea/0x280 [ 2854.693592] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2854.694110] ? _copy_from_user+0xfb/0x1b0 [ 2854.694542] ? __import_iovec+0x458/0x590 [ 2854.694947] ? udp_v6_push_pending_frames+0x360/0x360 [ 2854.695452] inet6_sendmsg+0x105/0x140 [ 2854.695831] ? inet6_compat_ioctl+0x320/0x320 [ 2854.696261] __sock_sendmsg+0xf2/0x190 [ 2854.696636] ____sys_sendmsg+0x70d/0x870 [ 2854.697032] ? sock_write_iter+0x3d0/0x3d0 [ 2854.697431] ? do_recvmmsg+0x6d0/0x6d0 [ 2854.697808] ? SOFTIRQ_verbose+0x10/0x10 [ 2854.698190] ? lock_downgrade+0x6d0/0x6d0 [ 2854.698595] ? __lockdep_reset_lock+0x180/0x180 [ 2854.699038] ? SOFTIRQ_verbose+0x10/0x10 [ 2854.699422] ___sys_sendmsg+0xf3/0x170 [ 2854.699799] ? sendmsg_copy_msghdr+0x160/0x160 [ 2854.700242] ? __fget_files+0x2cf/0x520 [ 2854.701097] ? lock_downgrade+0x6d0/0x6d0 [ 2854.701483] ? find_held_lock+0x2c/0x110 [ 2854.701882] ? __fget_files+0x2f8/0x520 [ 2854.702275] ? __fget_light+0xea/0x290 [ 2854.702671] __sys_sendmsg+0xe5/0x1b0 [ 2854.703031] ? __sys_sendmsg_sock+0x40/0x40 [ 2854.703428] ? rcu_read_lock_any_held+0x75/0xa0 [ 2854.703901] do_syscall_64+0x33/0x40 [ 2854.704255] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2854.704737] RIP: 0033:0x7fa05acd5b19 [ 2854.705092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2854.706824] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2854.707549] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2854.708224] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2854.708903] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2854.709592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2854.710266] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:04:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffffffffffff}, 0x89a2, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x6, 0x0, 0x0, 0x0, 0xdf3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000100)='syscall\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x90000, 0x27e}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x40b, 0x7, 0x7f}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 13:04:09 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:04:09 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffffffffffff}, 0x89a2, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x6, 0x0, 0x0, 0x0, 0xdf3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000100)='syscall\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x90000, 0x27e}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x40b, 0x7, 0x7f}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 13:04:09 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 64) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:04:09 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2854.991590] FAULT_INJECTION: forcing a failure. [ 2854.991590] name failslab, interval 1, probability 0, space 0, times 0 [ 2854.992915] CPU: 0 PID: 33347 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2854.993620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2854.994431] Call Trace: [ 2854.994703] dump_stack+0x107/0x167 [ 2854.995063] should_fail.cold+0x5/0xa [ 2854.995439] ? create_object.isra.0+0x3a/0xa20 [ 2854.995906] should_failslab+0x5/0x20 [ 2854.996282] kmem_cache_alloc+0x5b/0x310 [ 2854.996699] create_object.isra.0+0x3a/0xa20 [ 2854.997129] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2854.997639] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2854.998155] ? skb_segment+0x9d8/0x3aa0 [ 2854.998567] __alloc_skb+0xb1/0x5b0 [ 2854.998944] skb_segment+0x9d8/0x3aa0 [ 2854.999392] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2854.999885] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2855.000388] ? SOFTIRQ_verbose+0x10/0x10 [ 2855.000790] __udp_gso_segment+0x11c6/0x1830 [ 2855.001215] ? __sk_receive_skb+0x830/0x830 [ 2855.001651] udp4_ufo_fragment+0x528/0x720 [ 2855.002065] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2855.002555] inet_gso_segment+0x4fb/0x11a0 [ 2855.002988] skb_mac_gso_segment+0x273/0x570 [ 2855.003419] ? inet_sock_destruct+0x840/0x840 [ 2855.003846] ? skb_network_protocol+0x650/0x650 [ 2855.004300] ? skb_crc32c_csum_help+0x80/0x80 [ 2855.004736] ? lock_acquire+0x197/0x470 [ 2855.005114] ? __dev_queue_xmit+0x1c2/0x2710 [ 2855.005549] __skb_gso_segment+0x32d/0x6d0 [ 2855.005964] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2855.006477] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2855.006924] __dev_queue_xmit+0x87b/0x2710 [ 2855.007343] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2855.007804] ? mark_held_locks+0x9e/0xe0 [ 2855.008210] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2855.008723] neigh_connected_output+0x382/0x4d0 [ 2855.009196] ip_finish_output2+0x6f1/0x21f0 [ 2855.009615] ? nf_hook_slow+0xfc/0x1e0 [ 2855.009999] ? ip_frag_next+0x9e0/0x9e0 [ 2855.010382] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2855.011035] __ip_finish_output.part.0+0x5f3/0xb50 [ 2855.011504] ? ip_fragment.constprop.0+0x240/0x240 [ 2855.011971] ? nf_hook+0x510/0x510 [ 2855.012327] ip_output+0x2f7/0x600 [ 2855.012670] ip_send_skb+0xdd/0x260 [ 2855.013038] udp_send_skb+0x6da/0x11d0 [ 2855.013422] udp_sendmsg+0x139a/0x2160 [ 2855.013797] ? tracing_generic_entry_update+0x1ed/0x270 [ 2855.014299] ? ip_frag_init+0x350/0x350 [ 2855.014758] ? tracing_generic_entry_update+0x1ed/0x270 [ 2855.015276] ? udp_setsockopt+0xc0/0xc0 [ 2855.015664] ? perf_event_switch_output+0x7d0/0x7d0 [ 2855.016174] ? lock_chain_count+0x20/0x20 [ 2855.016569] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2855.017044] ? lock_chain_count+0x20/0x20 [ 2855.017423] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2855.017912] ? perf_trace_lock+0x2bd/0x490 [ 2855.018319] ? perf_swevent_event+0x6c/0x550 [ 2855.018745] ? __lockdep_reset_lock+0x180/0x180 [ 2855.019204] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2855.019606] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2855.020098] ? udp_v6_push_pending_frames+0x360/0x360 [ 2855.020588] ? SOFTIRQ_verbose+0x10/0x10 [ 2855.021021] ? lock_acquire+0x197/0x470 [ 2855.021413] ? find_held_lock+0x2c/0x110 [ 2855.021815] ? __might_fault+0xd3/0x180 [ 2855.022196] ? lock_downgrade+0x6d0/0x6d0 [ 2855.022637] ? lock_downgrade+0x6d0/0x6d0 [ 2855.023040] ? sock_has_perm+0x1ea/0x280 [ 2855.023444] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2855.023941] ? _copy_from_user+0xfb/0x1b0 [ 2855.024361] ? __import_iovec+0x458/0x590 [ 2855.024756] ? udp_v6_push_pending_frames+0x360/0x360 [ 2855.025252] inet6_sendmsg+0x105/0x140 [ 2855.025625] ? inet6_compat_ioctl+0x320/0x320 [ 2855.026046] __sock_sendmsg+0xf2/0x190 [ 2855.026431] ____sys_sendmsg+0x70d/0x870 [ 2855.026831] ? sock_write_iter+0x3d0/0x3d0 [ 2855.027255] ? do_recvmmsg+0x6d0/0x6d0 [ 2855.027631] ? perf_trace_lock+0x2bd/0x490 [ 2855.028041] ? SOFTIRQ_verbose+0x10/0x10 [ 2855.028439] ? __lockdep_reset_lock+0x180/0x180 [ 2855.028892] ___sys_sendmsg+0xf3/0x170 [ 2855.029282] ? sendmsg_copy_msghdr+0x160/0x160 [ 2855.029728] ? __fget_files+0x2cf/0x520 [ 2855.030111] ? lock_downgrade+0x6d0/0x6d0 [ 2855.030521] ? find_held_lock+0x2c/0x110 [ 2855.030940] ? __fget_files+0x2f8/0x520 [ 2855.031343] ? __fget_light+0xea/0x290 [ 2855.031731] __sys_sendmsg+0xe5/0x1b0 [ 2855.032095] ? __sys_sendmsg_sock+0x40/0x40 [ 2855.032505] ? rcu_read_lock_any_held+0x75/0xa0 [ 2855.032997] do_syscall_64+0x33/0x40 [ 2855.033366] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2855.033854] RIP: 0033:0x7fa05acd5b19 [ 2855.034209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2855.035912] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2855.036628] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2855.037288] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2855.037950] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2855.038619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2855.039279] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:04:28 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 65) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:04:28 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:04:28 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:04:28 executing program 6: syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x40006, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fd2f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x5, 0x5, &(0x7f0000000500)=[{&(0x7f0000000280)="677abae99014ae0874d5423661b2f3821f6f80f414edbbbca2bbd4b9233734c8d1e6251ddc8c80de1cbcf9d024087bf9f499882cd1a8b8f04fea2ff9c8f9d22872fb2a2fe0457299690ee3c1bfa56e0b66670c006a11a06440fc8e103ccb9d3b4ccd053dca2734965b7aa4c2823d9a466a9cf474737d9d914ac2f1466bd911bbaf1faf2b4bed5f33988c92d1d2329f06df502b0d84407c7416657831205aa2cdb395e2d3266465e3de6ff7e61dcf1edb306d1afcaba1f1d0c9142e02f6a1156c5c7a61483608f1ea24691b84bf948b800a6e7db4166ed6d008f5e21e5c8c6939252cae23ed6a25f04610c9840df8d684a94e7b6b5da25b", 0xf7, 0x100000000}, {&(0x7f0000000380)="2d1e0a4d8c29b59b58ba9132de98650df6ce58087469b76c3e8273d835b5fb4e70ff231c8632f9c7eb1705f591d7df29ba1e6d4ccd8cbbd454858e460df292dd1d229ebd5ac2b1340379fd01cd56ef12aff5", 0x52, 0x3}, {&(0x7f0000000140)="6aa2cf339c3f101941bc10ad", 0xc, 0xaff3}, {&(0x7f0000000400)="0839057af39491b9ec5199c69aa36b402d074a3fbc0dfc5d3d13d79d9af99df78ce7615e3e15808fdb0e58504d4cacbcc22b797fd10235bf835d73b5653339a4ba", 0x41, 0x3ff}, {&(0x7f0000000480)="8fab07a2612b6846bff652d75e6833d7fc8560b9c28929ab1ab8a639352998e1c944278621e691a4fedeb0fc609a2a1bf83e0eb7c44829637654b16dd6dee5ab8525", 0x42, 0x9}], 0x302000, &(0x7f0000000640)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}, {@huge_within_size}, {@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x39, 0x32]}}}}, {@mode={'mode', 0x3d, 0x1000}}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@huge_always}, {@huge_always}, {@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x65, 0x6b, 0x70, 0x25, 0x39]}}], [{@subj_type={'subj_type', 0x3d, '(}-\'\'-\x04@{\\!+]'}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ext3\x00'}}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000000780), 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0) openat(r2, &(0x7f0000000740)='./file0\x00', 0xc4800, 0xad) 13:04:28 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r2 = socket$inet(0x2, 0x2, 0x0) fgetxattr(r0, &(0x7f0000000480)=@random={'osx.', '/dev/sr0\x00'}, &(0x7f00000004c0)=""/18, 0x12) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012cbd7008fcdbdf2570000000080003001480aa24c641757ff5429c88c68f689f19b70e182bcae9eb3957d46d6c27f0bf2f9bde4ee30ddd42d81c", @ANYRES32=r4, @ANYBLOB="0a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000100000a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000a0006000802110000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r5 = fork() r6 = syz_io_uring_complete(0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x5, 0x7f, 0x20, 0x80, 0x0, 0x56, 0x1000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x538f00}, 0x2850, 0x1, 0x80, 0x3, 0xa3f7, 0x4, 0x1, 0x0, 0x6, 0x0, 0x5}, r5, 0x1, r6, 0xa) fork() ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r3, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x2) 13:04:28 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) pidfd_getfd(r1, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x52, 0x400, 0x0, 0x0, {0xff}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x80) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000040)=""/10, 0xa}, {&(0x7f00000000c0)=""/11, 0xb}], 0x2) syz_genetlink_get_family_id$devlink(0x0, r0) r4 = socket$inet(0x2, 0x2, 0x0) dup(r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x7}]}]}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x14, r6, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:04:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:04:28 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffffffffffff}, 0x89a2, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x6, 0x0, 0x0, 0x0, 0xdf3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000100)='syscall\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x90000, 0x27e}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x40b, 0x7, 0x7f}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 13:04:28 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2873.840689] FAULT_INJECTION: forcing a failure. [ 2873.840689] name failslab, interval 1, probability 0, space 0, times 0 [ 2873.843731] CPU: 0 PID: 33397 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2873.845537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2873.847710] Call Trace: [ 2873.848455] dump_stack+0x107/0x167 [ 2873.849400] should_fail.cold+0x5/0xa 13:04:28 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2873.850418] ? trace_hardirqs_on+0x5b/0x180 [ 2873.851675] ? __alloc_skb+0x6d/0x5b0 [ 2873.852690] should_failslab+0x5/0x20 [ 2873.853677] kmem_cache_alloc_node+0x55/0x330 [ 2873.854843] __alloc_skb+0x6d/0x5b0 [ 2873.855843] skb_segment+0x9d8/0x3aa0 [ 2873.856934] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2873.858265] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2873.859599] ? SOFTIRQ_verbose+0x10/0x10 [ 2873.860678] __udp_gso_segment+0x11c6/0x1830 [ 2873.861783] ? __sk_receive_skb+0x830/0x830 [ 2873.863469] udp4_ufo_fragment+0x528/0x720 [ 2873.864513] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2873.865792] inet_gso_segment+0x4fb/0x11a0 [ 2873.866874] skb_mac_gso_segment+0x273/0x570 [ 2873.867966] ? inet_sock_destruct+0x840/0x840 [ 2873.869071] ? skb_network_protocol+0x650/0x650 [ 2873.870340] ? skb_crc32c_csum_help+0x80/0x80 [ 2873.871458] ? lock_acquire+0x197/0x470 [ 2873.872452] ? __dev_queue_xmit+0x1c2/0x2710 [ 2873.873562] __skb_gso_segment+0x32d/0x6d0 [ 2873.874676] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2873.875970] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2873.877116] __dev_queue_xmit+0x87b/0x2710 [ 2873.881533] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2873.883036] ? mark_held_locks+0x9e/0xe0 [ 2873.884158] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2873.885813] neigh_connected_output+0x382/0x4d0 [ 2873.887005] ip_finish_output2+0x6f1/0x21f0 [ 2873.888092] ? nf_hook_slow+0xfc/0x1e0 [ 2873.889050] ? ip_frag_next+0x9e0/0x9e0 [ 2873.890082] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2873.891447] __ip_finish_output.part.0+0x5f3/0xb50 [ 2873.892663] ? ip_fragment.constprop.0+0x240/0x240 [ 2873.893885] ? nf_hook+0x510/0x510 [ 2873.894841] ip_output+0x2f7/0x600 [ 2873.895732] ip_send_skb+0xdd/0x260 [ 2873.896671] udp_send_skb+0x6da/0x11d0 [ 2873.897700] udp_sendmsg+0x139a/0x2160 [ 2873.898708] ? tracing_generic_entry_update+0x1ed/0x270 [ 2873.901263] ? ip_frag_init+0x350/0x350 [ 2873.902326] ? tracing_generic_entry_update+0x1ed/0x270 [ 2873.903729] ? udp_setsockopt+0xc0/0xc0 [ 2873.904944] ? perf_event_switch_output+0x7d0/0x7d0 [ 2873.906378] ? lock_chain_count+0x20/0x20 [ 2873.907511] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2873.908820] ? lock_chain_count+0x20/0x20 [ 2873.909946] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2873.911264] ? perf_trace_lock+0x2bd/0x490 [ 2873.912383] ? perf_swevent_event+0x6c/0x550 [ 2873.913452] ? __lockdep_reset_lock+0x180/0x180 [ 2873.914591] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2873.915564] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2873.916761] ? udp_v6_push_pending_frames+0x360/0x360 [ 2873.917999] ? SOFTIRQ_verbose+0x10/0x10 [ 2873.919002] ? lock_acquire+0x197/0x470 [ 2873.919952] ? find_held_lock+0x2c/0x110 [ 2873.920944] ? __might_fault+0xd3/0x180 [ 2873.921911] ? lock_downgrade+0x6d0/0x6d0 [ 2873.922925] ? lock_downgrade+0x6d0/0x6d0 [ 2873.923936] ? sock_has_perm+0x1ea/0x280 [ 2873.924919] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2873.926183] ? _copy_from_user+0xfb/0x1b0 [ 2873.927247] ? __import_iovec+0x458/0x590 [ 2873.928237] ? udp_v6_push_pending_frames+0x360/0x360 [ 2873.932072] inet6_sendmsg+0x105/0x140 [ 2873.933015] ? inet6_compat_ioctl+0x320/0x320 [ 2873.934127] __sock_sendmsg+0xf2/0x190 [ 2873.935083] ____sys_sendmsg+0x70d/0x870 [ 2873.936089] ? sock_write_iter+0x3d0/0x3d0 [ 2873.937090] ? do_recvmmsg+0x6d0/0x6d0 [ 2873.938033] ? perf_trace_lock+0x2bd/0x490 [ 2873.939060] ? SOFTIRQ_verbose+0x10/0x10 [ 2873.940065] ? __lockdep_reset_lock+0x180/0x180 [ 2873.941129] ___sys_sendmsg+0xf3/0x170 [ 2873.942017] ? sendmsg_copy_msghdr+0x160/0x160 [ 2873.943053] ? __fget_files+0x2cf/0x520 [ 2873.943953] ? lock_downgrade+0x6d0/0x6d0 [ 2873.944895] ? find_held_lock+0x2c/0x110 [ 2873.945841] ? __fget_files+0x2f8/0x520 [ 2873.946762] ? __fget_light+0xea/0x290 [ 2873.947660] __sys_sendmsg+0xe5/0x1b0 [ 2873.948521] ? __sys_sendmsg_sock+0x40/0x40 [ 2873.949498] ? rcu_read_lock_any_held+0x75/0xa0 [ 2873.950605] do_syscall_64+0x33/0x40 [ 2873.951466] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2873.952624] RIP: 0033:0x7fa05acd5b19 [ 2873.953484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2873.957663] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2873.959404] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2873.961028] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2873.962655] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2873.964247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2873.965856] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:04:28 executing program 6: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824", 0x31, 0xb800}], 0x0, &(0x7f0000000180)) 13:04:28 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffffffffffff}, 0x89a2, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x6, 0x0, 0x0, 0x0, 0xdf3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000100)='syscall\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x90000, 0x27e}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x40b, 0x7, 0x7f}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 13:04:28 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 66) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:04:28 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r2 = socket$inet(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fbdbdf255300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099007f000000800031ea"], 0x28}}, 0x5) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:04:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:04:28 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@caif=@util, &(0x7f0000000080)=0x80) dup2(r0, r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r2) socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:04:28 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x10, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2874.354927] FAULT_INJECTION: forcing a failure. [ 2874.354927] name failslab, interval 1, probability 0, space 0, times 0 [ 2874.357898] CPU: 1 PID: 33686 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2874.359667] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2874.361910] Call Trace: [ 2874.362753] dump_stack+0x107/0x167 [ 2874.363959] should_fail.cold+0x5/0xa [ 2874.364927] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2874.366258] ? create_object.isra.0+0x3a/0xa20 [ 2874.367425] should_failslab+0x5/0x20 [ 2874.368412] kmem_cache_alloc+0x5b/0x310 [ 2874.369687] ? mark_held_locks+0x9e/0xe0 [ 2874.370829] create_object.isra.0+0x3a/0xa20 [ 2874.372158] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2874.373677] kmem_cache_alloc_node+0x169/0x330 [ 2874.375021] __alloc_skb+0x6d/0x5b0 [ 2874.376102] skb_segment+0x9d8/0x3aa0 [ 2874.377234] ? lock_chain_count+0x20/0x20 [ 2874.378523] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2874.379999] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2874.381431] ? SOFTIRQ_verbose+0x10/0x10 [ 2874.382614] __udp_gso_segment+0x11c6/0x1830 [ 2874.383757] ? __sk_receive_skb+0x830/0x830 [ 2874.385248] udp4_ufo_fragment+0x528/0x720 [ 2874.386494] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2874.387752] inet_gso_segment+0x4fb/0x11a0 [ 2874.388811] skb_mac_gso_segment+0x273/0x570 [ 2874.389885] ? inet_sock_destruct+0x840/0x840 [ 2874.394797] ? skb_network_protocol+0x650/0x650 [ 2874.396460] ? skb_crc32c_csum_help+0x80/0x80 [ 2874.397905] ? lock_acquire+0x197/0x470 [ 2874.398905] ? __dev_queue_xmit+0x1c2/0x2710 [ 2874.400001] __skb_gso_segment+0x32d/0x6d0 [ 2874.401058] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2874.402634] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2874.404039] __dev_queue_xmit+0x87b/0x2710 [ 2874.405108] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2874.406306] ? mark_held_locks+0x9e/0xe0 [ 2874.407350] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2874.408642] neigh_connected_output+0x382/0x4d0 [ 2874.409934] ip_finish_output2+0x6f1/0x21f0 [ 2874.411180] ? nf_hook_slow+0xfc/0x1e0 [ 2874.412269] ? ip_frag_next+0x9e0/0x9e0 [ 2874.413430] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2874.415061] __ip_finish_output.part.0+0x5f3/0xb50 [ 2874.416492] ? ip_fragment.constprop.0+0x240/0x240 [ 2874.417814] ? nf_hook+0x510/0x510 [ 2874.419017] ip_output+0x2f7/0x600 [ 2874.420054] ip_send_skb+0xdd/0x260 [ 2874.421031] udp_send_skb+0x6da/0x11d0 [ 2874.422068] udp_sendmsg+0x139a/0x2160 [ 2874.427098] ? mark_lock+0xf5/0x2df0 [ 2874.428084] ? ip_frag_init+0x350/0x350 [ 2874.429066] ? lock_chain_count+0x20/0x20 [ 2874.430098] ? udp_setsockopt+0xc0/0xc0 [ 2874.431163] ? mark_lock+0xf5/0x2df0 [ 2874.432367] ? __lockdep_reset_lock+0x180/0x180 [ 2874.433756] ? lock_chain_count+0x20/0x20 [ 2874.434818] ? mark_lock+0xf5/0x2df0 [ 2874.435766] ? mark_lock+0xf5/0x2df0 [ 2874.436704] ? lock_chain_count+0x20/0x20 [ 2874.437741] ? __lock_acquire+0xbb1/0x5b00 [ 2874.439186] ? lock_chain_count+0x20/0x20 [ 2874.440433] ? perf_trace_lock+0xac/0x490 [ 2874.443580] ? SOFTIRQ_verbose+0x10/0x10 [ 2874.444607] ? __lockdep_reset_lock+0x180/0x180 [ 2874.445791] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2874.447088] ? udp_v6_push_pending_frames+0x360/0x360 [ 2874.448555] ? SOFTIRQ_verbose+0x10/0x10 [ 2874.449570] ? mark_lock+0xf5/0x2df0 [ 2874.450508] ? lock_acquire+0x197/0x470 [ 2874.451509] ? find_held_lock+0x2c/0x110 [ 2874.452561] ? __might_fault+0xd3/0x180 [ 2874.453713] ? lock_downgrade+0x6d0/0x6d0 [ 2874.455029] ? lock_downgrade+0x6d0/0x6d0 [ 2874.456065] ? sock_has_perm+0x1ea/0x280 [ 2874.457100] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2874.458420] ? _copy_from_user+0xfb/0x1b0 [ 2874.459483] ? __import_iovec+0x458/0x590 [ 2874.460707] ? udp_v6_push_pending_frames+0x360/0x360 [ 2874.475621] inet6_sendmsg+0x105/0x140 [ 2874.476590] ? inet6_compat_ioctl+0x320/0x320 [ 2874.486712] __sock_sendmsg+0xf2/0x190 [ 2874.487082] ____sys_sendmsg+0x70d/0x870 [ 2874.487802] ? sock_write_iter+0x3d0/0x3d0 [ 2874.494843] ? do_recvmmsg+0x6d0/0x6d0 [ 2874.495702] ? SOFTIRQ_verbose+0x10/0x10 [ 2874.496089] ? lock_downgrade+0x6d0/0x6d0 [ 2874.503137] ? __lockdep_reset_lock+0x180/0x180 [ 2874.503582] ? SOFTIRQ_verbose+0x10/0x10 [ 2874.504484] ___sys_sendmsg+0xf3/0x170 [ 2874.504869] ? sendmsg_copy_msghdr+0x160/0x160 [ 2874.505873] ? __fget_files+0x2cf/0x520 [ 2874.506254] ? lock_downgrade+0x6d0/0x6d0 [ 2874.507165] ? find_held_lock+0x2c/0x110 [ 2874.507566] ? __fget_files+0x2f8/0x520 [ 2874.508439] ? __fget_light+0xea/0x290 [ 2874.508833] __sys_sendmsg+0xe5/0x1b0 [ 2874.509662] ? __sys_sendmsg_sock+0x40/0x40 [ 2874.510074] ? rcu_read_lock_any_held+0x75/0xa0 [ 2874.511125] do_syscall_64+0x33/0x40 [ 2874.511486] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2874.512599] RIP: 0033:0x7fa05acd5b19 [ 2874.512959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2874.517011] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2874.517730] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2874.519310] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2874.520892] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2874.522482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2874.534791] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:04:29 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:04:47 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:04:47 executing program 1: clone3(&(0x7f0000000000)={0x1a2168100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a8100, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r1 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x1, 'macvlan1\x00', {}, 0xa8d}) 13:04:47 executing program 6: perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x81611, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x487d059fca3bda2b, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000) io_uring_enter(0xffffffffffffffff, 0x559, 0xdf3d, 0x0, &(0x7f0000000580)={[0xdbb]}, 0x8) syz_io_uring_submit(r4, r1, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x80000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='\x00', 0x101000, 0x0) r6 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) execveat(r6, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=[&(0x7f0000000140)='\xc8^', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='secu\xaf\xf7AHn\xc5/\xab;lity\x00', &(0x7f0000000500)='%-\x00'], &(0x7f0000000400)=[&(0x7f00000003c0)='%-\x00'], 0x1000) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000380)) ftruncate(r5, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) fsetxattr$security_capability(r5, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) readlinkat(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/2, 0x2) 13:04:47 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 67) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:04:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./mnt\x00', 0x1, 0x6, &(0x7f00000005c0)=[{&(0x7f00000001c0)="57e12237103bf5401112e6e3555d80137344cf5b6e1c70f04f6967a2675b5a6f3c9151492e44580d46a539e881875c1eebd2f02ac06fcbc1bf880c36e0fadfbd39c81c64ae761812ad61555572a3d3166a11875481e6088ecbdea0e84ed5f4e523867b6daea952a1ca4a8e86881e207afffa36031405ff7fb91c16e76189ef8c1638783384a4f986458911b70685d0cacc450c5bf680fcff8aa91830930e307aa51301da81fac10c74a46fd5347574d431fb3ed4651cbd22a6119ff96d4c9f9df000866aa0a5ecfe3baece0bba4f41b5d4e68f62f6d7d5dd8df4c351f13f5c8394c8e78e7c", 0xe5, 0xff}, {&(0x7f00000002c0)="5efd99121e108b1102148daaea179690c9d9625e33d1dc6c92f08982e8c8d71a5793f541e9c9ab35d1c5be62b095ad31c5414aaf76fba56b27b411240425f7daf9d65e023378162cb907fa6bee1ea937ec401b333d5d2f8dd68a0688faf60b753cdb356b28fa268828787ecdfd95a517c1bea8a31170b4debc7109c8ba477537d9ad89c885e657c39ad28c033f52e36a3eb873ba26d4089792a1a109f0d6741ea6cdb7621235d1515423fc061f66ac8500ab0fc96a2d2d9823f6832e9b8387674699e807022d54ae45e4b354c64614276580d39d38e6243e3a8fdd20d4878adfb474d5ddb6d0fdcece779a394e24", 0xee, 0x7}, {&(0x7f00000000c0)="d8", 0x1, 0x7}, {&(0x7f00000003c0)="55b48e8a03ff2ff9ab7d4a92c6feef594005c8a93461fd0225dcbb871fc5ea242e8f42a814b55710453c3d7b0bdb43d9b7c92a75fd0562997bb9b64f31b36c3c92b1a84a393f71090d0dde4796d2f0c72df6537740dcb1da395e39796661416d566bdc827ac4", 0x66, 0x1b}, {&(0x7f0000000440)="0012bc545a94bc57a239361bc83a8a64b153f3252b340278fe808d24cf0bdb706b21a3d0a7153fdb11b32bb0d0e178c5ecc0d93f89298b63e5e743d3585129ad3fd1d054dbe096d3c7c1abea630185515b920a7f9c6bbd961eeb143527eed42417ea597b4d6a206475b1d6a74f102e42db4f6435a2647b0aa14cec23bdf4abf4073511796bcaad4e103a74f6541401acf155aab858", 0x95, 0x2}, {&(0x7f0000000500)="ed61fd1ceefa63e4092f16000a7ba53e57066b6ec48eb5799cdb30a0d267429ade2d3064e3917a2fdf98153cc2b0ea283bb7baa94e93060be049e395c48f538f93dd2677be2ed10e2bde01260086f14dac7f72c5af921b54501052fac1664a614e07114b5903e734b5e4d9f8aafa3a491353ca3e5dd82c14e74fd5a6214d6f08e1869c3afa5e84b96675e37873a3ebb4d8e02fdf9663fc9da60618735327e0e4b8ca4d", 0xa3, 0x4}], 0x20, &(0x7f0000000680)={[{@discard}, {@minixdf}, {@discard}, {@minixdf}], [{@pcr={'pcr', 0x3d, 0x10}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'-'}}, {@obj_user={'obj_user', 0x3d, 'tmpfs\x00'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fsname={'fsname', 0x3d, 'tmpfs\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'uid'}}, {@measure}, {@obj_type={'obj_type', 0x3d, 'uid'}}, {@obj_type={'obj_type', 0x3d, 'uid'}}]}) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000140)='./mnt\x00', 0xfffffffffffffffa, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) 13:04:47 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x10, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:04:47 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:04:47 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa95}) [ 2892.719660] tmpfs: Bad value for 'uid' [ 2892.740435] FAULT_INJECTION: forcing a failure. [ 2892.740435] name failslab, interval 1, probability 0, space 0, times 0 [ 2892.742385] CPU: 0 PID: 33920 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2892.743213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2892.743928] Call Trace: [ 2892.744171] dump_stack+0x107/0x167 [ 2892.744492] should_fail.cold+0x5/0xa [ 2892.744845] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2892.745297] ? create_object.isra.0+0x3a/0xa20 [ 2892.745721] should_failslab+0x5/0x20 [ 2892.755081] kmem_cache_alloc+0x5b/0x310 [ 2892.755444] create_object.isra.0+0x3a/0xa20 [ 2892.755821] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2892.756269] kmem_cache_alloc_node+0x169/0x330 [ 2892.756676] __alloc_skb+0x6d/0x5b0 [ 2892.757003] skb_segment+0x9d8/0x3aa0 [ 2892.757402] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2892.757838] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2892.758285] ? SOFTIRQ_verbose+0x10/0x10 [ 2892.758647] __udp_gso_segment+0x11c6/0x1830 [ 2892.759049] ? __sk_receive_skb+0x830/0x830 [ 2892.759439] udp4_ufo_fragment+0x528/0x720 [ 2892.759813] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2892.760246] inet_gso_segment+0x4fb/0x11a0 [ 2892.760636] skb_mac_gso_segment+0x273/0x570 [ 2892.761018] ? inet_sock_destruct+0x840/0x840 [ 2892.761404] ? skb_network_protocol+0x650/0x650 [ 2892.761800] ? skb_crc32c_csum_help+0x80/0x80 [ 2892.762186] ? lock_acquire+0x197/0x470 [ 2892.762529] ? __dev_queue_xmit+0x1c2/0x2710 [ 2892.762952] __skb_gso_segment+0x32d/0x6d0 [ 2892.763330] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2892.763779] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2892.764176] __dev_queue_xmit+0x87b/0x2710 [ 2892.764559] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2892.764967] ? mark_held_locks+0x9e/0xe0 [ 2892.765326] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2892.765782] neigh_connected_output+0x382/0x4d0 [ 2892.766206] ip_finish_output2+0x6f1/0x21f0 [ 2892.766583] ? nf_hook_slow+0xfc/0x1e0 [ 2892.766941] ? ip_frag_next+0x9e0/0x9e0 [ 2892.767286] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2892.767730] __ip_finish_output.part.0+0x5f3/0xb50 [ 2892.768156] ? ip_fragment.constprop.0+0x240/0x240 [ 2892.768573] ? nf_hook+0x510/0x510 [ 2892.768902] ip_output+0x2f7/0x600 [ 2892.769221] ip_send_skb+0xdd/0x260 [ 2892.769546] udp_send_skb+0x6da/0x11d0 [ 2892.769904] udp_sendmsg+0x139a/0x2160 [ 2892.770243] ? tracing_generic_entry_update+0x1ed/0x270 [ 2892.770704] ? ip_frag_init+0x350/0x350 [ 2892.771085] ? tracing_generic_entry_update+0x1ed/0x270 [ 2892.771552] ? udp_setsockopt+0xc0/0xc0 [ 2892.771901] ? perf_event_switch_output+0x7d0/0x7d0 [ 2892.772362] ? lock_chain_count+0x20/0x20 [ 2892.772723] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2892.773152] ? lock_chain_count+0x20/0x20 [ 2892.773511] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2892.773953] ? perf_trace_lock+0x2bd/0x490 [ 2892.774319] ? perf_swevent_event+0x6c/0x550 [ 2892.774696] ? __lockdep_reset_lock+0x180/0x180 [ 2892.775138] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2892.775494] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2892.775942] ? udp_v6_push_pending_frames+0x360/0x360 [ 2892.776382] ? SOFTIRQ_verbose+0x10/0x10 [ 2892.776760] ? lock_acquire+0x197/0x470 [ 2892.777103] ? find_held_lock+0x2c/0x110 [ 2892.777466] ? __might_fault+0xd3/0x180 [ 2892.777812] ? lock_downgrade+0x6d0/0x6d0 [ 2892.778178] ? lock_downgrade+0x6d0/0x6d0 [ 2892.778543] ? sock_has_perm+0x1ea/0x280 [ 2892.778933] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2892.779388] ? _copy_from_user+0xfb/0x1b0 [ 2892.779771] ? __import_iovec+0x458/0x590 [ 2892.780130] ? udp_v6_push_pending_frames+0x360/0x360 [ 2892.780581] inet6_sendmsg+0x105/0x140 [ 2892.780920] ? inet6_compat_ioctl+0x320/0x320 [ 2892.781305] __sock_sendmsg+0xf2/0x190 [ 2892.781645] ____sys_sendmsg+0x70d/0x870 [ 2892.782002] ? sock_write_iter+0x3d0/0x3d0 [ 2892.782362] ? do_recvmmsg+0x6d0/0x6d0 [ 2892.782699] ? perf_trace_lock+0x2bd/0x490 [ 2892.783104] ? SOFTIRQ_verbose+0x10/0x10 [ 2892.783463] ? __lockdep_reset_lock+0x180/0x180 [ 2892.783876] ___sys_sendmsg+0xf3/0x170 [ 2892.784218] ? sendmsg_copy_msghdr+0x160/0x160 [ 2892.784622] ? __fget_files+0x2cf/0x520 [ 2892.784969] ? lock_downgrade+0x6d0/0x6d0 [ 2892.785332] ? find_held_lock+0x2c/0x110 [ 2892.785707] ? __fget_files+0x2f8/0x520 [ 2892.786069] ? __fget_light+0xea/0x290 [ 2892.786423] __sys_sendmsg+0xe5/0x1b0 [ 2892.786762] ? __sys_sendmsg_sock+0x40/0x40 [ 2892.787148] ? rcu_read_lock_any_held+0x75/0xa0 [ 2892.787600] do_syscall_64+0x33/0x40 [ 2892.787925] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2892.788361] RIP: 0033:0x7fa05acd5b19 [ 2892.788682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2892.790204] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2892.790871] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2892.791473] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2892.792070] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2892.792666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2892.793263] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:04:47 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:04:47 executing program 6: munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 13:04:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x8000, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x5e, 0x35a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x90c0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x300b4e2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={@loopback, 0x0, r2}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'ip6gretap0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x0, 0x1004}, 0x0, 0xffffffffffffbfff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES16=r1, @ANYRESDEC, @ANYRESDEC=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x160) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) 13:04:47 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@mmap}, {@privport}, {@aname={'aname', 0x3d, 'veth1_vlan\x00'}}, {@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\\\x1c+'}}, {@mmap}, {@uname={'uname', 0x3d, '/dev/sr0\x00'}}], [{@euid_lt={'euid<', r1}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x64, 0x34, 0x38, 0x31, 0x64, 0x31, 0x33], 0x2d, [0x62, 0x64, 0x34, 0x66], 0x2d, [0x39, 0x33, 0x61, 0x30], 0x2d, [0x36, 0x65, 0x38, 0x32], 0x2d, [0x38, 0x35, 0x61, 0x39, 0x36, 0x5a, 0x66, 0x63]}}}, {@smackfsroot={'smackfsroot', 0x3d, '--{@+({]#@'}}]}}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:04:47 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x10, r4, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:04:47 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000940)={0x1384, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x54, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x63}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3eaad9bc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0x84, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x20200}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1a}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x50, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x20}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x97}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xab}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x130, 0x11d, 0x0, 0x1, [{0x12c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x400, 0x8, 0xca00, 0x6, 0x4, 0x100, 0x8]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x18, 0x9, 0x48, 0x9, 0x1b, 0x39, 0x30, 0x1, 0x28, 0x9, 0x4]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x8}, {0x1, 0x7}, {0x5, 0x4}, {0x0, 0x9}, {}, {0x7, 0x8}, {0x4, 0x7}, {0x0, 0x1}, {0x6}, {0x1, 0x2}, {0x0, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x2, 0x2}, {0x4, 0x8}, {0x4, 0x2}, {0x7, 0x1}, {0x5, 0x8}, {0x3, 0x7}, {0x4, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6c1, 0xfff, 0x8, 0x70, 0x39, 0x1, 0x6, 0x1]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x2}, {0x7, 0xa}, {0x1, 0x7}, {0x5, 0x8}, {0x7, 0xa}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x1}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x3, 0x1}, {0x6, 0x3}, {0x1, 0x8}, {0x2, 0x6}, {0x4, 0x1}, {0x3, 0x8}, {0x2, 0x9}, {0x0, 0x7}, {0x5}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x4}, {0x2, 0x7}, {0x5, 0x3}, {0x2}, {0x6, 0x8}, {0x3, 0x8}, {0x2, 0x2}, {0x6, 0x5}, {0x6, 0x1}, {0x3, 0x2}, {0x2, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x4, 0x6}, {0x6}, {0x0, 0x3}, {0x1, 0x8}, {0x6, 0x6}, {0x2, 0x3}, {0x3, 0x4}, {0x5, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x4, 0x3, 0x6, 0x5, 0x6, 0x63, 0x5, 0x3, 0x48, 0x24, 0x1, 0x12, 0x2, 0x12, 0x13, 0x48, 0x12, 0x60, 0x18, 0x6, 0x48, 0x1, 0x5, 0x36, 0x12, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x3, 0x7, 0x3, 0x6, 0x8, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2, 0x4, 0x48, 0x0, 0x18, 0xc, 0x69, 0x60, 0x36, 0xb, 0x60, 0x9, 0x6, 0x6c, 0x5, 0x4, 0x16, 0xb, 0x1b, 0x44, 0x1, 0x1, 0x3, 0x2, 0x1, 0x3, 0x19]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x4, 0x1ff, 0x4, 0x3, 0x8, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0xfffa, 0xba26, 0x60, 0x401, 0x8, 0x3f49, 0x1]}}, @NL80211_TXRATE_GI={0x5}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0xf8c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x27}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x78}]}, {0x40c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x88}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffe0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3ec, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x81, 0x20, 0x1, 0xfffc, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffe0, 0x20, 0xfff, 0xb3, 0x9, 0x2, 0x20, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xbb3d1c46b13270d9, 0x24, 0x2, 0x3, 0x5, 0x2, 0x60, 0x24, 0x1b, 0x6, 0x4, 0x30, 0x2, 0x2, 0x24, 0xc, 0x5, 0x36, 0x3, 0x8075a533fef0a90, 0x9, 0x30, 0x1b, 0x24, 0x1b, 0x5, 0x30]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0x9}, {0x6}, {0x1, 0x8}, {0x3, 0x4}, {0x2, 0xa}, {0x0, 0x9}, {0x2, 0x3}, {0x3, 0x7}, {0x5, 0x1}, {0x1, 0x2}, {0x7, 0x6}, {0x5, 0x1}, {0x4, 0x2}, {0x1, 0x7}, {0x0, 0x3}, {0x0, 0x8}, {0x6, 0x3}, {0x2, 0x6}, {0x3, 0x3}, {0x2, 0xa}, {0x5, 0x5}, {0x6, 0x8}, {0x1}, {0x4, 0x7}, {0x0, 0x4}, {0x1, 0x7}, {0x7, 0x4}, {0x1, 0x9}, {0x2, 0x2}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x7}, {0x2, 0x2}, {0x1, 0x2}, {0x1, 0x5}, {0x0, 0x5}, {0x4, 0x7}, {0x5, 0x7}, {0x3, 0x9}, {0x3, 0x7}, {0x2}, {0x3, 0x4}, {0x4, 0x7}, {0x6, 0x9}, {0x3, 0x4}, {0x4, 0x9}, {0x1, 0x7}, {0x7, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x1, 0x4}, {0x7, 0x5}, {0x7, 0xa}, {0x1}, {0x3, 0x3}, {0x5}, {0x4, 0x3}, {0x7, 0x3}, {0x2, 0xa}, {0x1, 0xa}, {0x3, 0xa}, {0x3, 0xa}, {0x7, 0x1}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x1}, {0x5, 0x2}, {0x6}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x18, 0x36, 0x60, 0x12, 0x1, 0x6c, 0x4, 0x1b, 0xc, 0x12, 0xb, 0x36, 0x48, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3f, 0x4, 0x4, 0x9, 0x8000, 0x0, 0x99e7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x721a, 0x81, 0x8001, 0xff, 0xfff9, 0x615]}}]}, @NL80211_BAND_2GHZ={0x164, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x9}, {0x2, 0x6}, {0x4, 0x1}, {0x6, 0x2}, {0x5, 0x5}, {0x1, 0x5}, {0x0, 0x7}, {0x5, 0x8}, {0x1, 0x6}, {0x1, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x2, 0x4}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x7}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x6}, {0x2, 0x5}, {0x1, 0x1}, {0x6, 0x4}, {0x7, 0x2}, {0x7, 0x4}, {0x6, 0x7}, {0x7, 0x6}, {0x3, 0x1}, {0x6, 0x2}]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0x1}, {0x3, 0x8}, {0x6, 0x4}, {0x3, 0xa}, {0x6, 0x8}, {0x0, 0xa}, {0x3, 0xa}, {0x1, 0x7}, {0x4, 0x5}, {}, {0x7, 0x6}, {0x3, 0x3}, {0x1, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x1, 0x8}, {0x3, 0x4}, {0x7, 0x7}, {0x6, 0x2}, {0x5, 0x5}, {0x1}, {0x1, 0x6}, {0x0, 0x5}, {0x5, 0x6}, {0x3, 0x8}, {0x2, 0x1}, {0x6, 0x6}, {0x3, 0x7}, {0x0, 0xa}, {0x2, 0x6}, {0x0, 0x1}, {0x2, 0x5}, {0x1}, {0x3, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x6, 0x3}, {0x4, 0x7}, {0x1, 0x6}, {0x4}, {0x2, 0x2}, {0x3, 0x4}, {0x7, 0x5}, {0x0, 0x8}, {0x0, 0x8}, {0x7, 0xa}, {0x4, 0x6}, {0x1, 0x5}, {0x0, 0x3}, {0x5}, {0x3, 0x6}, {0x6, 0x7}, {0x0, 0x3}, {0x6}, {0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x4}, {0x2, 0x3}, {0x5, 0x7}, {0x0, 0xa}, {0x0, 0x5}, {0x3, 0x7}, {0x0, 0x6}, {0x6, 0x4}, {0x7, 0x4}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0x8}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x9}, {0x5, 0x6}, {0x4, 0x6}, {0x7, 0x3}, {0x3, 0x6}, {}, {0x5, 0x8}, {0x1}, {0x3, 0x9}, {0x6, 0x7}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x4}, {0x4, 0x3}, {0x1, 0xa}, {0x2, 0x7}, {0x3, 0x9}, {0x1}, {0x2}, {0x2, 0x8}, {0x4, 0x1}, {0x4}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x2}, {0x7, 0x8}, {0x2, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x5}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0x5}, {0x7, 0x4}, {0x2, 0x1}, {0x4, 0x7}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x1}, {0x7, 0xa}, {0x1, 0x5}, {0x0, 0x7}, {0x7, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x7, 0x1}, {0x3, 0x9}, {0x3}, {0x5, 0x1}, {0x0, 0xa}, {0x7, 0x9}, {0x2, 0x3}, {0x7, 0x2}, {0x7}, {0x3, 0x3}, {0x2}, {0x7, 0x9}, {0x6, 0x8}, {0x3, 0x7}, {}, {0x3, 0x5}, {0x5, 0x9}, {0x3, 0xa}, {0x1, 0x4}, {0x5, 0x3}, {0x0, 0x3}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0x7}, {0x4, 0x5}, {0x0, 0x3}, {0x3, 0x2}, {0x7, 0x6}, {0x7, 0x1}, {0x6, 0x5}, {0x6, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x3, 0xa}, {0x1, 0x5}, {0x6, 0x4}, {0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x6, 0x8}, {0x7, 0x8}, {0x1, 0x4}, {0x7, 0x7}, {0x1, 0x2}, {0x6, 0x8}, {0x7, 0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x2, 0x5}, {0x1, 0x8}, {0x2}, {0x0, 0x3}, {0x4, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x9, 0x9, 0xc, 0x9, 0x12, 0x26110b1e7e3f1579, 0x23, 0x6, 0x18, 0x3, 0x18, 0x18, 0x1, 0x9, 0x1, 0x2, 0x1b, 0x1b, 0x6, 0x1, 0x24, 0x79, 0x24, 0x2, 0x0, 0x4, 0x6, 0x16, 0xb]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x8}, {0x1, 0x1}, {0x6, 0x6}, {0x1, 0x9}, {0x6, 0x4}, {0x6, 0xa}, {0x7, 0x4}, {0x1, 0x5}, {0x5, 0x3}, {0x5, 0x4}, {0x0, 0x6}, {0x5}, {0x0, 0x7}, {0x2, 0x6}, {0x7, 0x6}, {0x7, 0x7}, {0x3, 0x1}, {0x4, 0xa}, {0x0, 0xa}, {0x1, 0x3}, {0x1, 0x8}, {0x1, 0x7}, {0x4, 0x6}, {0x1, 0x6}, {0x0, 0x1b}, {0x0, 0xa}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x8}, {0x6, 0x5}, {0x0, 0x9}, {0x0, 0x4}, {0x4, 0xa}, {0x6, 0x1}, {0x0, 0x8}, {0x5, 0x8}, {0x6, 0x3}, {0x1}, {0x3, 0x4}, {0x1}, {0x6, 0x9}, {0x1, 0xa}, {0x3, 0x8}, {0x4}, {0x3, 0x5}, {0x0, 0x4}, {0x3, 0xa}, {0x1, 0x7}, {0x1, 0xa}, {0x6, 0x1}, {0x0, 0x5}, {0x1, 0x4}, {0x0, 0xa}, {0x4, 0x5}]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6, 0x60, 0x9, 0x18, 0x48, 0x9, 0x16, 0x4, 0x18, 0x6, 0x18, 0x3, 0x1b, 0x1, 0x48, 0x3, 0x18, 0x25, 0x5, 0x12, 0x4, 0x4, 0x1b, 0x36, 0x6c, 0x12, 0x25, 0x60, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x36, 0x18, 0x55, 0x25, 0x1b, 0x30, 0x16, 0x36, 0x12, 0x1, 0x1b, 0x16, 0x8]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0xa}, {0x0, 0x7}, {0x0, 0x6}, {0x3, 0x8}, {0x1, 0x2}, {0x7, 0x7}, {0x3}, {0x2, 0x4}, {0x2, 0x8}, {0x6, 0x7}, {0x6, 0x6}, {0x7}, {0x7, 0x8}, {0x0, 0xa}, {0x0, 0x9}, {0x4, 0xa}, {0x7, 0x5}, {0x4, 0x3}, {0x5, 0x2}, {0x0, 0x2}, {0x6, 0xa}, {0x1, 0x4}, {0x5, 0x1}, {}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x0, 0x1}, {0x1}, {0x7, 0x7}, {0x0, 0x5}, {0x4, 0x1}, {0x1, 0x6}, {0x7, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x1, 0x6}, {}, {0x3, 0x4}, {0x0, 0x8}, {0x2, 0x4}, {0x3, 0x3}, {0x6, 0x9}, {0x6}, {0x1}, {0x3, 0x4}, {0x1, 0x9}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x9}, {0x3, 0x7}, {0x5, 0x3}, {0x1, 0x1}, {0x3}, {0x0, 0x6}, {0x7, 0xa}, {0x5, 0x8}, {0x2, 0x8}, {0x5, 0x6}, {0x0, 0x1}, {0x5, 0x6}, {0x2, 0x6}, {0x1, 0x3}, {0x6, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x4, 0x1b, 0xc, 0x12, 0x0, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x15, 0x1, 0xf4, 0x9, 0xf001, 0x5, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x6, 0xffff, 0x7f, 0x5, 0xff81, 0x9]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x1b, 0x9, 0x6c, 0x6c, 0x12, 0x6, 0x6, 0x9, 0x24, 0x6c, 0x1, 0x2, 0x3, 0x12, 0x48]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x18, 0x2, 0x48, 0x6c, 0x16, 0xc, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xb, 0x18, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xfff7, 0x8, 0x355, 0x40, 0x7ff, 0x3, 0x4]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x4, 0x6}, {0x1, 0x7}, {0x6}, {0x7, 0x7}, {0x1, 0x6}, {0x5}, {0x0, 0xa}, {0x4, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x1, 0xa}, {0x2, 0x3}, {0x7, 0x3}, {0x3, 0x9}, {0x4, 0x5}, {0x5, 0x2}, {0x0, 0x4}, {0x1, 0x3}, {0x7, 0x5}, {0x3, 0x6}, {0x1, 0x1}, {0x3, 0x4}, {}, {0x1, 0x3}, {0x1, 0x2}, {0x3, 0x1}, {0x4, 0x5}, {0x4, 0x5}, {0x7, 0x5}, {0x4, 0x1}, {0x5, 0x3}, {0x0, 0x4}, {0x6, 0x9}, {0x5, 0x2}, {0x3, 0x1}, {0x5, 0x6}, {0x2, 0x3}, {0x1, 0x9}, {0x1, 0x3}, {0x3, 0x4}, {0x1, 0x9}, {0x4, 0x4}, {0x6, 0x1}, {0x0, 0x2}, {0x6, 0x9}, {0x3}, {0x7, 0x4}, {0x7, 0x3}, {0x5, 0x7}, {0x4, 0x1d}, {0x0, 0x6}, {0x0, 0x4}, {0x5}, {0x0, 0x7}, {0x2, 0x1e}, {0x4, 0x7}, {}, {0x5, 0x4}, {0x7, 0x2}, {0x1, 0x5}, {0x4, 0x4}, {0x6, 0x1}, {0x4, 0x8}, {0x5, 0x3}, {0x4, 0x9}, {0x6, 0x4}, {0x5, 0x9}, {0x3, 0x7}, {0x1, 0x6}, {0x5, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1d}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x7b4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x30c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x6c, 0x9, 0x14, 0x6c, 0x9, 0x6, 0x4]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0xb, 0x24, 0x4, 0x3, 0x6, 0x16, 0x1, 0x1b, 0x1, 0x6c]}, @NL80211_TXRATE_HT={0x28, 0x2, [{}, {0x4, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x5}, {0x2, 0x7}, {0x0, 0x1}, {0x6, 0x7}, {0x5, 0x1}, {0x4, 0x3}, {0x0, 0x6}, {0x5, 0x5}, {0x6}, {0x6, 0x4}, {0x6, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x7}, {0x2, 0x7}, {0x5, 0xa}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0x9}, {0x5, 0x8}, {0x2, 0x9}, {0x2, 0x7}, {0x0, 0x2}, {0x2, 0xa}, {0x4, 0x8}, {0x4, 0x8}, {0x7, 0x9}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0x1}, {0x2, 0x7}, {0x0, 0x2}, {0x0, 0x2}, {0x2, 0x9}, {0x1, 0x7}, {0x7, 0x7}, {0x3, 0x5}, {0x2, 0x1}, {0x1}, {0x2, 0x2}, {0x6, 0x9}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x2}, {0x0, 0xa}, {0x6, 0x7}]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x6c, 0x60, 0xc, 0x8, 0xc, 0x4, 0x6c, 0x30, 0x15, 0x36, 0x60, 0x9, 0x24, 0x5, 0x16, 0x1, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0xfffa, 0x3f, 0x1000, 0x0, 0x3, 0x4, 0x5]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x8f, 0x1, 0x3f, 0x7, 0x6]}}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x3}, {0x7, 0x6}, {0x6, 0x1e}, {0x1, 0x7}, {0x2, 0x2}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x4}, {0x1, 0x5}, {0x0, 0x1}, {0x0, 0x8}, {0x6, 0x7}, {0x6, 0x5}, {0x7, 0x6}, {0x6, 0x6}, {0x5, 0x1}, {0x2, 0x6}, {0x6, 0x9}, {0x5}, {0x0, 0x4}, {0x4, 0x5}, {0x2, 0x9}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x9}, {0x5}, {0x6, 0xa}, {0x3, 0xa}, {0x3, 0x3}, {0x3, 0x6}, {0x3, 0x7}, {0x6, 0x6}, {0x0, 0x4}, {0x7, 0x3}, {0x7, 0x7}, {0x7, 0x3}, {0x4, 0x4}, {0x6, 0x5}, {0x2, 0x1}, {0x1, 0x6}, {0x5, 0x5}, {0x2, 0x1}, {0x3, 0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0x7}, {0x1, 0x6}, {0x0, 0x6}, {0x1, 0x7}, {0x0, 0x8}, {0x1, 0x9}, {0x3, 0x8}, {0x5, 0x3}, {0x6, 0x8}, {0x6, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x7, 0x2}, {0x7}, {0x4, 0xa}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xffff, 0x7, 0x2, 0x8, 0x1f, 0x3, 0x800]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x16, 0x4, 0x30, 0x4, 0x4, 0x16, 0x5, 0x3, 0x4, 0xb, 0x3, 0x24, 0x1]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x4, 0xa}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x2}, {0x7, 0x1}, {0x5, 0x9}, {0x2}, {0x7, 0x1}, {0x7, 0xa}, {0x4, 0x4}, {0x0, 0x7}, {0x5, 0x8}, {0x2}, {0x3, 0x3}, {0x0, 0x6}, {0x6, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x1, 0x4}, {0x4}, {0x0, 0x3}, {}, {0x2, 0x1}, {0x7, 0x2}, {}, {0x0, 0x2}, {0x2, 0xa}, {0x7, 0x9}, {0x4, 0x7}, {0x2, 0x8}, {0x0, 0x1}, {0x6, 0x5}, {0x1, 0x5}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0xfff, 0xfff, 0x5, 0x0, 0x40, 0x3]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x7}, {0x1, 0x7}, {0x1, 0x6}, {0x5, 0x9}, {0x4, 0x5}, {0x0, 0xa}, {0x1, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x0, 0x5}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x3}, {0x6, 0x6}, {0x4, 0x7}, {0x4, 0x4}, {0x3, 0x7}, {0x1, 0x1}, {0x1, 0x4}, {0x2, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x3, 0x1}, {0x6, 0x2}, {0x3, 0xa}, {0x0, 0x4}, {0x1, 0x6}, {0x3, 0x4}, {0x4, 0x8}, {0x4, 0x3}, {0x4, 0x4}, {0x2, 0x1}, {0x2, 0x6}, {0x1}, {0x5, 0x5}, {0x1, 0x5}, {0x3}, {0x5, 0x8}, {0x3}, {0x7, 0x2}, {0x6, 0x5}, {0x1}, {0x1, 0x5}, {0x5, 0x2}, {0x4, 0x7}, {0x4, 0x5}, {0x5, 0x2}, {0x0, 0x5}, {0x2, 0x6}, {0x7, 0xa}, {0x3, 0x8}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x4, 0x1, 0x6, 0x2, 0x7, 0xfc00]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x4, 0x2, 0x7, 0xf800, 0x7f, 0x8000]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x4}, {0x1, 0xa}, {0x3, 0x5}, {0x1, 0x6}, {0x4, 0x1}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x7, 0x8, 0x3, 0x4, 0x6, 0x168]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x12, 0x6c, 0xf, 0x1b, 0x0, 0x48, 0x15, 0x4, 0x4e, 0x16, 0x6c, 0x30, 0x24, 0x6, 0xb, 0x3, 0xb, 0x6c, 0x60]}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6}, {0x1, 0x9}, {0x7, 0x5}, {0x2, 0x1}, {0x6, 0x4}, {0x5, 0x8}, {0x0, 0xa}, {0x0, 0xa}, {0x3, 0x7}, {}, {0x0, 0x7}, {0x7}, {0x0, 0x6}, {0x5, 0x7}, {0x7, 0x7}, {0x3, 0x9}, {0x7, 0x7}, {0x5, 0x6}, {0x4, 0x7}, {0x6, 0x9}, {0x1, 0x7}, {0x1, 0x8}, {0x5, 0x6}, {0x2, 0x1}, {0x2, 0x9}, {0x5, 0x2}, {0x6, 0xa}, {0x4, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x1, 0x1}, {0x4, 0x9}, {0x2}, {0x1, 0x8}, {0x4, 0x2}, {0x5, 0x1}, {0x0, 0x2}, {0x0, 0x2}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x8}, {0x2, 0xa}, {0x5, 0x4}, {0x4, 0x3}, {0x2, 0x3}, {0x4, 0x8}, {0x0, 0x9}, {0x3, 0x9}, {0x7, 0x6}, {0x7}, {0x6, 0x1}, {0x1, 0x8}, {0x3, 0x6}, {0x2, 0xa}, {0x7, 0x4}, {0x5, 0x9}, {0x0, 0xa}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0x6}, {0x3, 0x7}, {0x2, 0xa}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x6}, {0x2, 0x6}, {}, {0x7, 0x2}, {0x5, 0x4}, {0x4, 0x5}, {0x3, 0x6}, {0x0, 0x1}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xc, 0x1, 0x1, 0x3, 0x36, 0x12, 0xc, 0x6, 0x4, 0x5, 0x60, 0x16, 0x12, 0xb, 0x18, 0x12, 0x48, 0x9, 0x24, 0x48, 0x0, 0x6, 0x4, 0x12, 0x3, 0x280cde42bf79dbab, 0x5, 0x48, 0x68]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xf, 0x12, 0x3, 0x9, 0x5, 0x24, 0x16, 0x1, 0x6c, 0x3, 0x6c, 0x71, 0x5, 0x30, 0xc, 0x6c, 0x4, 0x5]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfc6, 0x8001, 0x81, 0xfff8, 0x401, 0x0, 0x8001, 0xfffd]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x8}, {0x2, 0xa}, {0x0, 0x4}, {}, {0x3, 0x8}, {0x4}, {0x4, 0x4}, {0x3, 0x7}, {0x1, 0x5}, {0x7, 0x6}, {0x2, 0x6}, {0x7, 0xa}, {0x6, 0x4}, {0x5, 0x7}, {0x1, 0x6}, {0x7, 0x9}, {0x4}, {0x5, 0x6}, {0x4, 0x8}, {0x1, 0xa}, {0x4, 0x8}, {0x5, 0x9}, {0x6, 0x3}, {0x2, 0x9}, {0x7, 0x3}, {0x0, 0xa}, {0x3, 0xa}, {0x5, 0x1}, {0x0, 0x9}, {0x6, 0x7}, {0x0, 0x2}, {0x1, 0x2}, {0x2, 0x3}, {0x2, 0x3}, {0x3, 0x4}, {0x0, 0x9}, {0x1, 0x5}, {0x4, 0x2}, {0x4, 0xa}, {0x4, 0x6}, {0x0, 0x5}, {0x4, 0x7}, {0x6, 0x7}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0x1b, 0x1, 0xb, 0x16, 0x24, 0xb]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x108, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x1000, 0x3f, 0x1f, 0x5, 0x5, 0x1, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x22, 0x9, 0x2, 0xbe4, 0x5, 0x52, 0x9, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x1, 0x9a, 0xfa, 0x8, 0x9, 0x1f]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0xa}, {0x5, 0x8}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0xa}, {0x2}, {0x7, 0x6}, {0x1, 0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x5, 0x9}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x2}, {0x7, 0x2}, {0x7, 0x5}, {0x1, 0xa}, {0x5, 0x5}, {0x3, 0x5}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x3}, {0x1, 0x4}, {0x6, 0x2}, {0x4, 0x8}, {0x1}, {0x7, 0x5}, {0x3, 0x1}, {0x0, 0xa}, {0x3, 0x6}, {0x1, 0x2}, {0x3, 0x9}, {0x1, 0xa}, {}, {0x7, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x3, 0x4}, {0x5, 0x5}, {0x4, 0x2}, {0x3, 0x9}, {0x6, 0x8}, {0x5, 0x4}, {0x6, 0x6}, {0x3, 0x6}, {}, {0x2, 0x7}, {0x3, 0x9}, {0x1, 0x3}, {0x7}, {0x7, 0x7}, {0x7}, {0x7, 0x7}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xb, 0x16, 0x6c, 0x5, 0x35, 0x60, 0x4, 0x24, 0x5, 0x60, 0x24, 0xb, 0x3, 0xb, 0x60, 0x2d9ae3588891ded8, 0x6, 0x0, 0xc, 0x2]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x6, 0xa}, {0x1, 0x5}, {}, {0x1, 0x8}, {0x6, 0x6}, {0x6}, {0x6, 0x4}, {0x4, 0x2}, {0x6, 0x2}, {0x6, 0x8}, {0x6, 0x9}, {0x0, 0x2}, {0x5, 0x7}, {0x5, 0x5}, {0x4, 0x2}, {0x7, 0x2}, {0x0, 0x5}, {0x1}, {0x4, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x2}, {0x6, 0x2}, {0x6, 0x3}, {0x7, 0x1d}, {0x4, 0x4}, {0x0, 0x9}, {0x5, 0x8}, {0x0, 0x6}, {0x7, 0x5}, {0x1, 0x7}, {0x1, 0x2}, {0x5, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x8, 0x1000, 0x2, 0x5, 0x9, 0x3, 0xfe00]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x370, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x4, 0x5}, {0x4, 0x4}, {0x4, 0x7}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x9}, {0x7, 0xa}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0x6}, {0x5, 0x6}, {0x4, 0x3}, {0x1, 0xa}, {0x1, 0x5}, {0x0, 0x9}, {0x3, 0x7}, {0x3}, {0x0, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x3, 0x5}, {}, {0x3}, {0x7, 0x3}, {0x3, 0x6}, {0x1}, {0x1}, {0x6, 0x2}, {0x5, 0x9}, {0x4, 0x6}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x7, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x4]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x0, 0x18, 0x30, 0x16, 0x0, 0x60, 0x5, 0x6c, 0x0, 0x1]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x4c, 0x6, 0x3, 0x7, 0x8000, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdc45, 0x0, 0x1ea5, 0x400, 0x0, 0x3919, 0x8688, 0x8]}}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x4, 0x1}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x8}, {0x3, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x7, 0x5}, {0x3, 0x6}, {0x5, 0x7}, {0x6, 0x9}, {0x7, 0x6}, {0x1, 0xa}, {0x0, 0x7}, {0x5, 0x9}, {0x5, 0x7}, {0x4, 0x8}, {0x7, 0x3}, {0x6}, {0x2, 0x4}, {0x5, 0x8}, {0x7, 0x6}, {0x1, 0x2}, {0x4, 0x5}, {0x3}, {0x6, 0x4}, {0x5}, {0x4, 0xa}, {0x3, 0x1}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x3}, {0x5, 0xa}, {0x6, 0x3}, {0x5}, {0x6, 0x4}, {0x6, 0x8}, {0x3}, {0x5, 0x2}, {0x7, 0x8}, {0x6, 0x5}, {0x6, 0x5}, {0x3, 0x9}, {0x7, 0x6}, {0x5, 0x2}, {0x4, 0x2}, {0x5, 0x2}, {0x4, 0x4}, {0x6, 0x4}, {0x6, 0x4}, {0x1, 0x1}, {0x1, 0x6}, {0x2, 0x8}, {0x6, 0x7}, {0x3, 0x5}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x3}, {0x5, 0x3}, {0x5, 0xa}, {0x0, 0x1}, {0x1, 0x8}, {0x7, 0xa}, {0x7, 0x1}, {0x6, 0x7}, {0x6, 0x1}, {0x5, 0x3}, {0x4, 0x2}, {0x7, 0x1}, {0x3}, {0x1, 0x3}, {0x0, 0x1}, {0x4, 0x4}, {0x7, 0x3}, {0x2, 0x7}, {0x6, 0x5}, {0x7, 0xa}, {0x6}, {0x7, 0x3}, {}, {0x0, 0x6}, {0x0, 0x6}, {0x7, 0x4}, {0x4}, {0x6, 0x2}, {0x5, 0xa}, {0x0, 0xa}, {0x1, 0x4}, {0x5, 0x6}, {0x4, 0x7}, {0x1, 0x9}, {0x6}, {0x7, 0x6}, {0x5}, {0x0, 0x4}, {0x3, 0x5}, {0x1, 0x3}, {0x5, 0x1}, {0x7, 0xa}, {0x3, 0x9}, {0x3, 0x6}, {0x5, 0x5}, {0x0, 0x7}, {0x1}, {0x3, 0x4}, {0x2, 0x5}, {0x0, 0x5}, {0x4, 0x2}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x30, 0xc, 0x60, 0x24, 0x1, 0x1]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x2, 0x6}, {0x7, 0x8}, {0x7}, {0x2, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1b, 0x30, 0x6]}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x8}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x4}, {0x5, 0x4}, {0x7, 0x9}, {0x3, 0xa}, {0x5, 0x5}, {0x1, 0x5}, {0x2, 0x2}, {0x4, 0xa}, {0x5, 0x5}, {0x0, 0x4}, {0x4, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x7fff, 0xe6e, 0x9, 0x3ff, 0x81, 0x5, 0x8001]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x18, 0x18, 0x2c3d34f9faf620cd, 0xb, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x7, 0x8, 0xf8, 0x4, 0x40, 0x40, 0x6e]}}]}, @NL80211_BAND_2GHZ={0xd8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x2}, {0x2, 0x6}, {0x1, 0xa}, {0x5, 0x8}, {0x7, 0x3}, {0x0, 0x9}, {0x3, 0xa}, {0x2, 0x9}, {0x1, 0x5}, {0x6, 0x3}, {0x6, 0x5}, {0x6, 0x9}, {0x4, 0x2}, {0x1, 0x7}, {0x4, 0x6}, {0x5, 0x9}, {0x5, 0x6}, {0x3, 0x4}, {0x0, 0x3}, {0x1, 0x4}, {0x7, 0x2}, {0x2, 0x2}, {0x4, 0x3}, {0x7, 0x6}, {0x1, 0x6}, {0x3, 0x8}, {0x3, 0x6}, {0x4, 0x3}, {0x2, 0x2}, {0x7, 0x5}, {0x6, 0x1}, {0x4, 0x1}, {0x1, 0xa}, {}, {0x1, 0x5}, {0x6, 0x5}, {0x2, 0x5}, {0x1, 0x3}, {0x4}, {0x0, 0x5}, {0x5, 0x5}, {0x6, 0x3}, {0x4, 0x8}, {0x5, 0x7}, {0x6, 0x4}, {0x2, 0xa}, {0x3, 0x5}, {0x3, 0x3}, {0x5, 0xa}, {0x5, 0x9}, {0x7, 0xa}, {0x1, 0x1}, {0x0, 0x1}, {0x7, 0x5}, {0x1, 0x1}, {0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x296, 0x1, 0x2, 0x7, 0x2, 0x75e6]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x2, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x9}, {0x4, 0x7}, {0x3, 0x4}, {0x5, 0x9}, {0x0, 0x1}, {0x1}, {0x7, 0x7}, {0x4, 0x5}, {0x3, 0x2}, {0x1, 0x9}, {0x6, 0x1}, {0x6, 0x8}, {0x2, 0xa}, {0x2, 0x3}, {0x3, 0x4}, {0x1}, {0x0, 0xa}, {0x1, 0x5}, {0x3}, {0x2, 0x5}, {0x2, 0x6}, {0x3, 0x3}, {0x0, 0x8}, {0x4, 0x3}, {0x1, 0x2}, {0x2, 0x8}, {0x5, 0x5}, {0x0, 0x2}, {0x3, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x8, 0x5, 0x8001, 0x4, 0x1, 0x9]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{}, {0x1, 0x9}, {0x2, 0x1}, {0x5, 0x6}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x5}, {0x0, 0x5}, {0x4, 0x3}, {0x0, 0x9}, {0x5, 0x7}, {0x3, 0x9}, {0x7, 0x2}, {0x1, 0x9}, {0x0, 0xa}, {0x4, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x5}, {0x7, 0x9}, {0x0, 0x5}, {0x6}, {0x1, 0xa}, {0x5, 0x3}, {0x7, 0x5}, {0x6, 0xa}, {0x1, 0x5}, {0x1, 0x3}, {0x1, 0x2}, {0x5, 0x3}, {0x2, 0xa}, {0x1, 0x7}, {0x5, 0x1}, {0x1, 0x6}, {0x5}, {0x5, 0xa}, {0x4, 0x1}, {0x3, 0x9}, {0x7, 0x9}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x9}, {0x2, 0x6}, {0x3, 0x2}, {0x2, 0x1}, {0x1, 0x9}, {0x2, 0x8}, {0x3, 0x8}, {0x2, 0x1}]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x19b9, 0x1000, 0x900, 0x6, 0x80, 0x401, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x0, 0x58, 0x0, 0x2, 0x8, 0x65e9]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0x7}, {0x0, 0x2}, {0x3, 0x2}, {0x1, 0x3}, {0x5, 0xa}, {0x4}, {0x3, 0x4}, {}, {0x2, 0x9}, {0x6, 0xa}, {0x7, 0x5}, {0x6}, {0x0, 0xa}, {0x2, 0x6}, {0x0, 0x1}, {0x2}, {0x6, 0x1}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0x8}, {0x4, 0x2}, {0x3, 0x6}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0x6}, {0x3, 0x5}, {0x6, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x1, 0x1}, {0x4, 0x8}, {0x7, 0x1}, {0x3, 0x7}, {0x2, 0x8}, {0x7, 0x5}, {0x4, 0xa}, {0x3, 0x1}, {0x7, 0x1}, {0x6, 0x9}, {0x7, 0x7}, {0x5, 0x4}, {0x5, 0xa}, {0x5, 0x8}, {0x3, 0x9}, {0x4, 0x3}, {0x0, 0x7}, {0x6, 0x9}, {0x1, 0x9}, {0x6, 0x1}, {0x4, 0x9}, {0x4, 0x8}, {0x2, 0x3}]}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x2}, {0x3, 0x5}, {0x1, 0x8}, {0x2, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x1, 0x6}, {}, {0x5, 0x7}, {0x0, 0x3}, {0x2, 0x1}, {0x6}, {0x1, 0x6}, {0x0, 0x9}, {0x0, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0xa}, {0x7, 0x2}, {0x3, 0x3}, {0x3, 0x4}, {0x7, 0x1}, {}, {0x6, 0x8}, {0x3, 0x7}, {0x7, 0x1}, {0x6, 0x3}, {0x2, 0x8}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0x2}, {0x6, 0x8}, {}, {0x3}, {0x6, 0x9}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x1000, 0x0, 0x9, 0x800, 0x3, 0x3, 0x5]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x7}, {0x4, 0x4}, {0x4, 0x1}, {0x6, 0x6}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0x2}, {}, {0x4}, {0x3, 0x7}, {0x4, 0x9}, {0x4, 0x4}, {}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xb, 0x36, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7fff, 0x3, 0x1ff, 0x800, 0xfff, 0x1f, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1, 0x1a, 0x48, 0x18, 0x6c, 0x17, 0x9, 0xb, 0x3, 0x5, 0x18, 0x48, 0x9, 0x1, 0x4, 0x5, 0x4f, 0x64, 0x2, 0x1c, 0x0, 0x60, 0x1b, 0x48, 0x2, 0x60, 0x1b]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x4}, {0x7, 0x7}, {0x2}, {0x6, 0x4}, {0x6, 0x3}, {0x2, 0x2}, {0x2, 0x5}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0x8}, {0x1, 0x3}, {0x5, 0xa}, {0x4, 0x6}, {0x0, 0x8}, {0x4, 0x4}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x368, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x4}, {0x2, 0x3}, {0x6, 0x3}, {0x4, 0x4}, {0x4, 0xa}, {}, {0x2, 0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4d9, 0x1, 0x7ff, 0x8, 0x4, 0x1, 0x47, 0x5]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x8}, {0x1, 0x5}, {0x3, 0x1}, {0x5, 0x5}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0x1}, {0x7}, {0x5}, {0x2, 0x4}, {0x2}, {0x7, 0x1}, {0x4, 0x5}, {0x1}, {0x2, 0x6}, {0x3, 0x3}, {0x2, 0x2}, {0x3, 0xa}, {0x3, 0x3}, {0x4}, {0x5, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x4, 0x4}, {0x5, 0x3}, {0x4, 0x7}, {0x2, 0x5}, {0x5, 0xa}, {0x5, 0x8}, {0x3, 0x7}, {0x2, 0x4}, {0x4}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x8}, {0x5, 0xa}, {0x7, 0x6}, {0x3}, {0x6, 0x4}, {0x0, 0x6}, {0x2}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x3}, {0x6, 0x1}, {0x3, 0x4}, {0x7, 0x9}, {0x1}, {0x5}, {0x6, 0x2}, {0x4, 0x2}, {0x0, 0x6}, {0x5, 0x4}, {0x5}, {0x5}, {0x5, 0x4}, {0x4}, {0x3, 0x9}, {0x7, 0x3}, {0x7, 0xa}, {0x2, 0xa}, {0x2}, {0x2, 0x9}, {0x2}, {0x3, 0x6}, {0x1, 0x7}, {0x4, 0xa}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x7}, {0x0, 0x1}, {0x3, 0x6}, {0x7, 0x6}, {0x2, 0x6}, {0x0, 0x2}, {0x2, 0x3}, {0x7, 0x7}, {0x2, 0xa}, {0x4, 0x5}, {0x6, 0x9}, {0x5, 0x9}, {0x0, 0x9}, {0x5, 0x4}, {0x1, 0x2}, {0x5, 0x6}, {0x4, 0x9}, {0x4}, {0x1, 0x6}, {0x2, 0x7}, {0x2}, {0x1, 0x2}, {0x7, 0xa}, {0x5, 0xa}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x7}, {0x1, 0x6}, {0x3, 0xa}, {0x2, 0x7}, {0x4, 0x5}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x60, 0x6c, 0x60, 0x6c, 0x6, 0x3, 0x30, 0x60, 0x24, 0x2b, 0x18, 0x1, 0x2, 0x5, 0x48, 0x0, 0xc, 0x24, 0x5, 0x12, 0x60, 0x12, 0x6, 0x3, 0x16, 0x4, 0x30, 0x36, 0x6, 0x2, 0x36]}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x7}, {0x3}, {0x3, 0x4}, {0x1, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x3, 0x4}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x3, 0x9}, {0x3, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x4, 0x4}, {0x2, 0xa}, {0x4, 0x1}, {0x7, 0x9}, {0x6}, {0x0, 0x8}, {0x4, 0x5}, {0x0, 0x3}, {0x0, 0xa}, {0x3, 0x8}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0x18, 0x18, 0x60, 0x36, 0x3, 0x3, 0x18, 0x1b, 0x1, 0x18, 0x5, 0x6c, 0x2]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0x36, 0x1, 0x18, 0x18, 0x60, 0x5a, 0x2, 0x1, 0x16, 0x3, 0x30, 0xc, 0x3, 0x24, 0x48, 0xc, 0x18, 0x6, 0x57aac9c3531ff68d, 0x5, 0x16, 0x4, 0x4, 0x6c, 0x18, 0xb, 0x6, 0x12, 0x5, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x2, 0x5, 0x5, 0x5, 0xff, 0xfff7, 0xfffa]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x214, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x6}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x8, 0x1000, 0x0, 0x7, 0x2, 0xffff]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0x9}, {0x0, 0x3}, {0x5, 0x9}, {0x2, 0x6}, {0x6, 0xa}, {0x7}, {0x6, 0x6}, {0x7, 0x1}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0x4}, {0x5, 0x4}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x2}, {0x1, 0x7}, {0x2, 0x4}, {0x2, 0x9}, {0x2, 0x1}, {0x7, 0x8}, {0x3, 0x2}, {0x1, 0x5}, {0x3, 0xa}, {0x0, 0x6}, {0x5, 0x8}, {0x1, 0x8}, {0x0, 0x6}, {0x4, 0x5}, {0x1, 0x6}, {0x4, 0x4}, {0x3, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x2}, {0x0, 0x8}, {0x6, 0x8}, {0x4}, {0x7, 0xa}, {0x1, 0x8}, {0x2, 0x3}, {0x2, 0x7}, {0x7}, {0x1}, {0x0, 0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x5, 0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x11, 0x24, 0x5, 0x9, 0xc, 0x6, 0x12, 0x36, 0x48, 0x6, 0x4, 0xe, 0x6c, 0x24, 0xe, 0x2, 0x30, 0x4, 0x30, 0x24, 0x3c, 0x36, 0xc, 0x6, 0x18, 0x6c]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x1, 0xc, 0x1b, 0x5, 0x30, 0x0, 0xc, 0x9, 0x5, 0x1b]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0x24, 0x1b, 0x3, 0x2, 0x2, 0x12, 0x6, 0x48, 0x6c, 0x48, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x4, 0x1, 0x5, 0x9440, 0xc97, 0x5, 0x6a9]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x3, 0x9}, {}, {0x5, 0x7}, {0x6, 0xa}, {0x2, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x1, 0x3}, {0x6, 0x8}, {0x1, 0x8}, {0x1}, {0x6, 0x2}, {0x3, 0x1}, {0x4, 0xa}, {0x7, 0x7}, {}, {0x6, 0x8}, {0x2, 0x7}, {0x2, 0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1, 0x60, 0x5, 0xc, 0x48, 0x48, 0x12, 0x1, 0x1b, 0x3, 0x2, 0x48, 0x5, 0x16, 0x6c, 0x24, 0x4, 0x18, 0x9, 0x3, 0x16, 0x12, 0x6, 0x6c]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0x8}, {0x3, 0x9}, {0x5, 0x7}, {0x0, 0x8}, {0x4, 0x5}, {0x7, 0x3}, {0x1, 0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x2}, {0x4, 0x7}, {0x0, 0x9}, {0x0, 0x9}, {0x6, 0xa}, {}, {0x6}, {0x2, 0x8}, {0x1, 0x1}, {0x6, 0x8}, {0x1, 0x9}, {0x7, 0x5}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0xa}, {0x0, 0x2}, {0x6, 0x8}, {0x6}, {0x1, 0xa}, {0x6, 0x5}, {0x7, 0x3}, {0x2, 0x8}, {0x4, 0x9}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0x8}, {0x6, 0x1}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x4}, {0x6, 0x8}, {0x4, 0x8}]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x9}, {0x7, 0x9}, {0x5}, {0x6, 0x9}, {0x1, 0x9}, {0x5, 0x7}, {0x0, 0x3}, {0x0, 0x6}, {0x3, 0x1}, {0x7, 0x5}, {0x1, 0x3}, {0x1, 0xa}, {0x6, 0x7}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x7}, {0x3, 0x2}, {0x2, 0x7}, {0x3, 0xa}, {0x1}, {}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x7}, {0x0, 0x2}, {}, {0x1, 0x1}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x9, 0x4, 0x60, 0xc, 0x30, 0x0, 0x6, 0x24, 0xb, 0x2]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0x5}, {0x3, 0x3}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x36, 0x60, 0x6, 0x3, 0x18, 0x16, 0x30, 0xc, 0x5, 0xdf9b6739d76b0eb]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x3}, {0x1, 0x9}, {0x1, 0x8}, {0x6, 0xa}, {0x7, 0x5}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0x9}, {0x7, 0xa}, {0x7, 0x1a}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x3}, {0x6, 0x1}, {0x5, 0x7}, {0x2, 0x6}, {0x0, 0xa}, {0x4, 0xa}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0x3}, {0x4, 0x6}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0x3}, {0x3, 0x9}, {0x0, 0x6}, {0x4, 0x6}, {0x6, 0x7}, {0x3, 0x9}, {}, {0x4, 0x2}, {0x6, 0x9}, {0x4, 0x6}, {0x4, 0x5}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x7}, {0x3, 0x4}, {0x4, 0x8}, {0x2, 0x4}, {0x5, 0x8}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0xa}, {0x2, 0xa}, {0x2, 0x2}, {0x4, 0x7}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x3}, {0x7}, {0x2, 0x2}, {0x0, 0x6}, {0x6, 0xa}, {0x6, 0x9}, {0x0, 0x7}, {0x4, 0x7}, {0x6, 0x2}, {0x0, 0x1}, {0x7, 0x1}, {0x4, 0x7}, {0x7, 0x5}, {0x0, 0x6}, {0x7, 0x7}, {0x5, 0x4}, {0x2, 0x2}, {0x6}, {0x4, 0x5}, {0x3, 0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x6, 0x9}, {0x5, 0xa}, {0x1, 0x7}, {0x7, 0x5}, {0x0, 0xa}, {0x6, 0x2}, {0x3, 0x5}, {0x2}, {0x2, 0x2}, {0x2, 0x8}, {0x0, 0x3}, {0x0, 0x6}, {0x5, 0xa}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x7, 0x9}, {0x2, 0x7}, {0x7, 0x9}, {0x1, 0x1}, {0x5, 0x6}, {0x1, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x1}, {0x7}, {0x1, 0x1}, {0x1, 0x7}, {0x5, 0x9}, {0x5, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x4, 0x7, 0x1f, 0x0, 0x9, 0x40, 0x100]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xdc, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x4, 0x16, 0x6, 0x4, 0x1, 0x16, 0x30, 0x4, 0xc, 0x30, 0x9]}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8d}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x665da146}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x36}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x1384}, 0x1, 0x0, 0x0, 0x40000}, 0x24008010) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x4, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x4048010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r3, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000002) socketpair(0x22, 0x6, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x84000000, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4bf}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0xa9e}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) openat$cgroup_ro(r0, &(0x7f00000003c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) 13:04:47 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 68) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:04:47 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, 0xffffffffffffffff, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2893.149587] FAULT_INJECTION: forcing a failure. [ 2893.149587] name failslab, interval 1, probability 0, space 0, times 0 [ 2893.153780] CPU: 1 PID: 34453 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2893.154840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2893.155585] Call Trace: [ 2893.155823] dump_stack+0x107/0x167 [ 2893.156137] should_fail.cold+0x5/0xa [ 2893.156523] ? create_object.isra.0+0x3a/0xa20 [ 2893.156915] should_failslab+0x5/0x20 [ 2893.157317] kmem_cache_alloc+0x5b/0x310 [ 2893.157677] create_object.isra.0+0x3a/0xa20 [ 2893.158050] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2893.158538] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2893.158977] ? skb_segment+0x9d8/0x3aa0 [ 2893.159368] __alloc_skb+0xb1/0x5b0 [ 2893.159695] skb_segment+0x9d8/0x3aa0 [ 2893.160020] ? lock_chain_count+0x20/0x20 [ 2893.160463] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2893.160894] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2893.161405] ? SOFTIRQ_verbose+0x10/0x10 [ 2893.161762] __udp_gso_segment+0x11c6/0x1830 [ 2893.162132] ? __sk_receive_skb+0x830/0x830 [ 2893.162551] udp4_ufo_fragment+0x528/0x720 [ 2893.162933] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2893.163407] inet_gso_segment+0x4fb/0x11a0 [ 2893.163785] skb_mac_gso_segment+0x273/0x570 [ 2893.164163] ? inet_sock_destruct+0x840/0x840 [ 2893.164591] ? skb_network_protocol+0x650/0x650 [ 2893.164992] ? skb_crc32c_csum_help+0x80/0x80 [ 2893.165419] ? lock_acquire+0x197/0x470 [ 2893.165756] ? __dev_queue_xmit+0x1c2/0x2710 [ 2893.166137] __skb_gso_segment+0x32d/0x6d0 [ 2893.166573] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2893.167039] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2893.167482] __dev_queue_xmit+0x87b/0x2710 [ 2893.167855] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2893.168303] ? mark_held_locks+0x9e/0xe0 [ 2893.168655] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2893.169109] neigh_connected_output+0x382/0x4d0 [ 2893.169642] ip_finish_output2+0x6f1/0x21f0 [ 2893.170090] ? nf_hook_slow+0xfc/0x1e0 [ 2893.170511] ? ip_frag_next+0x9e0/0x9e0 [ 2893.170873] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2893.171454] __ip_finish_output.part.0+0x5f3/0xb50 [ 2893.171941] ? ip_fragment.constprop.0+0x240/0x240 [ 2893.172431] ? nf_hook+0x510/0x510 [ 2893.172814] ip_output+0x2f7/0x600 [ 2893.173188] ip_send_skb+0xdd/0x260 [ 2893.173582] udp_send_skb+0x6da/0x11d0 [ 2893.173930] udp_sendmsg+0x139a/0x2160 [ 2893.174379] ? ip_frag_init+0x350/0x350 [ 2893.174809] ? lock_chain_count+0x20/0x20 [ 2893.175187] ? udp_setsockopt+0xc0/0xc0 [ 2893.175598] ? perf_trace_lock+0xac/0x490 [ 2893.176018] ? SOFTIRQ_verbose+0x10/0x10 [ 2893.176438] ? lock_chain_count+0x20/0x20 [ 2893.176861] ? __lockdep_reset_lock+0x180/0x180 [ 2893.177322] ? mark_lock+0xf5/0x2df0 [ 2893.177707] ? mark_lock+0xf5/0x2df0 [ 2893.178129] ? lock_chain_count+0x20/0x20 [ 2893.178530] ? lock_chain_count+0x20/0x20 [ 2893.178916] ? mark_lock+0xf5/0x2df0 [ 2893.179354] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2893.179803] ? udp_v6_push_pending_frames+0x360/0x360 [ 2893.180323] ? SOFTIRQ_verbose+0x10/0x10 [ 2893.180737] ? mark_lock+0xf5/0x2df0 [ 2893.181085] ? lock_acquire+0x197/0x470 [ 2893.181547] ? find_held_lock+0x2c/0x110 [ 2893.181905] ? __might_fault+0xd3/0x180 [ 2893.182298] ? lock_downgrade+0x6d0/0x6d0 [ 2893.182717] ? lock_downgrade+0x6d0/0x6d0 [ 2893.183170] ? sock_has_perm+0x1ea/0x280 [ 2893.183599] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2893.184047] ? _copy_from_user+0xfb/0x1b0 [ 2893.184459] ? __import_iovec+0x458/0x590 [ 2893.184883] ? udp_v6_push_pending_frames+0x360/0x360 [ 2893.185479] inet6_sendmsg+0x105/0x140 [ 2893.185836] ? inet6_compat_ioctl+0x320/0x320 [ 2893.186267] __sock_sendmsg+0xf2/0x190 [ 2893.186603] ____sys_sendmsg+0x70d/0x870 [ 2893.187036] ? sock_write_iter+0x3d0/0x3d0 [ 2893.187441] ? do_recvmmsg+0x6d0/0x6d0 [ 2893.187851] ? SOFTIRQ_verbose+0x10/0x10 [ 2893.188277] ? lock_downgrade+0x6d0/0x6d0 [ 2893.188708] ? __lockdep_reset_lock+0x180/0x180 [ 2893.189100] ? SOFTIRQ_verbose+0x10/0x10 [ 2893.189525] ___sys_sendmsg+0xf3/0x170 [ 2893.189933] ? sendmsg_copy_msghdr+0x160/0x160 [ 2893.190449] ? __fget_files+0x2cf/0x520 [ 2893.190822] ? lock_downgrade+0x6d0/0x6d0 [ 2893.191181] ? find_held_lock+0x2c/0x110 [ 2893.191589] ? __fget_files+0x2f8/0x520 [ 2893.191940] ? __fget_light+0xea/0x290 [ 2893.192330] __sys_sendmsg+0xe5/0x1b0 [ 2893.192740] ? __sys_sendmsg_sock+0x40/0x40 [ 2893.193110] ? rcu_read_lock_any_held+0x75/0xa0 [ 2893.193602] do_syscall_64+0x33/0x40 [ 2893.193992] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2893.194499] RIP: 0033:0x7fa05acd5b19 [ 2893.194829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2893.196447] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2893.197099] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2893.197771] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2893.198418] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2893.199029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2893.199673] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:04:47 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:04:47 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x110021, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@uname={'uname', 0x3d, 'dfltgid'}}, {@debug={'debug', 0x3d, 0x8}}, {@version_u}]}}) r3 = socket$inet(0x2, 0x2, 0x0) r4 = fsmount(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:05:08 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:05:08 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 69) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:05:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)={0x1234, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x82}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x284}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_NODE={0x10a4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a066c7b7181b9bc500d109a4f8a579789e197ce6634f"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "37a9c292c6a8974907bcf0da131c9bbdef26260c4d75a53bb692bb31373d340b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a205108}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff5a383}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}]}, 0x1234}, 0x1, 0x0, 0x0, 0x42}, 0x24000000) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xba, 0x1, 0x1f, 0x1f, 0x0, 0xfffffffffffff801, 0x400, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7dbe, 0x0, @perf_config_ext={0x6}, 0x10400, 0x6, 0x6, 0x4, 0x80000000, 0x10000, 0x2, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)={0x28, 0x1a, 0x69844ea0a6ddcd11, 0x0, 0x0, {0x1f}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0xc, 0xf, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r2}]}]}, 0x28}}, 0x0) 13:05:08 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, 0xffffffffffffffff, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:05:08 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1e95, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) dup2(r0, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)) syz_io_uring_complete(r5) syz_io_uring_setup(0x3151, &(0x7f0000000000)={0x0, 0x9fda, 0x10, 0x2, 0x349, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r7, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r7, &(0x7f0000000240)={0x8800, 0x100, 0xf}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x12345}, 0x8) 13:05:08 executing program 1: r0 = clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0) r4 = syz_io_uring_complete(0x0) io_uring_enter(r3, 0x630a, 0xce52, 0x2, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x105082, 0x0) accept4$packet(r6, &(0x7f0000000400), &(0x7f0000000440)=0x14, 0x800) fcntl$lock(r3, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x2c0, r5}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f00000002c0)=0xc) clone3(&(0x7f0000000340)={0x80000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0xe}, &(0x7f0000000100)=""/163, 0xa3, &(0x7f00000001c0)=""/39, &(0x7f0000000300)=[r0, 0x0, r5, r0, r7, r0, r0, r0], 0x8}, 0x58) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:05:08 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000000)=""/246, 0xf6}, {&(0x7f0000000100)=""/213, 0xd5}, {&(0x7f00000002c0)=""/207, 0xcf}, {&(0x7f0000000200)=""/70, 0x46}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000000440)=""/183, 0xb7}], 0x6) syz_genetlink_get_family_id$devlink(0x0, r0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:05:08 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) [ 2913.956321] selinux_netlink_send: 28 callbacks suppressed [ 2913.956907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=34659 comm=syz-executor.4 [ 2913.971708] FAULT_INJECTION: forcing a failure. [ 2913.971708] name failslab, interval 1, probability 0, space 0, times 0 [ 2913.972748] CPU: 0 PID: 34663 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2913.972844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=34667 comm=syz-executor.4 [ 2913.973328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2913.973335] Call Trace: [ 2913.973357] dump_stack+0x107/0x167 [ 2913.973378] should_fail.cold+0x5/0xa [ 2913.976040] ? create_object.isra.0+0x3a/0xa20 [ 2913.976444] should_failslab+0x5/0x20 [ 2913.976776] kmem_cache_alloc+0x5b/0x310 [ 2913.977140] create_object.isra.0+0x3a/0xa20 [ 2913.977519] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2913.977964] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2913.978405] ? skb_segment+0x9d8/0x3aa0 [ 2913.978762] __alloc_skb+0xb1/0x5b0 [ 2913.979122] skb_segment+0x9d8/0x3aa0 [ 2913.979527] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2913.979963] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2913.980410] ? SOFTIRQ_verbose+0x10/0x10 [ 2913.980772] __udp_gso_segment+0x11c6/0x1830 [ 2913.981151] ? __sk_receive_skb+0x830/0x830 [ 2913.981539] udp4_ufo_fragment+0x528/0x720 [ 2913.981912] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2913.982347] inet_gso_segment+0x4fb/0x11a0 [ 2913.982736] skb_mac_gso_segment+0x273/0x570 [ 2913.983146] ? inet_sock_destruct+0x840/0x840 [ 2913.983533] ? skb_network_protocol+0x650/0x650 [ 2913.983928] ? skb_crc32c_csum_help+0x80/0x80 [ 2913.984314] ? lock_acquire+0x197/0x470 [ 2913.984655] ? __dev_queue_xmit+0x1c2/0x2710 [ 2913.985045] __skb_gso_segment+0x32d/0x6d0 [ 2913.985421] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2913.985872] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2913.986272] __dev_queue_xmit+0x87b/0x2710 [ 2913.986657] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2913.987096] ? mark_held_locks+0x9e/0xe0 [ 2913.987477] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2913.987956] neigh_connected_output+0x382/0x4d0 [ 2913.988401] ip_finish_output2+0x6f1/0x21f0 [ 2913.988799] ? nf_hook_slow+0xfc/0x1e0 [ 2913.989158] ? ip_frag_next+0x9e0/0x9e0 [ 2913.989517] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2913.989988] __ip_finish_output.part.0+0x5f3/0xb50 [ 2913.990436] ? ip_fragment.constprop.0+0x240/0x240 [ 2913.990872] ? nf_hook+0x510/0x510 [ 2913.991239] ip_output+0x2f7/0x600 [ 2913.991580] ip_send_skb+0xdd/0x260 [ 2913.991917] udp_send_skb+0x6da/0x11d0 [ 2913.992291] udp_sendmsg+0x139a/0x2160 [ 2913.992651] ? tracing_generic_entry_update+0x1ed/0x270 [ 2913.993138] ? ip_frag_init+0x350/0x350 [ 2913.993500] ? tracing_generic_entry_update+0x1ed/0x270 [ 2913.993992] ? udp_setsockopt+0xc0/0xc0 [ 2913.994360] ? perf_event_switch_output+0x7d0/0x7d0 [ 2913.994838] ? lock_chain_count+0x20/0x20 [ 2913.995244] ? perf_tp_event+0x5ce/0xc00 [ 2913.995614] ? lock_chain_count+0x20/0x20 [ 2913.996007] ? perf_event_switch_output+0x7d0/0x7d0 [ 2913.996462] ? perf_swevent_event+0x6c/0x550 [ 2913.996884] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2913.997255] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2913.997723] ? udp_v6_push_pending_frames+0x360/0x360 [ 2913.998184] ? SOFTIRQ_verbose+0x10/0x10 [ 2913.998579] ? lock_acquire+0x197/0x470 [ 2913.998941] ? find_held_lock+0x2c/0x110 [ 2913.999344] ? __might_fault+0xd3/0x180 [ 2913.999702] ? lock_downgrade+0x6d0/0x6d0 [ 2914.000087] ? lock_downgrade+0x6d0/0x6d0 [ 2914.000468] ? sock_has_perm+0x1ea/0x280 [ 2914.000837] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2914.001309] ? _copy_from_user+0xfb/0x1b0 [ 2914.001703] ? __import_iovec+0x458/0x590 [ 2914.002081] ? udp_v6_push_pending_frames+0x360/0x360 [ 2914.002553] inet6_sendmsg+0x105/0x140 [ 2914.002909] ? inet6_compat_ioctl+0x320/0x320 [ 2914.003340] __sock_sendmsg+0xf2/0x190 [ 2914.003698] ____sys_sendmsg+0x70d/0x870 [ 2914.004074] ? sock_write_iter+0x3d0/0x3d0 [ 2914.004457] ? do_recvmmsg+0x6d0/0x6d0 [ 2914.004814] ? perf_trace_lock+0x2bd/0x490 [ 2914.005205] ? SOFTIRQ_verbose+0x10/0x10 [ 2914.005579] ? __lockdep_reset_lock+0x180/0x180 [ 2914.006009] ___sys_sendmsg+0xf3/0x170 [ 2914.006377] ? sendmsg_copy_msghdr+0x160/0x160 [ 2914.006801] ? __fget_files+0x2cf/0x520 [ 2914.007188] ? lock_downgrade+0x6d0/0x6d0 [ 2914.007574] ? find_held_lock+0x2c/0x110 [ 2914.007963] ? __fget_files+0x2f8/0x520 [ 2914.008340] ? __fget_light+0xea/0x290 [ 2914.008712] __sys_sendmsg+0xe5/0x1b0 [ 2914.009060] ? __sys_sendmsg_sock+0x40/0x40 [ 2914.009453] ? rcu_read_lock_any_held+0x75/0xa0 [ 2914.009917] do_syscall_64+0x33/0x40 [ 2914.010255] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2914.010708] RIP: 0033:0x7fa05acd5b19 [ 2914.011063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2914.012778] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2914.013458] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2914.014096] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 13:05:08 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, 0xffffffffffffffff, 0xffffc000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2914.014727] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2914.015419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2914.016059] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:05:08 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000440)) r3 = request_key(&(0x7f0000000180)='big_key\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='key_or_keyring:', r2) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x1}]}) dup(r0) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffc, r4, 0x0) r6 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) request_key(&(0x7f0000000400)='logon\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000600)='key_or_keyring:', r6) r7 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r6) r8 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$revoke(0x3, r8) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') ioctl$TIOCGSERIAL(r9, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) unshare(0x48020200) 13:05:08 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:05:28 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 70) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:05:28 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0) r3 = syz_io_uring_complete(0x0) io_uring_enter(r2, 0x630a, 0xce52, 0x2, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x11, 0xffffffffffffffff, 0x10000000) fcntl$lock(r2, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x2c0, r4}) syz_open_procfs(r4, &(0x7f0000000000)='net/hci\x00') fcntl$setstatus(r1, 0x4, 0x400) syz_genetlink_get_family_id$devlink(0x0, r0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) sendfile(r5, r1, &(0x7f0000000100)=0x94b8, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x7fffffff}, 0x1c) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8981, &(0x7f00000000c0)={0x1, 'geneve1\x00', {}, 0x8001}) 13:05:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:05:28 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x4002, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000380)) openat$incfs(r0, &(0x7f00000000c0)='.pending_reads\x00', 0x20000, 0x10) ioctl$RTC_AIE_ON(r2, 0x7002) signalfd4(r2, &(0x7f0000000180)={[0x2]}, 0x8, 0x800) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{r2}, "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"}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, {0x308}, 0x0, {0x2, 0x1000, @broadcast}}) fallocate(r3, 0x1d, 0xfffffffffffffffe, 0xb35c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000200)={{0x2, 0x4e23, @multicast1}, {0x306, @remote}, 0x10, {0x2, 0x4e23, @local}, 'erspan0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000140)=ANY=[@ANYBLOB="01e71f00010000006c11e26bbee85b7110f337180000010000", @ANYRES32=r0, @ANYBLOB="e02f00c86f41bc002e2f66696c653100"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000002c0)={[{@noacl}]}) 13:05:28 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:05:28 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="756952bfe7643d", @ANYRESHEX=0xee01]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) symlinkat(&(0x7f0000000100)='./mnt\x00', r1, &(0x7f0000000140)='./mnt\x00') readv(r0, &(0x7f0000000000), 0x0) 13:05:28 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:05:28 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = gettid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) clone3(&(0x7f0000000340)={0x200000800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x1c}, &(0x7f0000000100)=""/92, 0x5c, &(0x7f0000000180)=""/13, &(0x7f00000001c0)=[r1], 0x1, {r2}}, 0x58) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, r3) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) [ 2934.055083] tmpfs: Unknown parameter 'uiR¿çd' [ 2934.066979] FAULT_INJECTION: forcing a failure. [ 2934.066979] name failslab, interval 1, probability 0, space 0, times 0 [ 2934.068078] CPU: 1 PID: 34994 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2934.069026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2934.069945] Call Trace: [ 2934.070222] dump_stack+0x107/0x167 [ 2934.070653] should_fail.cold+0x5/0xa [ 2934.071037] should_failslab+0x5/0x20 [ 2934.071425] __kmalloc_node_track_caller+0x74/0x3b0 [ 2934.072059] ? skb_segment+0x9d8/0x3aa0 [ 2934.072529] __alloc_skb+0xb1/0x5b0 [ 2934.072916] skb_segment+0x9d8/0x3aa0 [ 2934.073290] ? lock_chain_count+0x20/0x20 [ 2934.073596] tmpfs: Unknown parameter 'uiR¿çd' [ 2934.073686] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2934.074570] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2934.075061] ? SOFTIRQ_verbose+0x10/0x10 [ 2934.075482] __udp_gso_segment+0x11c6/0x1830 [ 2934.075909] ? __sk_receive_skb+0x830/0x830 [ 2934.076344] udp4_ufo_fragment+0x528/0x720 [ 2934.076711] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2934.077241] inet_gso_segment+0x4fb/0x11a0 [ 2934.077622] skb_mac_gso_segment+0x273/0x570 [ 2934.078041] ? inet_sock_destruct+0x840/0x840 [ 2934.078472] ? skb_network_protocol+0x650/0x650 [ 2934.078912] ? skb_crc32c_csum_help+0x80/0x80 [ 2934.079385] ? mark_held_locks+0x9e/0xe0 [ 2934.079743] __skb_gso_segment+0x32d/0x6d0 [ 2934.080161] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2934.080655] ? __dev_queue_xmit+0x787/0x2710 [ 2934.081099] __dev_queue_xmit+0x87b/0x2710 [ 2934.081525] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2934.081971] ? mark_held_locks+0x9e/0xe0 [ 2934.082379] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2934.082874] neigh_connected_output+0x382/0x4d0 [ 2934.083349] ip_finish_output2+0x6f1/0x21f0 [ 2934.083720] ? nf_hook_slow+0xfc/0x1e0 [ 2934.084106] ? ip_frag_next+0x9e0/0x9e0 [ 2934.084524] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2934.085028] __ip_finish_output.part.0+0x5f3/0xb50 [ 2934.085496] ? ip_fragment.constprop.0+0x240/0x240 [ 2934.085954] ? nf_hook+0x510/0x510 [ 2934.086319] ip_output+0x2f7/0x600 [ 2934.086630] ip_send_skb+0xdd/0x260 [ 2934.086992] udp_send_skb+0x6da/0x11d0 [ 2934.087396] udp_sendmsg+0x139a/0x2160 [ 2934.087726] ? mark_lock+0xf5/0x2df0 [ 2934.088098] ? ip_frag_init+0x350/0x350 [ 2934.088492] ? lock_chain_count+0x20/0x20 [ 2934.088922] ? udp_setsockopt+0xc0/0xc0 [ 2934.089334] ? mark_lock+0xf5/0x2df0 [ 2934.092573] ? __lockdep_reset_lock+0x180/0x180 [ 2934.093043] ? lock_chain_count+0x20/0x20 [ 2934.093448] ? mark_lock+0xf5/0x2df0 [ 2934.093770] ? mark_lock+0xf5/0x2df0 [ 2934.094136] ? lock_chain_count+0x20/0x20 [ 2934.094563] ? __lock_acquire+0xbb1/0x5b00 [ 2934.094974] ? lock_chain_count+0x20/0x20 [ 2934.095406] ? perf_trace_lock+0xac/0x490 [ 2934.095759] ? SOFTIRQ_verbose+0x10/0x10 [ 2934.096152] ? __lockdep_reset_lock+0x180/0x180 [ 2934.096563] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2934.096974] ? udp_v6_push_pending_frames+0x360/0x360 [ 2934.097411] ? SOFTIRQ_verbose+0x10/0x10 [ 2934.097763] ? mark_lock+0xf5/0x2df0 [ 2934.098161] ? lock_acquire+0x197/0x470 [ 2934.098500] ? find_held_lock+0x2c/0x110 [ 2934.098897] ? __might_fault+0xd3/0x180 [ 2934.099258] ? lock_downgrade+0x6d0/0x6d0 [ 2934.099657] ? lock_downgrade+0x6d0/0x6d0 [ 2934.100099] ? sock_has_perm+0x1ea/0x280 [ 2934.100485] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2934.101025] ? _copy_from_user+0xfb/0x1b0 [ 2934.101440] ? __import_iovec+0x458/0x590 [ 2934.101915] ? udp_v6_push_pending_frames+0x360/0x360 [ 2934.102410] inet6_sendmsg+0x105/0x140 [ 2934.102781] ? inet6_compat_ioctl+0x320/0x320 [ 2934.103268] __sock_sendmsg+0xf2/0x190 [ 2934.103640] ____sys_sendmsg+0x70d/0x870 [ 2934.104078] ? sock_write_iter+0x3d0/0x3d0 [ 2934.104476] ? do_recvmmsg+0x6d0/0x6d0 [ 2934.104930] ? SOFTIRQ_verbose+0x10/0x10 [ 2934.105314] ? lock_downgrade+0x6d0/0x6d0 [ 2934.105711] ? __lockdep_reset_lock+0x180/0x180 [ 2934.106196] ? SOFTIRQ_verbose+0x10/0x10 [ 2934.106589] ___sys_sendmsg+0xf3/0x170 [ 2934.107013] ? sendmsg_copy_msghdr+0x160/0x160 [ 2934.107464] ? __fget_files+0x2cf/0x520 [ 2934.107890] ? lock_downgrade+0x6d0/0x6d0 [ 2934.108293] ? find_held_lock+0x2c/0x110 [ 2934.108700] ? __fget_files+0x2f8/0x520 [ 2934.109136] ? __fget_light+0xea/0x290 [ 2934.109518] __sys_sendmsg+0xe5/0x1b0 [ 2934.109958] ? __sys_sendmsg_sock+0x40/0x40 [ 2934.110367] ? rcu_read_lock_any_held+0x75/0xa0 [ 2934.110875] do_syscall_64+0x33/0x40 [ 2934.111252] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2934.111734] RIP: 0033:0x7fa05acd5b19 [ 2934.112161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2934.113988] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2934.114704] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2934.115425] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2934.116146] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2934.116858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2934.117534] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:05:28 executing program 5: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:05:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:05:28 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2934.231054] audit: type=1326 audit(1724245528.898:370): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=34978 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae705cb19 code=0x7ffc0000 13:05:28 executing program 6: socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x1, 0x0, [0x0]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='fd\x00') getdents64(r1, &(0x7f0000001280)=""/192, 0xc0) syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c696f726861727365743d75ff66382c666f775f65723db2e8d8615dd3fb8f526d5907b966a0353239a54a8556", @ANYRES64=r1, @ANYBLOB="2c616970873993e573fc00015d633d4d4d412f13505f434847434b2c7569", @ANYRESDEC]) [ 2934.234227] audit: type=1326 audit(1724245528.901:371): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=34978 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae705cb19 code=0x7ffc0000 [ 2934.241049] audit: type=1326 audit(1724245528.908:372): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=34978 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9ae705cb19 code=0x7ffc0000 [ 2934.245457] audit: type=1326 audit(1724245528.910:373): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=34978 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae705cb19 code=0x7ffc0000 [ 2934.253154] audit: type=1326 audit(1724245528.917:374): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=34978 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ae705cb19 code=0x7ffc0000 [ 2934.262700] audit: type=1326 audit(1724245528.917:375): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=34978 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae705cb19 code=0x7ffc0000 [ 2934.285535] audit: type=1326 audit(1724245528.918:376): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=34978 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae705cb19 code=0x7ffc0000 [ 2934.299251] audit: type=1326 audit(1724245528.918:377): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=34978 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae705cb19 code=0x7ffc0000 [ 2934.305515] audit: type=1326 audit(1724245528.935:378): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=34978 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ae705cb19 code=0x7ffc0000 [ 2934.309155] audit: type=1326 audit(1724245528.935:379): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=34978 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae705cb19 code=0x7ffc0000 13:05:29 executing program 3: r0 = clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) r2 = eventfd(0x6) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x4040000) r4 = syz_io_uring_complete(0x0) io_uring_enter(r3, 0x630a, 0xce52, 0x2, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x2c0, r5}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r2, &(0x7f0000000000)={r3, r6, 0x80000001}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r7, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:05:29 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) tee(0xffffffffffffffff, r0, 0x2, 0x2) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 13:05:29 executing program 5: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:05:29 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0x0}}, './file2\x00'}) chown(&(0x7f0000000040)='./file0\x00', 0x0, r1) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000180), 0x24, 0x0) mkdirat(r0, &(0x7f0000000240)='./file2\x00', 0x0) 13:05:29 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 71) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:05:29 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2934.635116] FAULT_INJECTION: forcing a failure. [ 2934.635116] name failslab, interval 1, probability 0, space 0, times 0 [ 2934.636207] CPU: 0 PID: 35544 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2934.636788] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2934.637551] Call Trace: [ 2934.637794] dump_stack+0x107/0x167 [ 2934.638165] should_fail.cold+0x5/0xa [ 2934.638511] should_failslab+0x5/0x20 [ 2934.638892] __kmalloc_node_track_caller+0x74/0x3b0 [ 2934.639341] ? skb_segment+0x9d8/0x3aa0 [ 2934.639698] __alloc_skb+0xb1/0x5b0 [ 2934.640076] skb_segment+0x9d8/0x3aa0 [ 2934.640477] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2934.640984] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2934.641433] ? SOFTIRQ_verbose+0x10/0x10 [ 2934.641795] __udp_gso_segment+0x11c6/0x1830 [ 2934.642220] ? __sk_receive_skb+0x830/0x830 [ 2934.642609] udp4_ufo_fragment+0x528/0x720 [ 2934.643027] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2934.643472] inet_gso_segment+0x4fb/0x11a0 [ 2934.643913] skb_mac_gso_segment+0x273/0x570 [ 2934.644294] ? inet_sock_destruct+0x840/0x840 [ 2934.644679] ? skb_network_protocol+0x650/0x650 [ 2934.645141] ? skb_crc32c_csum_help+0x80/0x80 [ 2934.645528] ? lock_acquire+0x197/0x470 [ 2934.645919] ? __dev_queue_xmit+0x1c2/0x2710 [ 2934.646319] __skb_gso_segment+0x32d/0x6d0 [ 2934.646695] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2934.647201] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2934.647606] __dev_queue_xmit+0x87b/0x2710 [ 2934.648041] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2934.648469] ? mark_held_locks+0x9e/0xe0 [ 2934.648902] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2934.649361] neigh_connected_output+0x382/0x4d0 [ 2934.649785] ip_finish_output2+0x6f1/0x21f0 [ 2934.650211] ? nf_hook_slow+0xfc/0x1e0 [ 2934.650552] ? ip_frag_next+0x9e0/0x9e0 [ 2934.650944] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2934.651410] __ip_finish_output.part.0+0x5f3/0xb50 [ 2934.651882] ? ip_fragment.constprop.0+0x240/0x240 [ 2934.652299] ? nf_hook+0x510/0x510 [ 2934.652626] ip_output+0x2f7/0x600 [ 2934.653016] ip_send_skb+0xdd/0x260 [ 2934.653341] udp_send_skb+0x6da/0x11d0 [ 2934.653698] udp_sendmsg+0x139a/0x2160 [ 2934.654083] ? tracing_generic_entry_update+0x1ed/0x270 [ 2934.654542] ? ip_frag_init+0x350/0x350 [ 2934.654931] ? tracing_generic_entry_update+0x1ed/0x270 [ 2934.655419] ? udp_setsockopt+0xc0/0xc0 [ 2934.655768] ? perf_event_switch_output+0x7d0/0x7d0 [ 2934.656270] ? lock_chain_count+0x20/0x20 [ 2934.656631] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2934.657128] ? lock_chain_count+0x20/0x20 [ 2934.657485] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2934.657971] ? perf_trace_lock+0x2bd/0x490 [ 2934.658336] ? perf_swevent_event+0x6c/0x550 [ 2934.658711] ? __lockdep_reset_lock+0x180/0x180 [ 2934.659186] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2934.659546] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2934.660037] ? udp_v6_push_pending_frames+0x360/0x360 [ 2934.660478] ? SOFTIRQ_verbose+0x10/0x10 [ 2934.660901] ? lock_acquire+0x197/0x470 [ 2934.661245] ? find_held_lock+0x2c/0x110 [ 2934.661607] ? __might_fault+0xd3/0x180 [ 2934.662021] ? lock_downgrade+0x6d0/0x6d0 [ 2934.662387] ? lock_downgrade+0x6d0/0x6d0 [ 2934.662750] ? sock_has_perm+0x1ea/0x280 [ 2934.663155] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2934.663613] ? _copy_from_user+0xfb/0x1b0 [ 2934.664042] ? __import_iovec+0x458/0x590 [ 2934.664402] ? udp_v6_push_pending_frames+0x360/0x360 [ 2934.664903] inet6_sendmsg+0x105/0x140 [ 2934.665246] ? inet6_compat_ioctl+0x320/0x320 [ 2934.665633] __sock_sendmsg+0xf2/0x190 [ 2934.666020] ____sys_sendmsg+0x70d/0x870 [ 2934.666383] ? sock_write_iter+0x3d0/0x3d0 [ 2934.666747] ? do_recvmmsg+0x6d0/0x6d0 [ 2934.667163] ? perf_trace_lock+0x2bd/0x490 [ 2934.667539] ? SOFTIRQ_verbose+0x10/0x10 [ 2934.667943] ? __lockdep_reset_lock+0x180/0x180 [ 2934.668356] ___sys_sendmsg+0xf3/0x170 [ 2934.668699] ? sendmsg_copy_msghdr+0x160/0x160 [ 2934.669151] ? __fget_files+0x2cf/0x520 [ 2934.669500] ? lock_downgrade+0x6d0/0x6d0 [ 2934.669910] ? find_held_lock+0x2c/0x110 [ 2934.670286] ? __fget_files+0x2f8/0x520 [ 2934.670647] ? __fget_light+0xea/0x290 [ 2934.671068] __sys_sendmsg+0xe5/0x1b0 [ 2934.671412] ? __sys_sendmsg_sock+0x40/0x40 [ 2934.671784] ? rcu_read_lock_any_held+0x75/0xa0 [ 2934.672276] do_syscall_64+0x33/0x40 [ 2934.672603] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2934.673085] RIP: 0033:0x7fa05acd5b19 [ 2934.673413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2934.675240] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2934.675960] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2934.676556] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2934.677193] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2934.677787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2934.678424] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:05:49 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=';*\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000fbdbdf250f000000080004000600000008000500ce00000008000500020000000c00028008000800ffff0000080005002a000000"], 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x14) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8000, 0x1, 0x0, 0x0, 0x61f0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='{\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/consoles\x00', 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x101040, 0x112, 0xa}, &(0x7f0000000280)='./file1\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r4}}, 0x3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x80010, 0xffffffffffffffff, 0x10000000) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x14201, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x101040, 0x112, 0xa}, &(0x7f0000000280)='./file1\x00', 0x18}, 0xffffffff) sendfile(r2, r3, 0x0, 0xffe3) 13:05:49 executing program 6: r0 = epoll_create1(0x0) r1 = epoll_create(0x6) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x40000001}) epoll_create(0xffffff7f) 13:05:49 executing program 5: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:05:49 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x4101, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r2 = socket$inet(0x2, 0x800, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r3, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r7 = syz_io_uring_setup(0x330f, &(0x7f0000000500)={0x0, 0x3252, 0x19, 0x2, 0x1b4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd=r7, 0x9d, 0x0, 0x2400000}, 0x0) r8 = accept4$unix(r1, 0x0, &(0x7f0000000180), 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r8, 0x0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="d68186f3d69a6db8c07e51e749d704472875f7", 0x13}, {&(0x7f0000000200)="7124b9f542844bc502d07a", 0xb}, {&(0x7f00000002c0)="542196d74b100c85265c7ef84b72e06e", 0x10}, {&(0x7f0000000300)="b2d80784e0334056b55606076fb8b124bac415fbea83b70b256af91b6e70f3e8bfb91764f078b7a234eedfac6583dc377d34205bc7429017ef9f404ecf53fec1c5f8fff8269f9fb8bd8763de544a4fa6ecf6b7d289955c1ed3db18fd38ef846cae929af63df4bbd8847ca5596301bcc47a9e45cbb0d46a4927656578bf", 0x7d}], 0x4}, 0x0, 0x10, 0x1}, 0xfffffc4e) r9 = syz_io_uring_complete(0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="0929fdff652f0d49907f2762274389ec2acd3b8ee6e82235a4d00740a955a13ca7684b7d1bb170589335d7be18d8ee649b8a30b6021f93eb20fe6e8ab3d04ccca8c45c98313bc6cdd995665aea469d5995b9693194d691a5aceb1959f3381eb4af8185ca44caa43c6f9ea9b7833c5ea7d61474124946f79a50e9a5504172e491bf8d3c23d562e9d71c8998", @ANYRES16=r10, @ANYBLOB="000228bd7000ffdbdf2501000000050038000000000008000b000400000008000b0000fcffff08002b0009000000"], 0x34}, 0x1, 0x0, 0x0, 0x80c5}, 0x0) 13:05:49 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)=""/216, 0xd8}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2, &(0x7f00000001c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x400100a0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="2801516c", @ANYRES16=0x0, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004044) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r3, 0x4, 0xc00) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x1, {0x0, r6}}, 0x92) r7 = dup(r2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x6, 0x2, 0x1, {0x0, r6, r7}}, 0x7) syz_genetlink_get_family_id$devlink(0x0, r0) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffff937}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) 13:05:49 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:05:49 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 72) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:05:49 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) [ 2954.995400] FAULT_INJECTION: forcing a failure. [ 2954.995400] name failslab, interval 1, probability 0, space 0, times 0 [ 2954.996765] CPU: 1 PID: 35636 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2954.997438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2954.998219] Call Trace: [ 2954.998472] dump_stack+0x107/0x167 [ 2954.998878] should_fail.cold+0x5/0xa [ 2954.999243] ? create_object.isra.0+0x3a/0xa20 [ 2954.999686] should_failslab+0x5/0x20 [ 2955.000087] kmem_cache_alloc+0x5b/0x310 [ 2955.000990] create_object.isra.0+0x3a/0xa20 [ 2955.001730] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2955.003005] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2955.004115] ? skb_segment+0x9d8/0x3aa0 [ 2955.004993] __alloc_skb+0xb1/0x5b0 [ 2955.005990] skb_segment+0x9d8/0x3aa0 [ 2955.006903] ? lock_chain_count+0x20/0x20 [ 2955.008050] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2955.009143] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2955.010284] ? SOFTIRQ_verbose+0x10/0x10 [ 2955.011174] __udp_gso_segment+0x11c6/0x1830 [ 2955.012339] ? __sk_receive_skb+0x830/0x830 [ 2955.013482] udp4_ufo_fragment+0x528/0x720 [ 2955.014656] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2955.015872] inet_gso_segment+0x4fb/0x11a0 [ 2955.017099] skb_mac_gso_segment+0x273/0x570 [ 2955.018343] ? inet_sock_destruct+0x840/0x840 [ 2955.019637] ? skb_network_protocol+0x650/0x650 [ 2955.020939] ? skb_crc32c_csum_help+0x80/0x80 [ 2955.022181] ? lock_acquire+0x197/0x470 [ 2955.023267] ? __dev_queue_xmit+0x1c2/0x2710 [ 2955.024500] __skb_gso_segment+0x32d/0x6d0 [ 2955.025749] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2955.027320] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2955.028583] __dev_queue_xmit+0x87b/0x2710 [ 2955.029842] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2955.031239] ? mark_held_locks+0x9e/0xe0 [ 2955.032984] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2955.034483] neigh_connected_output+0x382/0x4d0 [ 2955.036021] ip_finish_output2+0x6f1/0x21f0 [ 2955.037367] ? nf_hook_slow+0xfc/0x1e0 [ 2955.038417] ? ip_frag_next+0x9e0/0x9e0 [ 2955.039625] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2955.041238] __ip_finish_output.part.0+0x5f3/0xb50 [ 2955.042567] ? ip_fragment.constprop.0+0x240/0x240 [ 2955.043868] ? nf_hook+0x510/0x510 [ 2955.044969] ip_output+0x2f7/0x600 [ 2955.045892] ip_send_skb+0xdd/0x260 [ 2955.047046] udp_send_skb+0x6da/0x11d0 [ 2955.048260] udp_sendmsg+0x139a/0x2160 [ 2955.049254] ? mark_lock+0xf5/0x2df0 [ 2955.050362] ? ip_frag_init+0x350/0x350 [ 2955.051454] ? lock_chain_count+0x20/0x20 [ 2955.052712] ? udp_setsockopt+0xc0/0xc0 [ 2955.053867] ? mark_lock+0xf5/0x2df0 [ 2955.054989] ? __lockdep_reset_lock+0x180/0x180 [ 2955.056285] ? lock_chain_count+0x20/0x20 [ 2955.057598] ? mark_lock+0xf5/0x2df0 [ 2955.058602] ? mark_lock+0xf5/0x2df0 [ 2955.059746] ? lock_chain_count+0x20/0x20 [ 2955.061027] ? __lock_acquire+0xbb1/0x5b00 [ 2955.062352] ? lock_chain_count+0x20/0x20 [ 2955.063428] ? perf_trace_lock+0xac/0x490 [ 2955.064486] ? SOFTIRQ_verbose+0x10/0x10 [ 2955.065717] ? __lockdep_reset_lock+0x180/0x180 [ 2955.067138] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2955.068415] ? udp_v6_push_pending_frames+0x360/0x360 [ 2955.069718] ? SOFTIRQ_verbose+0x10/0x10 [ 2955.070762] ? mark_lock+0xf5/0x2df0 [ 2955.071838] ? lock_acquire+0x197/0x470 [ 2955.072953] ? find_held_lock+0x2c/0x110 [ 2955.074196] ? __might_fault+0xd3/0x180 [ 2955.075401] ? lock_downgrade+0x6d0/0x6d0 [ 2955.076484] ? lock_downgrade+0x6d0/0x6d0 [ 2955.077741] ? sock_has_perm+0x1ea/0x280 [ 2955.078971] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2955.080620] ? _copy_from_user+0xfb/0x1b0 [ 2955.085206] ? __import_iovec+0x458/0x590 [ 2955.086448] ? udp_v6_push_pending_frames+0x360/0x360 [ 2955.088137] inet6_sendmsg+0x105/0x140 [ 2955.089236] ? inet6_compat_ioctl+0x320/0x320 [ 2955.090374] __sock_sendmsg+0xf2/0x190 [ 2955.091380] ____sys_sendmsg+0x70d/0x870 [ 2955.092612] ? sock_write_iter+0x3d0/0x3d0 [ 2955.093917] ? do_recvmmsg+0x6d0/0x6d0 [ 2955.094992] ? SOFTIRQ_verbose+0x10/0x10 [ 2955.096258] ? lock_downgrade+0x6d0/0x6d0 [ 2955.097307] ? __lockdep_reset_lock+0x180/0x180 [ 2955.098495] ? SOFTIRQ_verbose+0x10/0x10 [ 2955.099743] ___sys_sendmsg+0xf3/0x170 [ 2955.100946] ? sendmsg_copy_msghdr+0x160/0x160 [ 2955.102341] ? __fget_files+0x2cf/0x520 [ 2955.103432] ? lock_downgrade+0x6d0/0x6d0 [ 2955.104478] ? find_held_lock+0x2c/0x110 [ 2955.105512] ? __fget_files+0x2f8/0x520 [ 2955.106602] ? __fget_light+0xea/0x290 [ 2955.107621] __sys_sendmsg+0xe5/0x1b0 [ 2955.108613] ? __sys_sendmsg_sock+0x40/0x40 [ 2955.109695] ? rcu_read_lock_any_held+0x75/0xa0 [ 2955.111138] do_syscall_64+0x33/0x40 [ 2955.112375] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2955.113884] RIP: 0033:0x7fa05acd5b19 [ 2955.114834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2955.119665] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2955.121784] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2955.123787] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2955.125939] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2955.127939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2955.129694] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:05:49 executing program 1: r0 = clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) socketpair(0x2b, 0x3, 0xff, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x81) kcmp(r0, r0, 0x4, r4, r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000bfc971839ac477b5556b778128ae14b09dc1959c74bc88f9bf4f748b5f05c3c67a0e04c915bd544daef0244c740723f6efcf56fc2580303fbf75fe2c031a9c66d7abda0f05683d9aae7687cf4ae2f4611beece798ccfec2aaf8a1a6385e353829780", @ANYRES16=0x0, @ANYBLOB="100026bd7000fcdbdf250c0000000500350003000000050038ae2300dfff05002a000000000005ff07000000000000a8fb41f0"], 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x10) 13:05:49 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:05:50 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:05:50 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000000)=[{0x0, 0xffffffffffffffd6, 0x80000001}, {&(0x7f0000000300)="9b291a8cff0611452983449d5d5ee8", 0xf, 0x100002}], 0x8401, &(0x7f0000000a40)={[], [{@uid_eq}]}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x210101, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000000c0)='\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) signalfd(r0, &(0x7f0000000040)={[0x5]}, 0x8) r2 = fsmount(r1, 0x1, 0x1) openat(r2, &(0x7f00000001c0)='./file1\x00', 0x44000, 0x140) 13:05:50 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x12b080, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$DVD_AUTH(r2, 0x5390, &(0x7f0000000100)=@lsc={0x3, 0x3, "fe336462a38371881614"}) getsockopt(r4, 0xff, 0x1, 0x0, &(0x7f0000000000)=0xfffffffffffffdee) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000076c201cfa6ef31d30241e5995200210e000000000000007f00000000"], 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040)={0xc}) 13:05:50 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x49, 0x0, "a1434d16d9010000004ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4c00) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x1, 0xac, 0x2, 0x0, 0x7ad4, 0x23005, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x20, 0x3, 0x8, 0x4, 0x2, 0xffffffff, 0x74, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0x3, r2, 0x0) signalfd(r3, &(0x7f0000000180)={[0xfffffffffffffffe]}, 0x8) 13:05:50 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) [ 2955.703272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49782 sclass=netlink_route_socket pid=36064 comm=syz-executor.3 13:06:08 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:06:08 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:06:08 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_genetlink_get_family_id$devlink(0x0, r0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:06:08 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:06:08 executing program 1: sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4000082) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) ioctl$FICLONE(r0, 0x40049409, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5390, &(0x7f0000000940)=@type=0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:06:08 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f00000001c0)='>') ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x60092, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',smackfshat=(,\x00']) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1820, &(0x7f0000000300)=ANY=[@ANYBLOB="6370757e8de92c9f14ac507539616363742c78617474722c78617474722c6370757365745f76325f6d6f64652c7365636c6162656c2c7569643d1412a0d302fad552c5a46cc2070bf7c0c0b5376ced97de0648e54f1f7f357033f84b9550e3fa5fe4", @ANYRESDEC=0x0, @ANYBLOB=',subj_user=smackfshat,context=sysadm_u,\x00']) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='cpuacct') r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000240)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xffffffff}}) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x8) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000480)=ANY=[@ANYBLOB="0110000000000000000000003733a89176c2ef7160d25b1df5023b391c93913ea7844e97393a4d09de5e0ee72e98adf0cbc121c28c7da361b9abc49d7bc9c9185766cb64fd127e4d3878e7a478b075b8e94ec5779ff11fcd9baba7ed4feb476073a5fd621c1ade37782fd6653ea4b401dcfb36baf53d41", @ANYRES32=r0, @ANYBLOB="eae92749000000002e2f66696c653000"]) 13:06:08 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 73) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:06:08 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) shutdown(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001880)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x4040000) socket$inet6_tcp(0xa, 0x1, 0x0) 13:06:09 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffa, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000ffb000/0x4000)=nil], &(0x7f00000003c0), &(0x7f0000000000)=[0x0], 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x48240, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r2 = dup2(r0, r1) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) [ 2974.498753] FAULT_INJECTION: forcing a failure. [ 2974.498753] name failslab, interval 1, probability 0, space 0, times 0 [ 2974.512558] CPU: 0 PID: 36288 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2974.513190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2974.513962] Call Trace: [ 2974.514228] dump_stack+0x107/0x167 [ 2974.514590] should_fail.cold+0x5/0xa [ 2974.514978] should_failslab+0x5/0x20 [ 2974.515352] __kmalloc_node_track_caller+0x74/0x3b0 [ 2974.515834] ? skb_segment+0x9d8/0x3aa0 [ 2974.516222] __alloc_skb+0xb1/0x5b0 [ 2974.516594] skb_segment+0x9d8/0x3aa0 [ 2974.517040] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2974.517509] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2974.517995] ? SOFTIRQ_verbose+0x10/0x10 [ 2974.518384] __udp_gso_segment+0x11c6/0x1830 [ 2974.518780] ? __sk_receive_skb+0x830/0x830 [ 2974.519194] udp4_ufo_fragment+0x528/0x720 [ 2974.519610] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2974.520078] inet_gso_segment+0x4fb/0x11a0 [ 2974.520497] skb_mac_gso_segment+0x273/0x570 [ 2974.520897] ? inet_sock_destruct+0x840/0x840 [ 2974.521303] ? skb_network_protocol+0x650/0x650 [ 2974.521719] ? skb_crc32c_csum_help+0x80/0x80 [ 2974.522130] ? lock_acquire+0x197/0x470 [ 2974.522491] ? __dev_queue_xmit+0x1c2/0x2710 [ 2974.522905] __skb_gso_segment+0x32d/0x6d0 [ 2974.523306] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2974.523801] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2974.524239] __dev_queue_xmit+0x87b/0x2710 [ 2974.524662] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2974.525110] ? mark_held_locks+0x9e/0xe0 [ 2974.525505] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2974.525998] neigh_connected_output+0x382/0x4d0 [ 2974.526456] ip_finish_output2+0x6f1/0x21f0 [ 2974.526864] ? nf_hook_slow+0xfc/0x1e0 [ 2974.527230] ? ip_frag_next+0x9e0/0x9e0 [ 2974.527925] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2974.529095] __ip_finish_output.part.0+0x5f3/0xb50 [ 2974.530202] ? ip_fragment.constprop.0+0x240/0x240 [ 2974.531320] ? nf_hook+0x510/0x510 [ 2974.547920] ip_output+0x2f7/0x600 [ 2974.548283] ip_send_skb+0xdd/0x260 [ 2974.548638] udp_send_skb+0x6da/0x11d0 [ 2974.549044] udp_sendmsg+0x139a/0x2160 [ 2974.549422] ? tracing_generic_entry_update+0x1ed/0x270 [ 2974.549930] ? ip_frag_init+0x350/0x350 [ 2974.550313] ? tracing_generic_entry_update+0x1ed/0x270 [ 2974.550827] ? udp_setsockopt+0xc0/0xc0 [ 2974.551220] ? perf_event_switch_output+0x7d0/0x7d0 [ 2974.551740] ? lock_chain_count+0x20/0x20 [ 2974.552131] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2974.552605] ? lock_chain_count+0x20/0x20 [ 2974.552999] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2974.553494] ? perf_trace_lock+0x2bd/0x490 [ 2974.553905] ? perf_swevent_event+0x6c/0x550 [ 2974.554321] ? __lockdep_reset_lock+0x180/0x180 [ 2974.554785] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2974.555185] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2974.555689] ? udp_v6_push_pending_frames+0x360/0x360 [ 2974.556179] ? SOFTIRQ_verbose+0x10/0x10 [ 2974.556610] ? lock_acquire+0x197/0x470 [ 2974.556992] ? find_held_lock+0x2c/0x110 [ 2974.557398] ? __might_fault+0xd3/0x180 [ 2974.557780] ? lock_downgrade+0x6d0/0x6d0 [ 2974.558179] ? lock_downgrade+0x6d0/0x6d0 [ 2974.558568] ? sock_has_perm+0x1ea/0x280 [ 2974.558947] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2974.559430] ? _copy_from_user+0xfb/0x1b0 [ 2974.574169] ? __import_iovec+0x458/0x590 [ 2974.574622] ? udp_v6_push_pending_frames+0x360/0x360 [ 2974.575184] inet6_sendmsg+0x105/0x140 [ 2974.575612] ? inet6_compat_ioctl+0x320/0x320 [ 2974.576094] __sock_sendmsg+0xf2/0x190 [ 2974.576519] ____sys_sendmsg+0x70d/0x870 [ 2974.576963] ? sock_write_iter+0x3d0/0x3d0 [ 2974.577415] ? do_recvmmsg+0x6d0/0x6d0 [ 2974.577834] ? perf_trace_lock+0x2bd/0x490 [ 2974.578292] ? SOFTIRQ_verbose+0x10/0x10 [ 2974.578741] ? __lockdep_reset_lock+0x180/0x180 [ 2974.579251] ___sys_sendmsg+0xf3/0x170 [ 2974.579684] ? sendmsg_copy_msghdr+0x160/0x160 [ 2974.580181] ? __fget_files+0x2cf/0x520 [ 2974.580608] ? lock_downgrade+0x6d0/0x6d0 [ 2974.581058] ? find_held_lock+0x2c/0x110 [ 2974.581522] ? __fget_files+0x2f8/0x520 [ 2974.581972] ? __fget_light+0xea/0x290 [ 2974.582412] __sys_sendmsg+0xe5/0x1b0 [ 2974.582829] ? __sys_sendmsg_sock+0x40/0x40 [ 2974.583290] ? rcu_read_lock_any_held+0x75/0xa0 [ 2974.583851] do_syscall_64+0x33/0x40 [ 2974.584255] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2974.584800] RIP: 0033:0x7fa05acd5b19 [ 2974.585201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2974.587121] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2974.588510] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2974.590194] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2974.591901] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2974.593585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2974.595271] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:06:09 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:06:09 executing program 6: syz_open_dev$sg(0x0, 0x0, 0x2001) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0xfffffffffffffffe, 0xb35c) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd, 0x2003}, 0x4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x125000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000640)=@x25}, 0x6) close(0xffffffffffffffff) accept4(0xffffffffffffffff, &(0x7f0000000540)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x0) mount$cgroup(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x1000c04, &(0x7f00000005c0)={[{@subsystem='cpu'}, {@xattr}], [{@dont_appraise}, {@euid_gt}, {@pcr={'pcr', 0x3d, 0x30}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@seclabel}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000340)=ANY=[@ANYBLOB="0102000001000000185e2409fdf9a4358333f68a01000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) 13:06:09 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:06:09 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 74) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:06:09 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r1 = socket$inet(0x2, 0x6, 0x6) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:06:09 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000520700000000009b7e9e873d73fd1500"], 0x14}}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'ip6_vti0\x00', {0x2, 0x0, @private}}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x110, r3, 0xa3316000) [ 2974.890163] kauditd_printk_skb: 18 callbacks suppressed [ 2974.890223] audit: type=1326 audit(1724245569.557:398): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=36598 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbe8a2b19 code=0x7ffc0000 [ 2974.894816] audit: type=1326 audit(1724245569.558:399): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=36598 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7cbe8a2b19 code=0x7ffc0000 [ 2974.897148] audit: type=1326 audit(1724245569.561:400): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=36598 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7cbe8a2b62 code=0x7ffc0000 [ 2974.905420] audit: type=1326 audit(1724245569.562:401): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=36598 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7cbe8a2b62 code=0x7ffc0000 [ 2974.928039] audit: type=1326 audit(1724245569.568:402): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=36598 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbe8a2b19 code=0x7ffc0000 [ 2974.938996] audit: type=1326 audit(1724245569.573:403): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=36598 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbe8a2b19 code=0x7ffc0000 13:06:09 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f00000033c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x17, 0x300, 0x70bd2c, 0x25dfdbff, {0x18}, [@typed={0x4, 0xf}, @typed={0x5, 0x38, 0x0, 0x0, @str='\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@alg, 0x80, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/143, 0x8f}, {&(0x7f0000000780)=""/148, 0x94}, {&(0x7f0000000840)=""/108, 0x8f}, {&(0x7f0000000900)=""/89, 0x59}, {&(0x7f0000000980)=""/144, 0x90}, {&(0x7f0000000a40)=""/199, 0xc7}], 0x7, &(0x7f0000000cc0)=""/254, 0xfe}, 0x0, 0x40010122, 0x8723e832f4fe10f5, {0x0, r4}}, 0x0) syz_io_uring_setup(0x368c, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) io_uring_register$IORING_UNREGISTER_EVENTFD(r6, 0x5, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2974.950416] audit: type=1326 audit(1724245569.573:404): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=36598 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7cbe8a2b19 code=0x7ffc0000 [ 2974.976104] audit: type=1326 audit(1724245569.575:405): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=36598 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbe8a2b19 code=0x7ffc0000 [ 2974.981131] audit: type=1326 audit(1724245569.581:406): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=36598 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbe8a2b19 code=0x7ffc0000 [ 2974.983150] audit: type=1326 audit(1724245569.581:407): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=36598 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7cbe8a2b19 code=0x7ffc0000 [ 2975.022833] FAULT_INJECTION: forcing a failure. [ 2975.022833] name failslab, interval 1, probability 0, space 0, times 0 [ 2975.023945] CPU: 0 PID: 36674 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2975.024597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2975.025303] Call Trace: [ 2975.025544] dump_stack+0x107/0x167 [ 2975.025869] should_fail.cold+0x5/0xa [ 2975.026205] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2975.026660] ? create_object.isra.0+0x3a/0xa20 [ 2975.027060] should_failslab+0x5/0x20 [ 2975.027396] kmem_cache_alloc+0x5b/0x310 [ 2975.027802] ? mark_held_locks+0x9e/0xe0 [ 2975.028164] create_object.isra.0+0x3a/0xa20 [ 2975.028543] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2975.028988] kmem_cache_alloc_node+0x169/0x330 [ 2975.029396] __alloc_skb+0x6d/0x5b0 [ 2975.029724] skb_segment+0x9d8/0x3aa0 [ 2975.030124] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2975.030557] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2975.031008] ? SOFTIRQ_verbose+0x10/0x10 [ 2975.031375] __udp_gso_segment+0x11c6/0x1830 [ 2975.031773] ? __sk_receive_skb+0x830/0x830 [ 2975.032166] udp4_ufo_fragment+0x528/0x720 [ 2975.032542] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2975.032976] inet_gso_segment+0x4fb/0x11a0 [ 2975.033370] skb_mac_gso_segment+0x273/0x570 [ 2975.033841] ? inet_sock_destruct+0x840/0x840 [ 2975.034230] ? skb_network_protocol+0x650/0x650 [ 2975.034630] ? skb_crc32c_csum_help+0x80/0x80 [ 2975.035021] ? lock_acquire+0x197/0x470 [ 2975.035365] ? __dev_queue_xmit+0x1c2/0x2710 [ 2975.035790] __skb_gso_segment+0x32d/0x6d0 [ 2975.036169] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2975.036623] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2975.037034] __dev_queue_xmit+0x87b/0x2710 [ 2975.037426] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2975.037860] ? mark_held_locks+0x9e/0xe0 [ 2975.038221] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2975.038683] neigh_connected_output+0x382/0x4d0 [ 2975.039107] ip_finish_output2+0x6f1/0x21f0 [ 2975.039487] ? nf_hook_slow+0xfc/0x1e0 [ 2975.039837] ? ip_frag_next+0x9e0/0x9e0 [ 2975.040183] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2975.040637] __ip_finish_output.part.0+0x5f3/0xb50 [ 2975.041063] ? ip_fragment.constprop.0+0x240/0x240 [ 2975.041481] ? nf_hook+0x510/0x510 [ 2975.041810] ip_output+0x2f7/0x600 [ 2975.042131] ip_send_skb+0xdd/0x260 [ 2975.042457] udp_send_skb+0x6da/0x11d0 [ 2975.042816] udp_sendmsg+0x139a/0x2160 [ 2975.043155] ? tracing_generic_entry_update+0x1ed/0x270 [ 2975.043675] ? ip_frag_init+0x350/0x350 [ 2975.044022] ? tracing_generic_entry_update+0x1ed/0x270 [ 2975.044490] ? udp_setsockopt+0xc0/0xc0 [ 2975.044840] ? perf_event_switch_output+0x7d0/0x7d0 [ 2975.045299] ? lock_chain_count+0x20/0x20 [ 2975.045661] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2975.046089] ? lock_chain_count+0x20/0x20 [ 2975.046445] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2975.046886] ? perf_trace_lock+0x2bd/0x490 [ 2975.047251] ? perf_swevent_event+0x6c/0x550 [ 2975.047657] ? __lockdep_reset_lock+0x180/0x180 [ 2975.048081] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2975.048439] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2975.048886] ? udp_v6_push_pending_frames+0x360/0x360 [ 2975.049328] ? SOFTIRQ_verbose+0x10/0x10 [ 2975.049705] ? lock_acquire+0x197/0x470 [ 2975.050047] ? find_held_lock+0x2c/0x110 [ 2975.050412] ? __might_fault+0xd3/0x180 [ 2975.050758] ? lock_downgrade+0x6d0/0x6d0 [ 2975.051122] ? lock_downgrade+0x6d0/0x6d0 [ 2975.051485] ? sock_has_perm+0x1ea/0x280 [ 2975.051857] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2975.052309] ? _copy_from_user+0xfb/0x1b0 [ 2975.052692] ? __import_iovec+0x458/0x590 [ 2975.053053] ? udp_v6_push_pending_frames+0x360/0x360 [ 2975.053512] inet6_sendmsg+0x105/0x140 [ 2975.053853] ? inet6_compat_ioctl+0x320/0x320 [ 2975.054241] __sock_sendmsg+0xf2/0x190 [ 2975.054586] ____sys_sendmsg+0x70d/0x870 [ 2975.054947] ? sock_write_iter+0x3d0/0x3d0 [ 2975.055311] ? do_recvmmsg+0x6d0/0x6d0 [ 2975.055667] ? perf_trace_lock+0x2bd/0x490 [ 2975.056041] ? SOFTIRQ_verbose+0x10/0x10 [ 2975.056402] ? __lockdep_reset_lock+0x180/0x180 [ 2975.056816] ___sys_sendmsg+0xf3/0x170 [ 2975.057160] ? sendmsg_copy_msghdr+0x160/0x160 [ 2975.057566] ? __fget_files+0x2cf/0x520 [ 2975.057914] ? lock_downgrade+0x6d0/0x6d0 [ 2975.058277] ? find_held_lock+0x2c/0x110 [ 2975.058657] ? __fget_files+0x2f8/0x520 [ 2975.059020] ? __fget_light+0xea/0x290 [ 2975.059377] __sys_sendmsg+0xe5/0x1b0 [ 2975.059724] ? __sys_sendmsg_sock+0x40/0x40 [ 2975.060101] ? rcu_read_lock_any_held+0x75/0xa0 [ 2975.060551] do_syscall_64+0x33/0x40 [ 2975.060874] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2975.061310] RIP: 0033:0x7fa05acd5b19 [ 2975.061633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2975.063159] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2975.063825] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2975.064428] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2975.065027] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2975.065626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2975.066226] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:06:09 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 2975.375455] FAULT_INJECTION: forcing a failure. [ 2975.375455] name failslab, interval 1, probability 0, space 0, times 0 [ 2975.377211] CPU: 0 PID: 36920 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 2975.377912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2975.378641] Call Trace: [ 2975.379070] dump_stack+0x107/0x167 [ 2975.379414] should_fail.cold+0x5/0xa [ 2975.379843] should_failslab+0x5/0x20 [ 2975.380213] kmem_cache_alloc_bulk+0x4b/0x320 [ 2975.380692] io_submit_sqes+0x6fe6/0x8610 [ 2975.381186] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2975.381675] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2975.382171] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2975.382621] ? lock_downgrade+0x6d0/0x6d0 [ 2975.383045] ? find_held_lock+0x2c/0x110 [ 2975.383431] ? io_submit_sqes+0x8610/0x8610 [ 2975.383913] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2975.384361] ? wait_for_completion_io+0x270/0x270 [ 2975.384869] ? rcu_read_lock_any_held+0x75/0xa0 [ 2975.385300] ? vfs_write+0x354/0xb10 [ 2975.385647] ? fput_many+0x2f/0x1a0 [ 2975.386038] ? ksys_write+0x1a9/0x260 [ 2975.386390] ? __ia32_sys_read+0xb0/0xb0 [ 2975.386823] do_syscall_64+0x33/0x40 [ 2975.387178] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2975.387659] RIP: 0033:0x7f938c584b19 [ 2975.388033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2975.389619] RSP: 002b:00007f9389afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2975.390336] RAX: ffffffffffffffda RBX: 00007f938c697f60 RCX: 00007f938c584b19 [ 2975.390980] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2975.391615] RBP: 00007f9389afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2975.392613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2975.393308] R13: 00007ffef13b286f R14: 00007f9389afa300 R15: 0000000000022000 13:06:29 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 13:06:29 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) r1 = dup(r0) r2 = pidfd_getfd(r1, r0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x1, r5, 0x1, 0x8, 0x6, @random="190002400a00"}, 0x14) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000000)={@remote, 0x2a, r5}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x29, 0x6, 0x3, 0xe80, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7, 0x8, 0x3}}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', r6, 0x4, 0xe1, 0x7, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x10, 0x8, 0x5}}) 13:06:29 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x20) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) write(r0, &(0x7f0000000100)="cf55569e44be5847898fe5711eb971fdc5ec60081ce1b7d92ba62223867f4a2e2be7ee8110671a6de8ca328a0e3ef6722a3a59c88915e043a7cc7e752458c8955ebc01d7627b4ff4c7af59c70822529ec996a61f54d025a46d3433520671bd1323ca1516053dc4a0f7a146652b8dce79177feb499c9b0e61b454c6aaeaec4a6599fbc790010f90249a", 0x89) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21, 0x70bd2c, 0x0, {0x1}}, 0x14}}, 0x2c000) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r1) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x100, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48004}, 0x1001) shutdown(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$TIOCL_SETVESABLANK(r5, 0x541c, &(0x7f0000000200)) 13:06:29 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1625208e5934e50615bf9f2a963c9653829e66c5f567be59cbb1ec8bffef0d50443bcfba5e6f1c1df5c7c64fa02634be0905fc61c8ac41aa496da579060c9a03d8b6defcef06750648aafd", 0x4b}, {&(0x7f00000000c0)="fb2cd9785dd9d559b63acd90ce793e56e9bf99972bdcb6026e4acc7ff9c60a4b7a10de381deb46eaef9fac6b4ce3cd6af53ce8450fcbc664dc14181ad04faa88ea44e25b88967d2ffba17c7aa042375ac0c7ba9f0b99b19f018af6fc8685f3b05fa1c0c160b5ddb6fed2f27fec2f8d2b917843089e30acffaf907343bf81ab32624a1d46410985511badc9d2a0a186d6e2428caa34c657ead32307fef46d6b370d9de6016ebb28ff2e6a5426b2d4fcc67c39c1f140f359a20a8e55dca6248247b36c52be7c7afb76fd0394b167d865d5771e4cabdd5a4d37253cb34d04e56ce1618afd370a20d503d51e780c04e950b2ced3d5", 0xf3}, {&(0x7f00000001c0)="7b5d5e42b313cf103c13ffff31121370d2c83756827b04487b4ff4ddb49943c5aff25c88e5be9f50ab9866763b80b9060e017ba06f9927826b31af97e96a64ecf562e72e31881b4a8213", 0x4a}], 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="280000000000000011010000090000001a16556349457f9b63c023126447b5fcc3bd7e000000000078000000000000001301000004000000c1f4ab7c40c6edc9c599fcd027285f9130f2ee85a6c000286a6091b5dfce6ecdc0d3c64ae22f7625a4569f77f0e945ea74967b873625d184a517b7f07509637fab278925e17a51a668cabd0322c0bda74e07497d7389eb95341cea29e744dfe8f7f3db4b0767a65f3e95ed4e735cada40293ad847b28cf1222e510fe1f32b17c21977861fad9f71b1d822f92062b93e5628afa0c5cfdfccd3083cc32198f2c33dc6376aa6c8f5f152551a06da4b8ce4d1522a69a8411a3767c1a5f392d6e4c283ad1499e3fb8e8aab10b3b18762b1f706736e8c8a89fefb89ce6cb2c98370c319cd70221000000000801000000000000140100000800000023d61c99452a0e12813cc1a35970bc765de0f4162f3b1aa63e32e664773f3416950f63bbbbb5c8bad6cb02e28543ba17c80bfd7dd6bbf09cfde96d792c581abce286e8912270d3cd7359812ded1da6ec8ac16514d9b3e1f6ed8c24b1b0689076945a7b31ad7dd5411b1167c8809bb92193b0273b37d7a904012f9ed24c962897d5532bb775867e6ab1c3a6809e729f8e0a7776a335335a5e6b5bbc57ab68e9f256b97a1505e3980876de1c8c3d57923595e70b145ff7d2d836bdbe707626d5231d81108288f9f21ffcb1d3a2cc9ce3a1bb63ff7dfa0c70fc2fef225a74ac7052aa00753fb7b680a042e5e2bc1c4b49987d6b000000005800000000000000060000000200000089f679c0446be73e35561c4911c3d5193ede4aa55120e1c07902f036d60569096318ff429f9366dad3801d79b2b76b8641b0b705a88b3d26e77751c03666cf7aa5a146fa9418c700300000000000000088000000bf2b0000fbab39c53616b9d81c90ae41b950d27662d896317a452727ade359b30000000020000000000000000501000006000000e1ab6498a7c419b2c4a21600000000004000000000000000ff000000070000006597649626f20257b5f490561a46f78f5be5797f0ef22a6b592ce21173734721714d0f91e1043ae65deaaedf00000000"], 0x310}}], 0x1, 0x20) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:06:29 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:06:29 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 75) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:06:29 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:06:29 executing program 6: open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)) r0 = syz_open_dev$vcsn(0x0, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000200)={0x0, 0x0, 0x0, {0x0, 0xfffc}, {0x0, 0x20}, @const={0xfd3, {0x3, 0x6, 0x2cb2, 0x1000}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) [ 2994.494631] FAULT_INJECTION: forcing a failure. [ 2994.494631] name failslab, interval 1, probability 0, space 0, times 0 [ 2994.495710] CPU: 0 PID: 36930 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2994.496344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2994.497110] Call Trace: [ 2994.497352] dump_stack+0x107/0x167 [ 2994.497672] should_fail.cold+0x5/0xa [ 2994.498048] ? trace_hardirqs_on+0x5b/0x180 [ 2994.498425] ? __alloc_skb+0x6d/0x5b0 [ 2994.498759] should_failslab+0x5/0x20 [ 2994.499136] kmem_cache_alloc_node+0x55/0x330 [ 2994.499536] __alloc_skb+0x6d/0x5b0 [ 2994.499924] skb_segment+0x9d8/0x3aa0 [ 2994.500324] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2994.500758] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2994.501249] ? SOFTIRQ_verbose+0x10/0x10 [ 2994.501613] __udp_gso_segment+0x11c6/0x1830 [ 2994.502062] ? __sk_receive_skb+0x830/0x830 [ 2994.502452] udp4_ufo_fragment+0x528/0x720 [ 2994.502870] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2994.503301] inet_gso_segment+0x4fb/0x11a0 [ 2994.503697] skb_mac_gso_segment+0x273/0x570 [ 2994.504129] ? inet_sock_destruct+0x840/0x840 [ 2994.504518] ? skb_network_protocol+0x650/0x650 [ 2994.504957] ? skb_crc32c_csum_help+0x80/0x80 [ 2994.505345] ? lock_acquire+0x197/0x470 [ 2994.519989] ? __dev_queue_xmit+0x1c2/0x2710 [ 2994.520383] __skb_gso_segment+0x32d/0x6d0 [ 2994.520760] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2994.521211] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2994.521611] __dev_queue_xmit+0x87b/0x2710 [ 2994.521995] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2994.522407] ? mark_held_locks+0x9e/0xe0 [ 2994.522765] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2994.523223] neigh_connected_output+0x382/0x4d0 [ 2994.523648] ip_finish_output2+0x6f1/0x21f0 [ 2994.524047] ? nf_hook_slow+0xfc/0x1e0 [ 2994.524389] ? ip_frag_next+0x9e0/0x9e0 [ 2994.524734] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2994.525181] __ip_finish_output.part.0+0x5f3/0xb50 [ 2994.525610] ? ip_fragment.constprop.0+0x240/0x240 [ 2994.526027] ? nf_hook+0x510/0x510 [ 2994.526357] ip_output+0x2f7/0x600 [ 2994.526678] ip_send_skb+0xdd/0x260 [ 2994.527002] udp_send_skb+0x6da/0x11d0 [ 2994.527360] udp_sendmsg+0x139a/0x2160 [ 2994.527708] ? tracing_generic_entry_update+0x1ed/0x270 [ 2994.528174] ? ip_frag_init+0x350/0x350 [ 2994.528517] ? tracing_generic_entry_update+0x1ed/0x270 [ 2994.528982] ? udp_setsockopt+0xc0/0xc0 [ 2994.529331] ? perf_event_switch_output+0x7d0/0x7d0 [ 2994.529789] ? lock_chain_count+0x20/0x20 [ 2994.530148] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2994.530575] ? lock_chain_count+0x20/0x20 [ 2994.530930] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2994.531373] ? perf_trace_lock+0x2bd/0x490 [ 2994.531746] ? perf_swevent_event+0x6c/0x550 [ 2994.532127] ? __lockdep_reset_lock+0x180/0x180 [ 2994.532547] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2994.532901] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2994.533349] ? udp_v6_push_pending_frames+0x360/0x360 [ 2994.533789] ? SOFTIRQ_verbose+0x10/0x10 [ 2994.534166] ? lock_acquire+0x197/0x470 [ 2994.534508] ? find_held_lock+0x2c/0x110 [ 2994.534871] ? __might_fault+0xd3/0x180 [ 2994.535218] ? lock_downgrade+0x6d0/0x6d0 [ 2994.535583] ? lock_downgrade+0x6d0/0x6d0 [ 2994.539016] ? sock_has_perm+0x1ea/0x280 [ 2994.539369] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2994.539876] ? _copy_from_user+0xfb/0x1b0 [ 2994.540259] ? __import_iovec+0x458/0x590 [ 2994.540618] ? udp_v6_push_pending_frames+0x360/0x360 [ 2994.541115] inet6_sendmsg+0x105/0x140 [ 2994.541453] ? inet6_compat_ioctl+0x320/0x320 [ 2994.541915] __sock_sendmsg+0xf2/0x190 [ 2994.542259] ____sys_sendmsg+0x70d/0x870 [ 2994.542616] ? sock_write_iter+0x3d0/0x3d0 [ 2994.543023] ? do_recvmmsg+0x6d0/0x6d0 [ 2994.543361] ? perf_trace_lock+0x2bd/0x490 [ 2994.543735] ? SOFTIRQ_verbose+0x10/0x10 [ 2994.544142] ? __lockdep_reset_lock+0x180/0x180 [ 2994.544554] ___sys_sendmsg+0xf3/0x170 [ 2994.544943] ? sendmsg_copy_msghdr+0x160/0x160 [ 2994.545346] ? __fget_files+0x2cf/0x520 [ 2994.545691] ? lock_downgrade+0x6d0/0x6d0 [ 2994.546099] ? find_held_lock+0x2c/0x110 [ 2994.546472] ? __fget_files+0x2f8/0x520 [ 2994.546902] ? __fget_light+0xea/0x290 [ 2994.547255] __sys_sendmsg+0xe5/0x1b0 [ 2994.547585] ? __sys_sendmsg_sock+0x40/0x40 [ 2994.548024] ? rcu_read_lock_any_held+0x75/0xa0 [ 2994.548471] do_syscall_64+0x33/0x40 [ 2994.548833] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2994.549278] RIP: 0033:0x7fa05acd5b19 [ 2994.549604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2994.551246] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2994.551946] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2994.552541] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2994.553180] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2994.553773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2994.554411] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 [ 2994.616592] FAULT_INJECTION: forcing a failure. [ 2994.616592] name failslab, interval 1, probability 0, space 0, times 0 [ 2994.617602] CPU: 1 PID: 36940 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 2994.618184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2994.618881] Call Trace: [ 2994.619115] dump_stack+0x107/0x167 [ 2994.619438] should_fail.cold+0x5/0xa [ 2994.619780] ? create_object.isra.0+0x3a/0xa20 [ 2994.620175] should_failslab+0x5/0x20 [ 2994.620509] kmem_cache_alloc+0x5b/0x310 [ 2994.620860] create_object.isra.0+0x3a/0xa20 [ 2994.621234] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2994.621671] kmem_cache_alloc_bulk+0x168/0x320 [ 2994.622067] io_submit_sqes+0x6fe6/0x8610 [ 2994.622430] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2994.622861] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2994.623283] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2994.623705] ? lock_downgrade+0x6d0/0x6d0 [ 2994.624066] ? find_held_lock+0x2c/0x110 [ 2994.624419] ? io_submit_sqes+0x8610/0x8610 [ 2994.624798] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2994.625220] ? wait_for_completion_io+0x270/0x270 [ 2994.625636] ? rcu_read_lock_any_held+0x75/0xa0 [ 2994.626033] ? vfs_write+0x354/0xb10 [ 2994.626355] ? fput_many+0x2f/0x1a0 [ 2994.626669] ? ksys_write+0x1a9/0x260 [ 2994.626997] ? __ia32_sys_read+0xb0/0xb0 [ 2994.627357] do_syscall_64+0x33/0x40 [ 2994.627678] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2994.628130] RIP: 0033:0x7f938c584b19 [ 2994.628458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2994.630000] RSP: 002b:00007f9389afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2994.630650] RAX: ffffffffffffffda RBX: 00007f938c697f60 RCX: 00007f938c584b19 [ 2994.631254] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2994.631875] RBP: 00007f9389afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2994.632485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2994.633090] R13: 00007ffef13b286f R14: 00007f9389afa300 R15: 0000000000022000 13:06:29 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 76) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:06:29 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:06:29 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x30, 0xe21, 0x0, 0x0, {}, [@typed={0x8, 0x59, 0x0, 0x0, @fd=r0}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000}, 0x48000) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:06:29 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 13:06:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x222001, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) bind$unix(r0, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e) connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 13:06:29 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) ioctl$FITHAW(r1, 0xc0045878) 13:06:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4040) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x44014}, 0x20060000) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0xfe}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}}, 0x0) [ 2995.142809] FAULT_INJECTION: forcing a failure. [ 2995.142809] name failslab, interval 1, probability 0, space 0, times 0 [ 2995.143998] CPU: 0 PID: 37266 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 2995.144950] FAULT_INJECTION: forcing a failure. [ 2995.144950] name failslab, interval 1, probability 0, space 0, times 0 [ 2995.145323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2995.145330] Call Trace: [ 2995.145361] dump_stack+0x107/0x167 [ 2995.150330] should_fail.cold+0x5/0xa [ 2995.151207] ? create_object.isra.0+0x3a/0xa20 [ 2995.152267] should_failslab+0x5/0x20 [ 2995.153104] kmem_cache_alloc+0x5b/0x310 [ 2995.154040] create_object.isra.0+0x3a/0xa20 [ 2995.155090] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2995.156298] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2995.157465] ? skb_segment+0x9d8/0x3aa0 [ 2995.158386] __alloc_skb+0xb1/0x5b0 [ 2995.159263] skb_segment+0x9d8/0x3aa0 [ 2995.160210] ? skb_zerocopy_iter_stream+0x800/0x800 [ 2995.161393] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2995.162616] ? SOFTIRQ_verbose+0x10/0x10 [ 2995.163603] __udp_gso_segment+0x11c6/0x1830 [ 2995.164612] ? __sk_receive_skb+0x830/0x830 [ 2995.165626] udp4_ufo_fragment+0x528/0x720 [ 2995.166598] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 2995.167799] inet_gso_segment+0x4fb/0x11a0 [ 2995.169294] skb_mac_gso_segment+0x273/0x570 [ 2995.170319] ? inet_sock_destruct+0x840/0x840 [ 2995.173099] ? skb_network_protocol+0x650/0x650 [ 2995.174211] ? skb_crc32c_csum_help+0x80/0x80 [ 2995.175226] ? lock_acquire+0x197/0x470 [ 2995.176114] ? __dev_queue_xmit+0x1c2/0x2710 [ 2995.177152] __skb_gso_segment+0x32d/0x6d0 [ 2995.178216] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 2995.179414] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 2995.180476] __dev_queue_xmit+0x87b/0x2710 [ 2995.181489] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2995.182555] ? mark_held_locks+0x9e/0xe0 [ 2995.183491] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2995.184706] neigh_connected_output+0x382/0x4d0 [ 2995.185786] ip_finish_output2+0x6f1/0x21f0 [ 2995.186818] ? nf_hook_slow+0xfc/0x1e0 [ 2995.187717] ? ip_frag_next+0x9e0/0x9e0 [ 2995.188623] ? skb_gso_transport_seglen+0x1ca/0x360 [ 2995.189565] __ip_finish_output.part.0+0x5f3/0xb50 [ 2995.190472] ? ip_fragment.constprop.0+0x240/0x240 [ 2995.191392] ? nf_hook+0x510/0x510 [ 2995.192110] ip_output+0x2f7/0x600 [ 2995.192813] ip_send_skb+0xdd/0x260 [ 2995.193501] udp_send_skb+0x6da/0x11d0 [ 2995.194239] udp_sendmsg+0x139a/0x2160 [ 2995.194934] ? tracing_generic_entry_update+0x1ed/0x270 [ 2995.195959] ? ip_frag_init+0x350/0x350 [ 2995.196727] ? tracing_generic_entry_update+0x1ed/0x270 [ 2995.197720] ? udp_setsockopt+0xc0/0xc0 [ 2995.198470] ? perf_event_switch_output+0x7d0/0x7d0 [ 2995.199421] ? lock_chain_count+0x20/0x20 [ 2995.200306] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2995.201230] ? lock_chain_count+0x20/0x20 [ 2995.201960] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2995.202900] ? perf_trace_lock+0x2bd/0x490 [ 2995.203693] ? perf_swevent_event+0x6c/0x550 [ 2995.204698] ? __lockdep_reset_lock+0x180/0x180 [ 2995.205573] udpv6_sendmsg+0x1bcf/0x2ad0 [ 2995.206362] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2995.207301] ? udp_v6_push_pending_frames+0x360/0x360 [ 2995.207967] ? SOFTIRQ_verbose+0x10/0x10 [ 2995.208392] ? lock_acquire+0x197/0x470 [ 2995.208734] ? find_held_lock+0x2c/0x110 [ 2995.209092] ? __might_fault+0xd3/0x180 [ 2995.209483] ? lock_downgrade+0x6d0/0x6d0 [ 2995.209847] ? lock_downgrade+0x6d0/0x6d0 [ 2995.210283] ? sock_has_perm+0x1ea/0x280 [ 2995.210640] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2995.211090] ? _copy_from_user+0xfb/0x1b0 [ 2995.211524] ? __import_iovec+0x458/0x590 [ 2995.211944] ? udp_v6_push_pending_frames+0x360/0x360 [ 2995.212445] inet6_sendmsg+0x105/0x140 [ 2995.212784] ? inet6_compat_ioctl+0x320/0x320 [ 2995.213210] __sock_sendmsg+0xf2/0x190 [ 2995.213563] ____sys_sendmsg+0x70d/0x870 [ 2995.213922] ? sock_write_iter+0x3d0/0x3d0 [ 2995.214333] ? do_recvmmsg+0x6d0/0x6d0 [ 2995.214671] ? perf_trace_lock+0x2bd/0x490 [ 2995.215039] ? SOFTIRQ_verbose+0x10/0x10 [ 2995.215476] ? __lockdep_reset_lock+0x180/0x180 [ 2995.215942] ___sys_sendmsg+0xf3/0x170 [ 2995.216337] ? sendmsg_copy_msghdr+0x160/0x160 [ 2995.216742] ? __fget_files+0x2cf/0x520 [ 2995.217086] ? lock_downgrade+0x6d0/0x6d0 [ 2995.217498] ? find_held_lock+0x2c/0x110 [ 2995.217869] ? __fget_files+0x2f8/0x520 [ 2995.218277] ? __fget_light+0xea/0x290 [ 2995.218628] __sys_sendmsg+0xe5/0x1b0 [ 2995.218957] ? __sys_sendmsg_sock+0x40/0x40 [ 2995.219375] ? rcu_read_lock_any_held+0x75/0xa0 [ 2995.219954] do_syscall_64+0x33/0x40 [ 2995.220679] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2995.221621] RIP: 0033:0x7fa05acd5b19 [ 2995.222323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2995.226222] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2995.227595] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 2995.229248] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2995.230633] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2995.231828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2995.232476] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 [ 2995.233127] CPU: 1 PID: 37261 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 2995.233809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2995.234570] Call Trace: [ 2995.234810] dump_stack+0x107/0x167 [ 2995.235119] should_fail.cold+0x5/0xa [ 2995.235503] ? create_object.isra.0+0x3a/0xa20 [ 2995.236012] should_failslab+0x5/0x20 [ 2995.236480] kmem_cache_alloc+0x5b/0x310 [ 2995.237482] ? mark_held_locks+0x9e/0xe0 [ 2995.238456] create_object.isra.0+0x3a/0xa20 [ 2995.239462] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2995.240646] kmem_cache_alloc_bulk+0x168/0x320 [ 2995.241704] io_submit_sqes+0x6fe6/0x8610 [ 2995.242698] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2995.244844] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2995.246011] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2995.247206] ? lock_downgrade+0x6d0/0x6d0 [ 2995.248130] ? find_held_lock+0x2c/0x110 [ 2995.249085] ? io_submit_sqes+0x8610/0x8610 [ 2995.250102] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2995.251288] ? wait_for_completion_io+0x270/0x270 [ 2995.252406] ? rcu_read_lock_any_held+0x75/0xa0 [ 2995.253468] ? vfs_write+0x354/0xb10 [ 2995.254364] ? fput_many+0x2f/0x1a0 [ 2995.255156] ? ksys_write+0x1a9/0x260 [ 2995.256324] ? __ia32_sys_read+0xb0/0xb0 [ 2995.257260] do_syscall_64+0x33/0x40 [ 2995.258080] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2995.259323] RIP: 0033:0x7f938c584b19 [ 2995.260146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2995.264445] RSP: 002b:00007f9389afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2995.266231] RAX: ffffffffffffffda RBX: 00007f938c697f60 RCX: 00007f938c584b19 [ 2995.267909] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2995.269561] RBP: 00007f9389afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2995.271247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2995.272868] R13: 00007ffef13b286f R14: 00007f9389afa300 R15: 0000000000022000 13:06:48 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 13:06:48 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:06:48 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x7d}}, './file0\x00'}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x100000001) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000040)={0xffff, 0x1, 0x2}) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x6, 0x80, 0x9, 0x6, 0x3, 0x3, 0xda14, 0x18a, 0x40, 0x2dc, 0x40, 0x6, 0x38, 0x2, 0x9, 0x9, 0x40}, [{0x2, 0x3f, 0x6, 0xab, 0x7, 0x3, 0x8, 0x40}, {0x4, 0xa3, 0xa6, 0x6, 0xffffffffffffffff, 0x3, 0x8, 0xee2}], "2abd0787d81e539c1cb180e20b1930c4ae7f7885ecca23d10da00b6b4448b9a51214d02cfefd401286807fc5", ['\x00', '\x00', '\x00']}, 0x3dc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f00000000c0)={0x35b9d0d3, 0x2}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:06:48 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:06:48 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) lseek(0xffffffffffffffff, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) creat(0x0, 0x183) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4c20, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r3, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:06:48 executing program 6: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f00000000c0)="e4", 0x1, 0x0, 0x0, 0x0) r2 = dup(r1) recvmmsg(0xffffffffffffffff, &(0x7f0000009580)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000006c80)=""/159, 0x9f}], 0x1}}], 0x1, 0x0, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) recvmmsg(r2, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) 13:06:48 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7ff, 0x4c0400) syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r2 = socket$inet(0x2, 0x2, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:06:48 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 77) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) [ 3014.147786] FAULT_INJECTION: forcing a failure. [ 3014.147786] name failslab, interval 1, probability 0, space 0, times 0 [ 3014.150706] CPU: 0 PID: 37583 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 3014.152347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3014.154493] Call Trace: [ 3014.154758] dump_stack+0x107/0x167 [ 3014.155436] should_fail.cold+0x5/0xa [ 3014.155832] ? create_object.isra.0+0x3a/0xa20 [ 3014.156509] should_failslab+0x5/0x20 [ 3014.156834] kmem_cache_alloc+0x5b/0x310 [ 3014.157480] ? mark_held_locks+0x9e/0xe0 [ 3014.157835] create_object.isra.0+0x3a/0xa20 [ 3014.158342] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3014.158949] kmem_cache_alloc_bulk+0x168/0x320 [ 3014.159700] io_submit_sqes+0x6fe6/0x8610 [ 3014.160065] ? percpu_ref_tryget_many+0x166/0x2d0 [ 3014.160835] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3014.161352] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3014.162007] ? lock_downgrade+0x6d0/0x6d0 [ 3014.162499] ? find_held_lock+0x2c/0x110 [ 3014.163082] ? io_submit_sqes+0x8610/0x8610 [ 3014.163581] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3014.164385] ? wait_for_completion_io+0x270/0x270 [ 3014.164872] ? rcu_read_lock_any_held+0x75/0xa0 [ 3014.165520] ? vfs_write+0x354/0xb10 [ 3014.165846] ? fput_many+0x2f/0x1a0 [ 3014.166463] ? ksys_write+0x1a9/0x260 [ 3014.166791] ? __ia32_sys_read+0xb0/0xb0 [ 3014.167473] do_syscall_64+0x33/0x40 [ 3014.167794] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3014.168564] RIP: 0033:0x7f938c584b19 [ 3014.168884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3014.170970] RSP: 002b:00007f9389afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3014.171964] RAX: ffffffffffffffda RBX: 00007f938c697f60 RCX: 00007f938c584b19 [ 3014.173036] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3014.174102] RBP: 00007f9389afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3014.175148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3014.176278] R13: 00007ffef13b286f R14: 00007f9389afa300 R15: 0000000000022000 [ 3014.233614] FAULT_INJECTION: forcing a failure. [ 3014.233614] name failslab, interval 1, probability 0, space 0, times 0 [ 3014.234718] CPU: 0 PID: 37608 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 3014.235354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3014.236070] Call Trace: [ 3014.236411] dump_stack+0x107/0x167 [ 3014.236733] should_fail.cold+0x5/0xa [ 3014.237063] ? trace_hardirqs_on+0x5b/0x180 [ 3014.237497] ? __alloc_skb+0x6d/0x5b0 [ 3014.237830] should_failslab+0x5/0x20 [ 3014.238198] kmem_cache_alloc_node+0x55/0x330 [ 3014.238605] __alloc_skb+0x6d/0x5b0 [ 3014.238932] skb_segment+0x9d8/0x3aa0 [ 3014.239389] ? skb_zerocopy_iter_stream+0x800/0x800 [ 3014.239836] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3014.240390] ? SOFTIRQ_verbose+0x10/0x10 [ 3014.240752] __udp_gso_segment+0x11c6/0x1830 [ 3014.241128] ? __sk_receive_skb+0x830/0x830 [ 3014.241575] udp4_ufo_fragment+0x528/0x720 [ 3014.241949] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 3014.242428] inet_gso_segment+0x4fb/0x11a0 [ 3014.242817] skb_mac_gso_segment+0x273/0x570 [ 3014.243253] ? inet_sock_destruct+0x840/0x840 [ 3014.243638] ? skb_network_protocol+0x650/0x650 [ 3014.244067] ? skb_crc32c_csum_help+0x80/0x80 [ 3014.244528] ? lock_acquire+0x197/0x470 [ 3014.244869] ? __dev_queue_xmit+0x1c2/0x2710 [ 3014.245314] __skb_gso_segment+0x32d/0x6d0 [ 3014.245690] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 3014.246138] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 3014.246584] __dev_queue_xmit+0x87b/0x2710 [ 3014.246969] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 3014.247438] ? mark_held_locks+0x9e/0xe0 [ 3014.247797] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3014.248369] neigh_connected_output+0x382/0x4d0 [ 3014.248790] ip_finish_output2+0x6f1/0x21f0 [ 3014.249216] ? nf_hook_slow+0xfc/0x1e0 [ 3014.249565] ? ip_frag_next+0x9e0/0x9e0 [ 3014.249907] ? skb_gso_transport_seglen+0x1ca/0x360 [ 3014.250401] __ip_finish_output.part.0+0x5f3/0xb50 [ 3014.250829] ? ip_fragment.constprop.0+0x240/0x240 [ 3014.251301] ? nf_hook+0x510/0x510 [ 3014.251631] ip_output+0x2f7/0x600 [ 3014.251980] ip_send_skb+0xdd/0x260 [ 3014.252379] udp_send_skb+0x6da/0x11d0 [ 3014.252736] udp_sendmsg+0x139a/0x2160 [ 3014.253072] ? tracing_generic_entry_update+0x1ed/0x270 [ 3014.253586] ? ip_frag_init+0x350/0x350 [ 3014.253929] ? tracing_generic_entry_update+0x1ed/0x270 [ 3014.254443] ? udp_setsockopt+0xc0/0xc0 [ 3014.254791] ? perf_event_switch_output+0x7d0/0x7d0 [ 3014.255308] ? lock_chain_count+0x20/0x20 [ 3014.255671] ? lock_chain_count+0x20/0x20 [ 3014.256055] ? perf_swevent_event+0x6c/0x550 [ 3014.256515] ? tracing_generic_entry_update+0x1ed/0x270 [ 3014.256972] ? perf_tp_event+0x5ce/0xc00 [ 3014.257411] ? perf_event_switch_output+0x7d0/0x7d0 [ 3014.257850] udpv6_sendmsg+0x1bcf/0x2ad0 [ 3014.258250] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 3014.258693] ? udp_v6_push_pending_frames+0x360/0x360 [ 3014.259129] ? SOFTIRQ_verbose+0x10/0x10 [ 3014.259566] ? lock_acquire+0x197/0x470 [ 3014.259933] ? find_held_lock+0x2c/0x110 [ 3014.260372] ? __might_fault+0xd3/0x180 [ 3014.260715] ? lock_downgrade+0x6d0/0x6d0 [ 3014.261078] ? lock_downgrade+0x6d0/0x6d0 [ 3014.261497] ? sock_has_perm+0x1ea/0x280 [ 3014.261849] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3014.262353] ? _copy_from_user+0xfb/0x1b0 [ 3014.262734] ? __import_iovec+0x458/0x590 [ 3014.263092] ? udp_v6_push_pending_frames+0x360/0x360 [ 3014.263668] inet6_sendmsg+0x105/0x140 [ 3014.264047] ? inet6_compat_ioctl+0x320/0x320 [ 3014.264514] __sock_sendmsg+0xf2/0x190 [ 3014.266516] ____sys_sendmsg+0x70d/0x870 [ 3014.266873] ? sock_write_iter+0x3d0/0x3d0 [ 3014.267730] ? do_recvmmsg+0x6d0/0x6d0 [ 3014.268107] ? perf_trace_lock+0x2bd/0x490 [ 3014.268698] ? SOFTIRQ_verbose+0x10/0x10 [ 3014.269055] ? __lockdep_reset_lock+0x180/0x180 [ 3014.269519] ___sys_sendmsg+0xf3/0x170 [ 3014.269859] ? sendmsg_copy_msghdr+0x160/0x160 [ 3014.270309] ? __fget_files+0x2cf/0x520 [ 3014.270653] ? lock_downgrade+0x6d0/0x6d0 [ 3014.271012] ? find_held_lock+0x2c/0x110 [ 3014.271461] ? __fget_files+0x2f8/0x520 [ 3014.271822] ? __fget_light+0xea/0x290 [ 3014.272288] __sys_sendmsg+0xe5/0x1b0 [ 3014.272620] ? __sys_sendmsg_sock+0x40/0x40 [ 3014.272989] ? rcu_read_lock_any_held+0x75/0xa0 [ 3014.273434] do_syscall_64+0x33/0x40 [ 3014.273755] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3014.274189] RIP: 0033:0x7fa05acd5b19 [ 3014.274511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3014.276091] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3014.276737] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 3014.277331] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 3014.277924] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3014.278603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3014.279266] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:06:48 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 13:06:49 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:06:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x604000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000100)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r1, 0x0, 0x10001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 13:06:49 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 78) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:06:49 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES32=0xffffffffffffffff, @ANYRES64=0x0]) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:06:49 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_setup(0x2b2a, &(0x7f0000000500)={0x0, 0xc551, 0x1, 0x0, 0x1f1, 0x0, r0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$notify(r3, 0x402, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0xc268f04b6ac43b78, r4, 0x65bd9000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0x2}, 0x6) dup2(r6, r4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3014.563767] FAULT_INJECTION: forcing a failure. [ 3014.563767] name failslab, interval 1, probability 0, space 0, times 0 [ 3014.564887] CPU: 1 PID: 37899 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 3014.565540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3014.566304] Call Trace: [ 3014.566580] dump_stack+0x107/0x167 [ 3014.566935] should_fail.cold+0x5/0xa [ 3014.567298] ? create_object.isra.0+0x3a/0xa20 [ 3014.567726] should_failslab+0x5/0x20 [ 3014.568120] kmem_cache_alloc+0x5b/0x310 [ 3014.568525] ? mark_held_locks+0x9e/0xe0 [ 3014.568919] create_object.isra.0+0x3a/0xa20 [ 3014.569334] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3014.569813] kmem_cache_alloc_bulk+0x168/0x320 [ 3014.570251] io_submit_sqes+0x6fe6/0x8610 [ 3014.570644] ? percpu_ref_tryget_many+0x166/0x2d0 [ 3014.571123] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3014.571588] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3014.572060] ? lock_downgrade+0x6d0/0x6d0 [ 3014.572476] ? find_held_lock+0x2c/0x110 [ 3014.572888] ? io_submit_sqes+0x8610/0x8610 [ 3014.573311] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3014.573767] ? wait_for_completion_io+0x270/0x270 [ 3014.574222] ? rcu_read_lock_any_held+0x75/0xa0 [ 3014.574654] ? vfs_write+0x354/0xb10 [ 3014.575009] ? fput_many+0x2f/0x1a0 [ 3014.575358] ? ksys_write+0x1a9/0x260 [ 3014.575717] ? __ia32_sys_read+0xb0/0xb0 [ 3014.576122] do_syscall_64+0x33/0x40 [ 3014.576475] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3014.576948] RIP: 0033:0x7f938c584b19 [ 3014.577298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3014.578948] RSP: 002b:00007f9389afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3014.579648] RAX: ffffffffffffffda RBX: 00007f938c697f60 RCX: 00007f938c584b19 [ 3014.580320] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3014.580972] RBP: 00007f9389afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3014.581622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3014.582271] R13: 00007ffef13b286f R14: 00007f9389afa300 R15: 0000000000022000 13:06:49 executing program 3: r0 = clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r2) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = dup2(r7, r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="017d3fd0f34d2a171ffeb74ec1650072"]) r10 = syz_genetlink_get_family_id$batadv(0x0, r8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r10, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0xfec6, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0500290001000000"], 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r10, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xcee}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0xc000041}, 0xaaec09bb31cc71f) [ 3014.689975] FAULT_INJECTION: forcing a failure. [ 3014.689975] name failslab, interval 1, probability 0, space 0, times 0 [ 3014.691080] CPU: 1 PID: 37905 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 3014.691715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3014.692483] Call Trace: [ 3014.692746] dump_stack+0x107/0x167 [ 3014.693103] should_fail.cold+0x5/0xa [ 3014.693463] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3014.693941] ? create_object.isra.0+0x3a/0xa20 [ 3014.694370] should_failslab+0x5/0x20 [ 3014.694728] kmem_cache_alloc+0x5b/0x310 [ 3014.695101] ? mark_held_locks+0x9e/0xe0 [ 3014.695493] create_object.isra.0+0x3a/0xa20 [ 3014.695965] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3014.696456] kmem_cache_alloc_node+0x169/0x330 [ 3014.696892] __alloc_skb+0x6d/0x5b0 [ 3014.697248] skb_segment+0x9d8/0x3aa0 [ 3014.697607] ? lock_chain_count+0x20/0x20 [ 3014.698055] ? skb_zerocopy_iter_stream+0x800/0x800 [ 3014.698529] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3014.703338] ? SOFTIRQ_verbose+0x10/0x10 13:06:49 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) [ 3014.703749] __udp_gso_segment+0x11c6/0x1830 [ 3014.704312] ? __sk_receive_skb+0x830/0x830 [ 3014.704731] udp4_ufo_fragment+0x528/0x720 [ 3014.705543] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 3014.706013] inet_gso_segment+0x4fb/0x11a0 [ 3014.706482] skb_mac_gso_segment+0x273/0x570 [ 3014.706897] ? inet_sock_destruct+0x840/0x840 [ 3014.707374] ? skb_network_protocol+0x650/0x650 [ 3014.707806] ? skb_crc32c_csum_help+0x80/0x80 [ 3014.708331] ? lock_acquire+0x197/0x470 [ 3014.708702] ? __dev_queue_xmit+0x1c2/0x2710 [ 3014.709131] __skb_gso_segment+0x32d/0x6d0 [ 3014.709877] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 3014.710372] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 3014.710812] __dev_queue_xmit+0x87b/0x2710 [ 3014.711230] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 3014.711675] ? mark_held_locks+0x9e/0xe0 [ 3014.712093] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3014.712592] neigh_connected_output+0x382/0x4d0 [ 3014.713047] ip_finish_output2+0x6f1/0x21f0 [ 3014.713462] ? nf_hook_slow+0xfc/0x1e0 [ 3014.713835] ? ip_frag_next+0x9e0/0x9e0 [ 3014.714211] ? skb_gso_transport_seglen+0x1ca/0x360 [ 3014.714694] __ip_finish_output.part.0+0x5f3/0xb50 [ 3014.715159] ? ip_fragment.constprop.0+0x240/0x240 [ 3014.715618] ? nf_hook+0x510/0x510 [ 3014.715987] ip_output+0x2f7/0x600 [ 3014.716335] ip_send_skb+0xdd/0x260 [ 3014.716693] udp_send_skb+0x6da/0x11d0 [ 3014.717083] udp_sendmsg+0x139a/0x2160 [ 3014.717458] ? mark_lock+0xf5/0x2df0 [ 3014.717815] ? ip_frag_init+0x350/0x350 [ 3014.718189] ? lock_chain_count+0x20/0x20 [ 3014.718585] ? udp_setsockopt+0xc0/0xc0 [ 3014.718948] ? mark_lock+0xf5/0x2df0 [ 3014.719302] ? __lockdep_reset_lock+0x180/0x180 [ 3014.719744] ? lock_chain_count+0x20/0x20 [ 3014.720149] ? mark_lock+0xf5/0x2df0 [ 3014.720514] ? mark_lock+0xf5/0x2df0 [ 3014.720869] ? lock_chain_count+0x20/0x20 [ 3014.721259] ? __lock_acquire+0xbb1/0x5b00 [ 3014.721659] ? lock_chain_count+0x20/0x20 [ 3014.722067] ? perf_trace_lock+0xac/0x490 [ 3014.722568] ? SOFTIRQ_verbose+0x10/0x10 [ 3014.722948] ? __lockdep_reset_lock+0x180/0x180 [ 3014.723474] udpv6_sendmsg+0x1bcf/0x2ad0 [ 3014.723886] ? udp_v6_push_pending_frames+0x360/0x360 [ 3014.724424] ? SOFTIRQ_verbose+0x10/0x10 [ 3014.724816] ? mark_lock+0xf5/0x2df0 [ 3014.725235] ? lock_acquire+0x197/0x470 [ 3014.725608] ? find_held_lock+0x2c/0x110 [ 3014.725996] ? __might_fault+0xd3/0x180 [ 3014.726426] ? lock_downgrade+0x6d0/0x6d0 [ 3014.726821] ? lock_downgrade+0x6d0/0x6d0 [ 3014.727291] ? sock_has_perm+0x1ea/0x280 [ 3014.727674] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3014.728372] ? _copy_from_user+0xfb/0x1b0 [ 3014.728790] ? __import_iovec+0x458/0x590 [ 3014.729322] ? udp_v6_push_pending_frames+0x360/0x360 [ 3014.729799] inet6_sendmsg+0x105/0x140 [ 3014.730214] ? inet6_compat_ioctl+0x320/0x320 [ 3014.730634] __sock_sendmsg+0xf2/0x190 [ 3014.730999] ____sys_sendmsg+0x70d/0x870 [ 3014.731432] ? sock_write_iter+0x3d0/0x3d0 [ 3014.731826] ? do_recvmmsg+0x6d0/0x6d0 [ 3014.732244] ? SOFTIRQ_verbose+0x10/0x10 [ 3014.732613] ? lock_downgrade+0x6d0/0x6d0 [ 3014.733005] ? __lockdep_reset_lock+0x180/0x180 [ 3014.733512] ? SOFTIRQ_verbose+0x10/0x10 [ 3014.733891] ___sys_sendmsg+0xf3/0x170 [ 3014.734412] ? sendmsg_copy_msghdr+0x160/0x160 [ 3014.734845] ? __fget_files+0x2cf/0x520 [ 3014.735222] ? lock_downgrade+0x6d0/0x6d0 [ 3014.735612] ? find_held_lock+0x2c/0x110 [ 3014.736060] ? __fget_files+0x2f8/0x520 [ 3014.736458] ? __fget_light+0xea/0x290 [ 3014.736840] __sys_sendmsg+0xe5/0x1b0 [ 3014.737201] ? __sys_sendmsg_sock+0x40/0x40 [ 3014.737605] ? rcu_read_lock_any_held+0x75/0xa0 [ 3014.738100] do_syscall_64+0x33/0x40 [ 3014.738459] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3014.738933] RIP: 0033:0x7fa05acd5b19 [ 3014.739292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3014.740942] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3014.741648] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 3014.742298] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 3014.742949] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3014.743604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3014.744289] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:06:49 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3014.891839] FAULT_INJECTION: forcing a failure. [ 3014.891839] name failslab, interval 1, probability 0, space 0, times 0 [ 3014.893287] CPU: 1 PID: 37918 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 3014.894063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3014.894991] Call Trace: [ 3014.895300] dump_stack+0x107/0x167 [ 3014.895721] should_fail.cold+0x5/0xa [ 3014.896149] ? create_object.isra.0+0x3a/0xa20 [ 3014.896683] should_failslab+0x5/0x20 [ 3014.897121] kmem_cache_alloc+0x5b/0x310 [ 3014.897582] ? mark_held_locks+0x9e/0xe0 [ 3014.898053] create_object.isra.0+0x3a/0xa20 [ 3014.898551] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3014.899127] kmem_cache_alloc_bulk+0x168/0x320 [ 3014.899649] io_submit_sqes+0x6fe6/0x8610 [ 3014.900144] ? percpu_ref_tryget_many+0x166/0x2d0 [ 3014.900715] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3014.901279] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3014.901999] ? lock_downgrade+0x6d0/0x6d0 [ 3014.902460] ? find_held_lock+0x2c/0x110 [ 3014.902928] ? io_submit_sqes+0x8610/0x8610 13:06:49 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 79) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) [ 3014.903431] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3014.908427] ? wait_for_completion_io+0x270/0x270 [ 3014.908984] ? rcu_read_lock_any_held+0x75/0xa0 [ 3014.909699] ? vfs_write+0x354/0xb10 [ 3014.910044] ? fput_many+0x2f/0x1a0 [ 3014.910497] ? ksys_write+0x1a9/0x260 [ 3014.910848] ? __ia32_sys_read+0xb0/0xb0 [ 3014.911550] do_syscall_64+0x33/0x40 [ 3014.911901] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3014.912366] RIP: 0033:0x7f938c584b19 [ 3014.912706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3014.914330] RSP: 002b:00007f9389afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3014.915018] RAX: ffffffffffffffda RBX: 00007f938c697f60 RCX: 00007f938c584b19 [ 3014.915662] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3014.916317] RBP: 00007f9389afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3014.916959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3014.917598] R13: 00007ffef13b286f R14: 00007f9389afa300 R15: 0000000000022000 [ 3015.071230] FAULT_INJECTION: forcing a failure. [ 3015.071230] name failslab, interval 1, probability 0, space 0, times 0 [ 3015.073017] CPU: 0 PID: 38222 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 3015.073653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3015.074461] Call Trace: [ 3015.074759] dump_stack+0x107/0x167 [ 3015.075147] should_fail.cold+0x5/0xa [ 3015.075524] should_failslab+0x5/0x20 [ 3015.075976] __kmalloc_node_track_caller+0x74/0x3b0 [ 3015.076471] ? skb_segment+0x9d8/0x3aa0 [ 3015.076990] __alloc_skb+0xb1/0x5b0 [ 3015.077371] skb_segment+0x9d8/0x3aa0 [ 3015.077871] ? skb_zerocopy_iter_stream+0x800/0x800 [ 3015.078390] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3015.078957] ? SOFTIRQ_verbose+0x10/0x10 [ 3015.079368] __udp_gso_segment+0x11c6/0x1830 [ 3015.079860] ? __sk_receive_skb+0x830/0x830 [ 3015.080320] udp4_ufo_fragment+0x528/0x720 [ 3015.080751] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 3015.081298] inet_gso_segment+0x4fb/0x11a0 [ 3015.081748] skb_mac_gso_segment+0x273/0x570 [ 3015.082245] ? inet_sock_destruct+0x840/0x840 [ 3015.082697] ? skb_network_protocol+0x650/0x650 [ 3015.083229] ? skb_crc32c_csum_help+0x80/0x80 [ 3015.083686] ? lock_acquire+0x197/0x470 [ 3015.084153] ? __dev_queue_xmit+0x1c2/0x2710 [ 3015.084607] __skb_gso_segment+0x32d/0x6d0 [ 3015.085086] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 3015.085615] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 3015.086125] __dev_queue_xmit+0x87b/0x2710 [ 3015.086574] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 3015.087099] ? mark_held_locks+0x9e/0xe0 [ 3015.087519] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3015.091344] neigh_connected_output+0x382/0x4d0 [ 3015.091907] ip_finish_output2+0x6f1/0x21f0 [ 3015.092335] ? nf_hook_slow+0xfc/0x1e0 [ 3015.092706] ? ip_frag_next+0x9e0/0x9e0 [ 3015.093128] ? skb_gso_transport_seglen+0x1ca/0x360 [ 3015.093626] __ip_finish_output.part.0+0x5f3/0xb50 [ 3015.094153] ? ip_fragment.constprop.0+0x240/0x240 [ 3015.094621] ? nf_hook+0x510/0x510 [ 3015.095036] ip_output+0x2f7/0x600 [ 3015.095393] ip_send_skb+0xdd/0x260 [ 3015.095836] udp_send_skb+0x6da/0x11d0 [ 3015.096255] udp_sendmsg+0x139a/0x2160 [ 3015.096627] ? tracing_generic_entry_update+0x1ed/0x270 [ 3015.097180] ? ip_frag_init+0x350/0x350 [ 3015.097571] ? tracing_generic_entry_update+0x1ed/0x270 [ 3015.098132] ? udp_setsockopt+0xc0/0xc0 [ 3015.098519] ? perf_event_switch_output+0x7d0/0x7d0 [ 3015.099076] ? lock_chain_count+0x20/0x20 [ 3015.099475] ? perf_tp_event+0x5ce/0xc00 [ 3015.099946] ? lock_chain_count+0x20/0x20 [ 3015.100355] ? perf_event_switch_output+0x7d0/0x7d0 [ 3015.100882] ? perf_swevent_event+0x6c/0x550 [ 3015.101318] udpv6_sendmsg+0x1bcf/0x2ad0 [ 3015.101711] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 3015.102247] ? udp_v6_push_pending_frames+0x360/0x360 [ 3015.102731] ? SOFTIRQ_verbose+0x10/0x10 [ 3015.103206] ? lock_acquire+0x197/0x470 [ 3015.103585] ? find_held_lock+0x2c/0x110 [ 3015.104065] ? __might_fault+0xd3/0x180 [ 3015.104454] ? lock_downgrade+0x6d0/0x6d0 [ 3015.104921] ? lock_downgrade+0x6d0/0x6d0 [ 3015.105343] ? sock_has_perm+0x1ea/0x280 [ 3015.105744] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3015.106311] ? _copy_from_user+0xfb/0x1b0 [ 3015.106740] ? __import_iovec+0x458/0x590 [ 3015.107197] ? udp_v6_push_pending_frames+0x360/0x360 [ 3015.107718] inet6_sendmsg+0x105/0x140 [ 3015.108171] ? inet6_compat_ioctl+0x320/0x320 [ 3015.108626] __sock_sendmsg+0xf2/0x190 [ 3015.109032] ____sys_sendmsg+0x70d/0x870 [ 3015.109391] ? sock_write_iter+0x3d0/0x3d0 [ 3015.109752] ? do_recvmmsg+0x6d0/0x6d0 [ 3015.110191] ? perf_trace_lock+0x2bd/0x490 [ 3015.110557] ? SOFTIRQ_verbose+0x10/0x10 [ 3015.111036] ? __lockdep_reset_lock+0x180/0x180 [ 3015.111445] ___sys_sendmsg+0xf3/0x170 [ 3015.111867] ? sendmsg_copy_msghdr+0x160/0x160 [ 3015.112329] ? __fget_files+0x2cf/0x520 [ 3015.112730] ? lock_downgrade+0x6d0/0x6d0 [ 3015.113607] ? find_held_lock+0x2c/0x110 [ 3015.114078] ? __fget_files+0x2f8/0x520 [ 3015.114466] ? __fget_light+0xea/0x290 [ 3015.114916] __sys_sendmsg+0xe5/0x1b0 [ 3015.115281] ? __sys_sendmsg_sock+0x40/0x40 [ 3015.115682] ? rcu_read_lock_any_held+0x75/0xa0 [ 3015.116266] do_syscall_64+0x33/0x40 [ 3015.116636] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3015.117177] RIP: 0033:0x7fa05acd5b19 [ 3015.117549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3015.119383] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3015.120221] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 3015.120973] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 3015.121665] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3015.122409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3015.123130] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:07:11 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7, 0x1, 0x6, 0x89, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xa2, 0x6351, 0x7, 0x9, 0x8001, 0x0, 0x2, 0x0, 0xbe5, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800090100"/28], 0x1c}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000140)=0x40, 0x4) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x3c) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000015c0), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) bind$netlink(r5, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r4, 0x200, 0x70bd2d, 0x0, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000010) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) copy_file_range(r3, &(0x7f0000000380)=0x1ff, r2, &(0x7f00000003c0)=0x164920000000, 0x80000001, 0x0) r6 = socket(0x10, 0x5, 0xff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r7, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x880) 13:07:11 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 80) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:07:11 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:07:11 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:07:11 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 13:07:11 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)=""/76, &(0x7f0000000040)=0x4c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x00') bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x1, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 13:07:11 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:07:11 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r1 = syz_io_uring_complete(0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) fsetxattr$security_capability(r0, &(0x7f0000000180), &(0x7f00000001c0)=@v2={0x2000000, [{0x3, 0x401}, {0x9, 0x80000001}]}, 0x14, 0x1) r2 = syz_io_uring_complete(0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x408000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any}, {@fscache}, {@cachetag={'cachetag', 0x3d, '&\']$]'}}], [{@uid_lt={'uid<', 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) [ 3037.259753] FAULT_INJECTION: forcing a failure. [ 3037.259753] name failslab, interval 1, probability 0, space 0, times 0 [ 3037.260801] CPU: 0 PID: 38236 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 3037.261392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3037.262097] Call Trace: [ 3037.262338] dump_stack+0x107/0x167 [ 3037.262663] should_fail.cold+0x5/0xa [ 3037.263003] ? create_object.isra.0+0x3a/0xa20 [ 3037.263406] should_failslab+0x5/0x20 [ 3037.263739] kmem_cache_alloc+0x5b/0x310 [ 3037.264775] create_object.isra.0+0x3a/0xa20 [ 3037.265547] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3037.265992] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3037.266472] ? skb_segment+0x9d8/0x3aa0 [ 3037.266829] __alloc_skb+0xb1/0x5b0 [ 3037.267224] skb_segment+0x9d8/0x3aa0 [ 3037.267633] ? skb_zerocopy_iter_stream+0x800/0x800 [ 3037.268071] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3037.268886] ? SOFTIRQ_verbose+0x10/0x10 [ 3037.269297] __udp_gso_segment+0x11c6/0x1830 [ 3037.269677] ? __sk_receive_skb+0x830/0x830 [ 3037.270065] udp4_ufo_fragment+0x528/0x720 [ 3037.270492] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 3037.270925] inet_gso_segment+0x4fb/0x11a0 [ 3037.271363] skb_mac_gso_segment+0x273/0x570 [ 3037.271745] ? inet_sock_destruct+0x840/0x840 [ 3037.272223] ? skb_network_protocol+0x650/0x650 [ 3037.272633] ? skb_crc32c_csum_help+0x80/0x80 [ 3037.273020] ? lock_acquire+0x197/0x470 [ 3037.273408] ? __dev_queue_xmit+0x1c2/0x2710 [ 3037.273799] __skb_gso_segment+0x32d/0x6d0 [ 3037.274220] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 3037.274681] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 3037.275079] __dev_queue_xmit+0x87b/0x2710 [ 3037.275508] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 3037.275918] ? mark_held_locks+0x9e/0xe0 [ 3037.276364] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3037.276824] neigh_connected_output+0x382/0x4d0 [ 3037.277317] ip_finish_output2+0x6f1/0x21f0 [ 3037.277697] ? nf_hook_slow+0xfc/0x1e0 [ 3037.278036] ? ip_frag_next+0x9e0/0x9e0 [ 3037.278427] ? skb_gso_transport_seglen+0x1ca/0x360 [ 3037.278874] __ip_finish_output.part.0+0x5f3/0xb50 [ 3037.279353] ? ip_fragment.constprop.0+0x240/0x240 [ 3037.279770] ? nf_hook+0x510/0x510 [ 3037.280112] ip_output+0x2f7/0x600 [ 3037.280516] ip_send_skb+0xdd/0x260 [ 3037.280847] udp_send_skb+0x6da/0x11d0 [ 3037.281251] udp_sendmsg+0x139a/0x2160 [ 3037.281591] ? tracing_generic_entry_update+0x1ed/0x270 [ 3037.282049] ? ip_frag_init+0x350/0x350 [ 3037.282463] ? tracing_generic_entry_update+0x1ed/0x270 [ 3037.282932] ? udp_setsockopt+0xc0/0xc0 [ 3037.283333] ? perf_event_switch_output+0x7d0/0x7d0 [ 3037.283792] ? lock_chain_count+0x20/0x20 [ 3037.284239] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 3037.284672] ? lock_chain_count+0x20/0x20 [ 3037.285028] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 3037.285518] ? perf_trace_lock+0x2bd/0x490 [ 3037.285884] ? perf_swevent_event+0x6c/0x550 [ 3037.286329] ? __lockdep_reset_lock+0x180/0x180 [ 3037.286749] udpv6_sendmsg+0x1bcf/0x2ad0 [ 3037.287104] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 3037.287604] ? udp_v6_push_pending_frames+0x360/0x360 [ 3037.288044] ? SOFTIRQ_verbose+0x10/0x10 [ 3037.288496] ? lock_acquire+0x197/0x470 [ 3037.288840] ? find_held_lock+0x2c/0x110 [ 3037.289252] ? __might_fault+0xd3/0x180 [ 3037.289596] ? lock_downgrade+0x6d0/0x6d0 [ 3037.289961] ? lock_downgrade+0x6d0/0x6d0 [ 3037.290395] ? sock_has_perm+0x1ea/0x280 [ 3037.290748] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3037.291250] ? _copy_from_user+0xfb/0x1b0 [ 3037.291632] ? __import_iovec+0x458/0x590 [ 3037.291990] ? udp_v6_push_pending_frames+0x360/0x360 [ 3037.292536] inet6_sendmsg+0x105/0x140 [ 3037.292876] ? inet6_compat_ioctl+0x320/0x320 [ 3037.293312] __sock_sendmsg+0xf2/0x190 [ 3037.293654] ____sys_sendmsg+0x70d/0x870 [ 3037.294014] ? sock_write_iter+0x3d0/0x3d0 [ 3037.294424] ? do_recvmmsg+0x6d0/0x6d0 [ 3037.294772] ? perf_trace_lock+0x2bd/0x490 [ 3037.295138] ? SOFTIRQ_verbose+0x10/0x10 [ 3037.295571] ? __lockdep_reset_lock+0x180/0x180 [ 3037.295982] ___sys_sendmsg+0xf3/0x170 [ 3037.296403] ? sendmsg_copy_msghdr+0x160/0x160 [ 3037.296809] ? __fget_files+0x2cf/0x520 [ 3037.297193] ? lock_downgrade+0x6d0/0x6d0 [ 3037.297798] ? find_held_lock+0x2c/0x110 [ 3037.298590] ? __fget_files+0x2f8/0x520 [ 3037.299383] ? __fget_light+0xea/0x290 [ 3037.300082] __sys_sendmsg+0xe5/0x1b0 [ 3037.300491] ? __sys_sendmsg_sock+0x40/0x40 [ 3037.300863] ? rcu_read_lock_any_held+0x75/0xa0 [ 3037.301358] do_syscall_64+0x33/0x40 [ 3037.301682] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3037.302113] RIP: 0033:0x7fa05acd5b19 [ 3037.302478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3037.304062] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3037.304774] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 3037.305416] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 3037.306014] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3037.306653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3037.307322] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 [ 3037.353020] FAULT_INJECTION: forcing a failure. [ 3037.353020] name failslab, interval 1, probability 0, space 0, times 0 [ 3037.354245] CPU: 1 PID: 38243 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 3037.354879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3037.355634] Call Trace: [ 3037.355894] dump_stack+0x107/0x167 [ 3037.356269] should_fail.cold+0x5/0xa [ 3037.356627] ? create_object.isra.0+0x3a/0xa20 [ 3037.357056] should_failslab+0x5/0x20 [ 3037.357423] kmem_cache_alloc+0x5b/0x310 [ 3037.357803] ? mark_held_locks+0x9e/0xe0 [ 3037.358198] create_object.isra.0+0x3a/0xa20 [ 3037.358615] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3037.359097] kmem_cache_alloc_bulk+0x168/0x320 [ 3037.359549] io_submit_sqes+0x6fe6/0x8610 [ 3037.359945] ? percpu_ref_tryget_many+0x166/0x2d0 [ 3037.360452] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3037.360918] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3037.361387] ? lock_downgrade+0x6d0/0x6d0 [ 3037.361772] ? find_held_lock+0x2c/0x110 [ 3037.362164] ? io_submit_sqes+0x8610/0x8610 [ 3037.362594] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3037.363052] ? wait_for_completion_io+0x270/0x270 [ 3037.363521] ? rcu_read_lock_any_held+0x75/0xa0 [ 3037.363951] ? vfs_write+0x354/0xb10 [ 3037.364338] ? fput_many+0x2f/0x1a0 [ 3037.364685] ? ksys_write+0x1a9/0x260 [ 3037.365044] ? __ia32_sys_read+0xb0/0xb0 [ 3037.365454] do_syscall_64+0x33/0x40 [ 3037.365810] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3037.366297] RIP: 0033:0x7f938c584b19 [ 3037.366650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3037.368355] RSP: 002b:00007f9389afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3037.369059] RAX: ffffffffffffffda RBX: 00007f938c697f60 RCX: 00007f938c584b19 [ 3037.369730] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3037.370400] RBP: 00007f9389afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3037.371054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3037.371697] R13: 00007ffef13b286f R14: 00007f9389afa300 R15: 0000000000022000 [ 3037.373934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=38235 comm=syz-executor.4 13:07:12 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:07:12 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x400c2, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000040)) [ 3037.560340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=38235 comm=syz-executor.4 13:07:12 executing program 1: clone3(&(0x7f00000008c0)={0x3042100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r1 = socket$inet(0x2, 0x5, 0x9) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:07:12 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 81) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:07:12 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 13:07:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r4}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'syz_tun\x00'}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x45, 0xfc, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000540)={{0x0, 0x0, 0x800, 0x9, 0x2, 0x80000000000000, 0x6, 0x0, 0x9a, 0x0, 0x3, 0x0, 0x8, 0x4, 0x4}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 13:07:12 executing program 4: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x5, 0x3, &(0x7f0000000000)="bb4565ae0d51a1c1a198c8640e568fac4a1480cb5824db9e023cca718f3b1c586ab4f4a5896fd5f476af62b20a959edec3f808e05064a8cbcf8aabcc3789b05443e654fd80760e2e2275865e8c90ead063cddd2324f2456b6a2c1f526f2bbf94f577feed5bd84c7dd28809bc75e10ae43e828b31f0171fd42dc0", 0x77e8, 0x0, 0x1, {0x3}}, 0x9) r1 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x0, @fd=r1, 0xffff, 0x80, 0x4, 0x9, 0x0, {0x2}}, 0x1f) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x2010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, r0, &(0x7f0000000380)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4000, @fd_index=0x1, 0x4, &(0x7f0000000340)=[{&(0x7f0000000100)=""/180, 0xb4}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/26, 0x1a}], 0x4, 0x15}, 0x7ff) syz_io_uring_submit(r2, r0, &(0x7f00000003c0)=@IORING_OP_NOP={0x0, 0x2}, 0x80000000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000400)={0x9, {0x6, 0xfffffffffffff6cb, 0x5, 0xf55, 0x7}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={'veth0_to_bridge\x00', {0x2, 0x0, @initdev}}) r3 = syz_io_uring_setup(0x4712, &(0x7f0000000480)={0x0, 0x97f3, 0x20, 0x1, 0x4e}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000580)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2007, @fd_index=0x7, 0x800, 0x0, 0x0, 0x8}, 0x1) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1, 0x10, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r3, {0xffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000600)={{0x1, 0x1, 0x18, r6, {0xffffffffffff8000}}, './file0\x00'}) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x3fa, 0x200, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000740)={0x0, 'vlan1\x00', {0x1}}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r0, &(0x7f0000000780)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r8}}, 0x8000) io_uring_enter(r6, 0x7753, 0xfa13, 0x1, &(0x7f00000007c0)={[0x2]}, 0x8) [ 3037.892110] FAULT_INJECTION: forcing a failure. [ 3037.892110] name failslab, interval 1, probability 0, space 0, times 0 [ 3037.893118] CPU: 1 PID: 38625 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 3037.893766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3037.894454] Call Trace: [ 3037.894690] dump_stack+0x107/0x167 [ 3037.895005] should_fail.cold+0x5/0xa [ 3037.895335] ? create_object.isra.0+0x3a/0xa20 [ 3037.895731] should_failslab+0x5/0x20 [ 3037.896093] kmem_cache_alloc+0x5b/0x310 [ 3037.896496] ? mark_held_locks+0x9e/0xe0 [ 3037.896855] create_object.isra.0+0x3a/0xa20 [ 3037.897037] FAULT_INJECTION: forcing a failure. [ 3037.897037] name failslab, interval 1, probability 0, space 0, times 0 [ 3037.897233] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3037.897257] kmem_cache_alloc_bulk+0x168/0x320 [ 3037.899005] io_submit_sqes+0x6fe6/0x8610 [ 3037.899365] ? percpu_ref_tryget_many+0x166/0x2d0 [ 3037.899799] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3037.900240] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3037.900663] ? lock_downgrade+0x6d0/0x6d0 [ 3037.901024] ? find_held_lock+0x2c/0x110 [ 3037.901381] ? io_submit_sqes+0x8610/0x8610 [ 3037.901763] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3037.902181] ? wait_for_completion_io+0x270/0x270 [ 3037.902602] ? rcu_read_lock_any_held+0x75/0xa0 [ 3037.903001] ? vfs_write+0x354/0xb10 [ 3037.903325] ? fput_many+0x2f/0x1a0 [ 3037.903641] ? ksys_write+0x1a9/0x260 [ 3037.903971] ? __ia32_sys_read+0xb0/0xb0 [ 3037.904372] do_syscall_64+0x33/0x40 [ 3037.904692] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3037.905128] RIP: 0033:0x7f938c584b19 [ 3037.905450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3037.906994] RSP: 002b:00007f9389afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3037.907643] RAX: ffffffffffffffda RBX: 00007f938c697f60 RCX: 00007f938c584b19 [ 3037.908265] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3037.908868] RBP: 00007f9389afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3037.909472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3037.910077] R13: 00007ffef13b286f R14: 00007f9389afa300 R15: 0000000000022000 [ 3037.910722] CPU: 0 PID: 38628 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 3037.911544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3037.912364] Call Trace: [ 3037.912632] dump_stack+0x107/0x167 [ 3037.912984] should_fail.cold+0x5/0xa [ 3037.913808] ? trace_hardirqs_on+0x5b/0x180 [ 3037.914794] ? __alloc_skb+0x6d/0x5b0 [ 3037.915679] should_failslab+0x5/0x20 [ 3037.916356] kmem_cache_alloc_node+0x55/0x330 [ 3037.916799] __alloc_skb+0x6d/0x5b0 [ 3037.917210] skb_segment+0x9d8/0x3aa0 [ 3037.917675] ? skb_zerocopy_iter_stream+0x800/0x800 [ 3037.918242] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3037.918741] ? SOFTIRQ_verbose+0x10/0x10 [ 3037.919185] __udp_gso_segment+0x11c6/0x1830 [ 3037.919614] ? __sk_receive_skb+0x830/0x830 [ 3037.920044] udp4_ufo_fragment+0x528/0x720 [ 3037.920525] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 3037.921000] inet_gso_segment+0x4fb/0x11a0 [ 3037.921489] skb_mac_gso_segment+0x273/0x570 [ 3037.921909] ? inet_sock_destruct+0x840/0x840 [ 3037.922420] ? skb_network_protocol+0x650/0x650 [ 3037.922853] ? skb_crc32c_csum_help+0x80/0x80 [ 3037.923343] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3037.923846] __skb_gso_segment+0x32d/0x6d0 [ 3037.924332] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 3037.924823] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 3037.925322] __dev_queue_xmit+0x87b/0x2710 [ 3037.925751] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 3037.926290] ? mark_held_locks+0x9e/0xe0 [ 3037.926686] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3037.927238] neigh_connected_output+0x382/0x4d0 [ 3037.927711] ip_finish_output2+0x6f1/0x21f0 [ 3037.928182] ? nf_hook_slow+0xfc/0x1e0 [ 3037.928571] ? ip_frag_next+0x9e0/0x9e0 [ 3037.928947] ? skb_gso_transport_seglen+0x1ca/0x360 [ 3037.929490] __ip_finish_output.part.0+0x5f3/0xb50 [ 3037.929954] ? ip_fragment.constprop.0+0x240/0x240 [ 3037.930492] ? nf_hook+0x510/0x510 [ 3037.930860] ip_output+0x2f7/0x600 [ 3037.931268] ip_send_skb+0xdd/0x260 [ 3037.931620] udp_send_skb+0x6da/0x11d0 [ 3037.932013] udp_sendmsg+0x139a/0x2160 [ 3037.932443] ? tracing_generic_entry_update+0x1ed/0x270 [ 3037.932936] ? ip_frag_init+0x350/0x350 [ 3037.933363] ? tracing_generic_entry_update+0x1ed/0x270 [ 3037.933866] ? udp_setsockopt+0xc0/0xc0 [ 3037.934329] ? perf_event_switch_output+0x7d0/0x7d0 [ 3037.934831] ? lock_chain_count+0x20/0x20 [ 3037.935272] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 3037.935731] ? lock_chain_count+0x20/0x20 [ 3037.936120] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 3037.936655] ? perf_trace_lock+0x2bd/0x490 [ 3037.937051] ? perf_swevent_event+0x6c/0x550 [ 3037.937510] ? __lockdep_reset_lock+0x180/0x180 [ 3037.937965] udpv6_sendmsg+0x1bcf/0x2ad0 [ 3037.938439] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 3037.938925] ? udp_v6_push_pending_frames+0x360/0x360 [ 3037.939451] ? SOFTIRQ_verbose+0x10/0x10 [ 3037.939864] ? lock_acquire+0x197/0x470 [ 3037.940300] ? find_held_lock+0x2c/0x110 [ 3037.940693] ? __might_fault+0xd3/0x180 [ 3037.941063] ? lock_downgrade+0x6d0/0x6d0 [ 3037.941512] ? lock_downgrade+0x6d0/0x6d0 [ 3037.941906] ? sock_has_perm+0x1ea/0x280 [ 3037.942378] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3037.942867] ? _copy_from_user+0xfb/0x1b0 [ 3037.943340] ? __import_iovec+0x458/0x590 [ 3037.943730] ? udp_v6_push_pending_frames+0x360/0x360 [ 3037.944278] inet6_sendmsg+0x105/0x140 [ 3037.944643] ? inet6_compat_ioctl+0x320/0x320 [ 3037.945055] __sock_sendmsg+0xf2/0x190 [ 3037.945477] ____sys_sendmsg+0x70d/0x870 [ 3037.945864] ? sock_write_iter+0x3d0/0x3d0 [ 3037.946339] ? do_recvmmsg+0x6d0/0x6d0 [ 3037.946702] ? perf_trace_lock+0x2bd/0x490 [ 3037.947094] ? SOFTIRQ_verbose+0x10/0x10 [ 3037.947534] ? __lockdep_reset_lock+0x180/0x180 [ 3037.947976] ___sys_sendmsg+0xf3/0x170 [ 3037.948415] ? sendmsg_copy_msghdr+0x160/0x160 [ 3037.948849] ? __fget_files+0x2cf/0x520 [ 3037.949275] ? lock_downgrade+0x6d0/0x6d0 [ 3037.949665] ? find_held_lock+0x2c/0x110 [ 3037.950069] ? __fget_files+0x2f8/0x520 [ 3037.950550] ? __fget_light+0xea/0x290 [ 3037.950935] __sys_sendmsg+0xe5/0x1b0 [ 3037.951347] ? __sys_sendmsg_sock+0x40/0x40 [ 3037.951745] ? rcu_read_lock_any_held+0x75/0xa0 [ 3037.952306] do_syscall_64+0x33/0x40 [ 3037.952656] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3037.953120] RIP: 0033:0x7fa05acd5b19 [ 3037.953524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3037.955267] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3037.955968] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 3037.956681] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 3037.957376] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3037.958017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3037.958742] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:07:33 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r1 = socket$inet(0x2, 0x2, 0x0) dup2(r1, r1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:07:33 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:07:33 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x8440, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a237d779b4f25f709ca00"/26, 0x1a}, {0x0}], 0x2}, 0x0, 0x4000000}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000000080)) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:07:33 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x8, 0x0, 0x8c, 0x4, 0x0, 0x7, 0x88000, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x82, 0x4, @perf_config_ext={0x4, 0x1}, 0x8010, 0x5, 0x5, 0x9, 0x2, 0xc0, 0x3, 0x0, 0x3f, 0x0, 0x7}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2) pidfd_getfd(r0, r1, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:07:33 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:07:33 executing program 6: r0 = open(0x0, 0x301002, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x64210, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x1000}, 0xffffffffffffffff, 0x1, r0, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000300)={0x3, 0xffffffff, 0x8b7}) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x240, 0x0, 0x0, 0x9, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') epoll_create(0x10000) syz_mount_image$iso9660(0x0, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x6, &(0x7f0000001fc0)=[{0x0}, {0x0}, {&(0x7f0000000dc0)='.G34h', 0x5}, {0x0, 0x0, 0xec58}, {0x0}, {0x0}], 0x2000080, &(0x7f00000020c0)={[{@gid={'gid', 0x3d, 0xee01}}, {@cruft}], [{@dont_hash}, {@pcr={'pcr', 0x3d, 0xd}}, {@subj_type}, {@hash}, {@dont_hash}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}, 0x1c) listen(r3, 0x0) setxattr(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000340)=@known='system.advise\x00', &(0x7f0000000380)='\x00', 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0xffffffe0, 0x1, 0x0, 0x0, 0x0, 0x6}) 13:07:33 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 82) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:07:33 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) [ 3058.485690] FAULT_INJECTION: forcing a failure. [ 3058.485690] name failslab, interval 1, probability 0, space 0, times 0 [ 3058.486815] CPU: 1 PID: 38886 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 3058.487453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3058.488206] Call Trace: [ 3058.488457] dump_stack+0x107/0x167 [ 3058.488772] should_fail.cold+0x5/0xa [ 3058.489121] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3058.489611] ? create_object.isra.0+0x3a/0xa20 [ 3058.490024] should_failslab+0x5/0x20 [ 3058.490421] kmem_cache_alloc+0x5b/0x310 [ 3058.490767] ? mark_held_locks+0x9e/0xe0 [ 3058.491173] create_object.isra.0+0x3a/0xa20 [ 3058.491560] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3058.491995] kmem_cache_alloc_node+0x169/0x330 [ 3058.492471] __alloc_skb+0x6d/0x5b0 [ 3058.492792] skb_segment+0x9d8/0x3aa0 [ 3058.493115] ? lock_chain_count+0x20/0x20 [ 3058.493572] ? skb_zerocopy_iter_stream+0x800/0x800 [ 3058.493999] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3058.494532] ? SOFTIRQ_verbose+0x10/0x10 [ 3058.494887] __udp_gso_segment+0x11c6/0x1830 [ 3058.495325] ? __sk_receive_skb+0x830/0x830 [ 3058.495704] udp4_ufo_fragment+0x528/0x720 [ 3058.496071] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 3058.496591] inet_gso_segment+0x4fb/0x11a0 [ 3058.497013] skb_mac_gso_segment+0x273/0x570 [ 3058.497496] ? inet_sock_destruct+0x840/0x840 [ 3058.497924] ? skb_network_protocol+0x650/0x650 [ 3058.498458] ? skb_crc32c_csum_help+0x80/0x80 [ 3058.498887] ? lock_acquire+0x197/0x470 [ 3058.499310] ? __dev_queue_xmit+0x1c2/0x2710 [ 3058.499755] __skb_gso_segment+0x32d/0x6d0 [ 3058.500199] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 3058.500732] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 3058.501212] __dev_queue_xmit+0x87b/0x2710 [ 3058.501648] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 3058.502094] ? mark_held_locks+0x9e/0xe0 [ 3058.502530] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3058.503055] neigh_connected_output+0x382/0x4d0 [ 3058.503578] ip_finish_output2+0x6f1/0x21f0 [ 3058.504010] ? nf_hook_slow+0xfc/0x1e0 [ 3058.504437] ? ip_frag_next+0x9e0/0x9e0 [ 3058.504837] ? skb_gso_transport_seglen+0x1ca/0x360 [ 3058.505377] __ip_finish_output.part.0+0x5f3/0xb50 [ 3058.505870] ? ip_fragment.constprop.0+0x240/0x240 [ 3058.506382] ? nf_hook+0x510/0x510 [ 3058.506735] ip_output+0x2f7/0x600 [ 3058.507099] ip_send_skb+0xdd/0x260 [ 3058.507499] udp_send_skb+0x6da/0x11d0 [ 3058.507881] udp_sendmsg+0x139a/0x2160 [ 3058.508341] ? mark_lock+0xf5/0x2df0 [ 3058.508698] ? ip_frag_init+0x350/0x350 [ 3058.509100] ? lock_chain_count+0x20/0x20 [ 3058.509538] ? udp_setsockopt+0xc0/0xc0 [ 3058.509904] ? mark_lock+0xf5/0x2df0 [ 3058.510319] ? __lockdep_reset_lock+0x180/0x180 [ 3058.510755] ? lock_chain_count+0x20/0x20 [ 3058.511199] ? mark_lock+0xf5/0x2df0 [ 3058.511562] ? mark_lock+0xf5/0x2df0 [ 3058.511909] ? lock_chain_count+0x20/0x20 [ 3058.512369] ? __lock_acquire+0xbb1/0x5b00 [ 3058.512783] ? lock_chain_count+0x20/0x20 [ 3058.513256] ? perf_trace_lock+0xac/0x490 [ 3058.513668] ? SOFTIRQ_verbose+0x10/0x10 [ 3058.514049] ? __lockdep_reset_lock+0x180/0x180 [ 3058.514574] udpv6_sendmsg+0x1bcf/0x2ad0 [ 3058.514976] ? udp_v6_push_pending_frames+0x360/0x360 [ 3058.515525] ? SOFTIRQ_verbose+0x10/0x10 [ 3058.515916] ? mark_lock+0xf5/0x2df0 [ 3058.516325] ? lock_acquire+0x197/0x470 [ 3058.516720] ? find_held_lock+0x2c/0x110 [ 3058.517104] ? __might_fault+0xd3/0x180 [ 3058.517542] ? lock_downgrade+0x6d0/0x6d0 [ 3058.517938] ? lock_downgrade+0x6d0/0x6d0 [ 3058.518404] ? sock_has_perm+0x1ea/0x280 [ 3058.518823] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3058.519353] ? _copy_from_user+0xfb/0x1b0 [ 3058.519772] ? __import_iovec+0x458/0x590 [ 3058.520202] ? udp_v6_push_pending_frames+0x360/0x360 [ 3058.520719] inet6_sendmsg+0x105/0x140 [ 3058.521088] ? inet6_compat_ioctl+0x320/0x320 [ 3058.521557] __sock_sendmsg+0xf2/0x190 [ 3058.521942] ____sys_sendmsg+0x70d/0x870 [ 3058.522391] ? sock_write_iter+0x3d0/0x3d0 [ 3058.522787] ? do_recvmmsg+0x6d0/0x6d0 [ 3058.523254] ? SOFTIRQ_verbose+0x10/0x10 [ 3058.523635] ? lock_downgrade+0x6d0/0x6d0 [ 3058.524046] ? __lockdep_reset_lock+0x180/0x180 [ 3058.524538] ? SOFTIRQ_verbose+0x10/0x10 [ 3058.524955] ___sys_sendmsg+0xf3/0x170 [ 3058.525371] ? sendmsg_copy_msghdr+0x160/0x160 [ 3058.525807] ? __fget_files+0x2cf/0x520 [ 3058.528454] ? lock_downgrade+0x6d0/0x6d0 [ 3058.528814] ? find_held_lock+0x2c/0x110 [ 3058.529196] ? __fget_files+0x2f8/0x520 [ 3058.529548] ? __fget_light+0xea/0x290 [ 3058.529892] __sys_sendmsg+0xe5/0x1b0 [ 3058.530234] ? __sys_sendmsg_sock+0x40/0x40 [ 3058.530605] ? rcu_read_lock_any_held+0x75/0xa0 [ 3058.531031] do_syscall_64+0x33/0x40 [ 3058.531367] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3058.531809] RIP: 0033:0x7fa05acd5b19 [ 3058.532129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3058.533698] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3058.534347] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 3058.534961] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 3058.535577] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3058.536178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3058.536808] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 [ 3058.558116] FAULT_INJECTION: forcing a failure. [ 3058.558116] name failslab, interval 1, probability 0, space 0, times 0 [ 3058.559110] CPU: 1 PID: 38985 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 3058.559692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3058.560412] Call Trace: [ 3058.560642] dump_stack+0x107/0x167 [ 3058.560956] should_fail.cold+0x5/0xa [ 3058.561298] ? create_object.isra.0+0x3a/0xa20 [ 3058.561686] should_failslab+0x5/0x20 [ 3058.562011] kmem_cache_alloc+0x5b/0x310 [ 3058.562371] ? mark_held_locks+0x9e/0xe0 [ 3058.562721] create_object.isra.0+0x3a/0xa20 [ 3058.563098] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3058.563549] kmem_cache_alloc_bulk+0x168/0x320 [ 3058.563946] io_submit_sqes+0x6fe6/0x8610 [ 3058.564322] ? percpu_ref_tryget_many+0x166/0x2d0 [ 3058.564795] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3058.565321] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3058.565736] ? lock_downgrade+0x6d0/0x6d0 [ 3058.566350] ? find_held_lock+0x2c/0x110 [ 3058.566776] ? io_submit_sqes+0x8610/0x8610 [ 3058.567165] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3058.567596] ? wait_for_completion_io+0x270/0x270 [ 3058.568017] ? rcu_read_lock_any_held+0x75/0xa0 [ 3058.568440] ? vfs_write+0x354/0xb10 [ 3058.568761] ? fput_many+0x2f/0x1a0 [ 3058.569076] ? ksys_write+0x1a9/0x260 [ 3058.569404] ? __ia32_sys_read+0xb0/0xb0 [ 3058.569779] do_syscall_64+0x33/0x40 [ 3058.570102] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3058.570554] RIP: 0033:0x7f938c584b19 [ 3058.570874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3058.571611] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 4294967264 (only 16 groups) [ 3058.572439] RSP: 002b:00007f9389afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3058.572455] RAX: ffffffffffffffda RBX: 00007f938c697f60 RCX: 00007f938c584b19 [ 3058.572464] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3058.572472] RBP: 00007f9389afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3058.572480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3058.572489] R13: 00007ffef13b286f R14: 00007f9389afa300 R15: 0000000000022000 13:07:33 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:07:33 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) socket$netlink(0x10, 0x3, 0x13) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0xc040) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:07:33 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = memfd_create(&(0x7f0000000000)='\x06\xff\xff\xe0\x01\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x53, 0xe21, 0x0, 0x0, {0x40}}, 0x14}}, 0x0) fallocate(r2, 0x26, 0x8e2, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) fsopen(&(0x7f00000001c0)='logfs\x00', 0x1) fallocate(r0, 0x79, 0x80, 0x80) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x4004850) finit_module(r1, 0x0, 0x0) 13:07:33 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {0xfffffff9}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:07:33 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 13:07:33 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:07:33 executing program 6: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000005200210e000000000000000000000000c088e8856ffe02699563a33fc16f145a537c7f9fabbf8f8f7ee53e3f88f26dd3aa3dba48c0d52142dfd374809f63459c892977b5aa734cb43197f45edb5aac30d80801d9fc53a7b1feb1d85463f5013c09666c2e1fe8e98a1f94daad77e45653aea13031b3540c605bde30e1780d9a23a66b5cb0e57b89356b569d0d176542e119e4aac9c2cb78973d58f4977e6e3f32464b3b2e35f2f835d2c074a564367f8ed11d58821d0192fc9ec340ac19f6ef91f610"], 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) flock(r2, 0x2) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="0823f99f59fdfb0f090872bc6e372b5be1c083c917962001101109582407a52ba5cdbdd52ca6663547db0743962133aadc96c1c88afb1886744cec00fc37d92b2ee3024ca2dc4914a795a25f71b9a23c1c6ad7a4f0d1"], 0xf) fallocate(r0, 0x10, 0x0, 0x18000) close_range(r2, r1, 0x2) 13:07:33 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 83) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) [ 3058.798992] kauditd_printk_skb: 23 callbacks suppressed [ 3058.799009] audit: type=1400 audit(1724245653.465:431): avc: denied { module_load } for pid=39197 comm="syz-executor.4" path=2F6D656D66643A06FFFFE001202864656C6574656429 dev="hugetlbfs" ino=45289 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:hugetlbfs_t:s0 tclass=system permissive=1 [ 3058.818775] Module has invalid ELF structures [ 3058.868029] FAULT_INJECTION: forcing a failure. [ 3058.868029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3058.869205] CPU: 1 PID: 39208 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 3058.869812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3058.870549] Call Trace: [ 3058.870800] dump_stack+0x107/0x167 [ 3058.871127] should_fail.cold+0x5/0xa [ 3058.871460] _copy_from_user+0x2e/0x1b0 [ 3058.871815] move_addr_to_kernel.part.0+0x31/0x110 [ 3058.872277] move_addr_to_kernel+0x4f/0x70 [ 3058.872681] io_connect+0x47a/0x610 [ 3058.872997] ? io_prep_rw+0x1050/0x1050 [ 3058.873354] ? __lockdep_reset_lock+0x180/0x180 [ 3058.873757] ? lock_acquire+0x197/0x470 [ 3058.874104] ? __lock_acquire+0xbb1/0x5b00 [ 3058.874483] io_issue_sqe+0x1611/0x77b0 [ 3058.874831] ? perf_trace_lock+0xac/0x490 [ 3058.875184] ? SOFTIRQ_verbose+0x10/0x10 [ 3058.875543] ? lock_chain_count+0x20/0x20 [ 3058.875900] ? io_connect+0x610/0x610 [ 3058.876233] ? lock_acquire+0x197/0x470 [ 3058.876604] ? find_held_lock+0x2c/0x110 [ 3058.876959] ? __fget_files+0x2cf/0x520 [ 3058.877299] ? lock_downgrade+0x6d0/0x6d0 [ 3058.877672] __io_queue_sqe+0x90/0x9d0 [ 3058.878012] ? io_issue_sqe+0x77b0/0x77b0 [ 3058.878364] ? __fget_files+0x2f8/0x520 [ 3058.878733] io_submit_sqes+0x44aa/0x8610 [ 3058.879117] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3058.879560] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3058.879976] ? lock_downgrade+0x6d0/0x6d0 [ 3058.880336] ? find_held_lock+0x2c/0x110 [ 3058.880709] ? io_submit_sqes+0x8610/0x8610 [ 3058.881202] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3058.881636] ? wait_for_completion_io+0x270/0x270 [ 3058.882050] ? rcu_read_lock_any_held+0x75/0xa0 [ 3058.882443] ? vfs_write+0x354/0xb10 [ 3058.882779] ? fput_many+0x2f/0x1a0 [ 3058.883117] ? ksys_write+0x1a9/0x260 [ 3058.883545] ? __ia32_sys_read+0xb0/0xb0 [ 3058.883995] do_syscall_64+0x33/0x40 [ 3058.884464] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3058.884914] RIP: 0033:0x7f938c584b19 [ 3058.885235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3058.886782] RSP: 002b:00007f9389afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3058.887441] RAX: ffffffffffffffda RBX: 00007f938c697f60 RCX: 00007f938c584b19 [ 3058.888051] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3058.888831] RBP: 00007f9389afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3058.889448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3058.890065] R13: 00007ffef13b286f R14: 00007f9389afa300 R15: 0000000000022000 13:07:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x200, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x240488c0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001e40)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0}}, {{&(0x7f0000001440)={0xa, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x0) [ 3058.971441] FAULT_INJECTION: forcing a failure. [ 3058.971441] name failslab, interval 1, probability 0, space 0, times 0 [ 3058.972692] CPU: 1 PID: 39365 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 3058.973440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3058.974285] Call Trace: [ 3058.974576] dump_stack+0x107/0x167 [ 3058.975027] should_fail.cold+0x5/0xa [ 3058.975424] should_failslab+0x5/0x20 [ 3058.975754] __kmalloc_node_track_caller+0x74/0x3b0 [ 3058.976344] ? skb_segment+0x9d8/0x3aa0 [ 3058.976830] __alloc_skb+0xb1/0x5b0 [ 3058.977165] skb_segment+0x9d8/0x3aa0 [ 3058.977666] ? lock_chain_count+0x20/0x20 [ 3058.978126] ? skb_zerocopy_iter_stream+0x800/0x800 [ 3058.978557] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3058.979178] ? SOFTIRQ_verbose+0x10/0x10 [ 3058.979557] __udp_gso_segment+0x11c6/0x1830 [ 3058.980105] ? __sk_receive_skb+0x830/0x830 [ 3058.980504] udp4_ufo_fragment+0x528/0x720 [ 3058.981013] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 3058.981586] inet_gso_segment+0x4fb/0x11a0 [ 3058.981977] skb_mac_gso_segment+0x273/0x570 [ 3058.982408] ? inet_sock_destruct+0x840/0x840 [ 3058.982791] ? skb_network_protocol+0x650/0x650 [ 3058.983225] ? skb_crc32c_csum_help+0x80/0x80 [ 3058.983690] ? lock_acquire+0x197/0x470 [ 3058.984030] ? __dev_queue_xmit+0x1c2/0x2710 [ 3058.984539] __skb_gso_segment+0x32d/0x6d0 [ 3058.985022] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 3058.985549] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 3058.985944] __dev_queue_xmit+0x87b/0x2710 [ 3058.986338] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 3058.986834] ? mark_held_locks+0x9e/0xe0 [ 3058.987286] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3058.987754] neigh_connected_output+0x382/0x4d0 [ 3058.988259] ip_finish_output2+0x6f1/0x21f0 [ 3058.988741] ? nf_hook_slow+0xfc/0x1e0 [ 3058.989188] ? ip_frag_next+0x9e0/0x9e0 [ 3058.989533] ? skb_gso_transport_seglen+0x1ca/0x360 [ 3058.989985] __ip_finish_output.part.0+0x5f3/0xb50 [ 3058.990415] ? ip_fragment.constprop.0+0x240/0x240 [ 3058.990966] ? nf_hook+0x510/0x510 [ 3058.991286] ip_output+0x2f7/0x600 [ 3058.991708] ip_send_skb+0xdd/0x260 [ 3058.992122] udp_send_skb+0x6da/0x11d0 [ 3058.992591] udp_sendmsg+0x139a/0x2160 [ 3058.992941] ? mark_lock+0xf5/0x2df0 [ 3058.993265] ? ip_frag_init+0x350/0x350 [ 3058.993608] ? lock_chain_count+0x20/0x20 [ 3058.994105] ? udp_setsockopt+0xc0/0xc0 [ 3058.994443] ? mark_lock+0xf5/0x2df0 [ 3058.994768] ? __lockdep_reset_lock+0x180/0x180 [ 3058.995181] ? lock_chain_count+0x20/0x20 [ 3058.995683] ? mark_lock+0xf5/0x2df0 [ 3058.996022] ? mark_lock+0xf5/0x2df0 [ 3058.996397] ? lock_chain_count+0x20/0x20 [ 3058.996866] ? __lock_acquire+0xbb1/0x5b00 [ 3058.997369] ? lock_chain_count+0x20/0x20 [ 3058.997739] ? perf_trace_lock+0xac/0x490 [ 3058.998108] ? SOFTIRQ_verbose+0x10/0x10 [ 3058.998455] ? __lockdep_reset_lock+0x180/0x180 [ 3058.998991] udpv6_sendmsg+0x1bcf/0x2ad0 [ 3058.999373] ? udp_v6_push_pending_frames+0x360/0x360 [ 3058.999905] ? SOFTIRQ_verbose+0x10/0x10 [ 3059.000441] ? mark_lock+0xf5/0x2df0 [ 3059.000807] ? lock_acquire+0x197/0x470 [ 3059.001148] ? find_held_lock+0x2c/0x110 [ 3059.001649] ? __might_fault+0xd3/0x180 [ 3059.001993] ? lock_downgrade+0x6d0/0x6d0 [ 3059.002369] ? lock_downgrade+0x6d0/0x6d0 [ 3059.002729] ? sock_has_perm+0x1ea/0x280 [ 3059.003078] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3059.003670] ? _copy_from_user+0xfb/0x1b0 [ 3059.004042] ? __import_iovec+0x458/0x590 [ 3059.004522] ? udp_v6_push_pending_frames+0x360/0x360 [ 3059.005147] inet6_sendmsg+0x105/0x140 [ 3059.005555] ? inet6_compat_ioctl+0x320/0x320 [ 3059.005939] __sock_sendmsg+0xf2/0x190 [ 3059.006278] ____sys_sendmsg+0x70d/0x870 [ 3059.006670] ? sock_write_iter+0x3d0/0x3d0 [ 3059.007098] ? do_recvmmsg+0x6d0/0x6d0 [ 3059.007549] ? SOFTIRQ_verbose+0x10/0x10 [ 3059.008042] ? lock_downgrade+0x6d0/0x6d0 [ 3059.008471] ? __lockdep_reset_lock+0x180/0x180 [ 3059.009011] ? SOFTIRQ_verbose+0x10/0x10 [ 3059.009366] ___sys_sendmsg+0xf3/0x170 [ 3059.009749] ? sendmsg_copy_msghdr+0x160/0x160 [ 3059.010253] ? __fget_files+0x2cf/0x520 [ 3059.010683] ? lock_downgrade+0x6d0/0x6d0 [ 3059.011164] ? find_held_lock+0x2c/0x110 [ 3059.011604] ? __fget_files+0x2f8/0x520 [ 3059.011979] ? __fget_light+0xea/0x290 [ 3059.012430] __sys_sendmsg+0xe5/0x1b0 [ 3059.012881] ? __sys_sendmsg_sock+0x40/0x40 [ 3059.013373] ? rcu_read_lock_any_held+0x75/0xa0 [ 3059.013863] do_syscall_64+0x33/0x40 [ 3059.014198] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3059.014771] RIP: 0033:0x7fa05acd5b19 [ 3059.015108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3059.017018] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3059.017679] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 3059.018436] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 3059.019151] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3059.019855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3059.020675] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:07:33 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 13:07:33 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:07:33 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) [ 3059.188270] FAULT_INJECTION: forcing a failure. [ 3059.188270] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3059.190026] CPU: 1 PID: 39522 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 3059.190780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3059.191477] Call Trace: [ 3059.191742] dump_stack+0x107/0x167 [ 3059.192083] should_fail.cold+0x5/0xa [ 3059.192439] __alloc_pages_nodemask+0x182/0x600 [ 3059.192855] ? lock_acquire+0x197/0x470 [ 3059.193203] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3059.193715] ? find_held_lock+0x2c/0x110 [ 3059.194088] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3059.194536] ? lock_downgrade+0x6d0/0x6d0 [ 3059.194904] ? mark_held_locks+0x9e/0xe0 [ 3059.195260] alloc_pages_current+0x187/0x280 [ 3059.195637] ? count_memcg_event_mm.part.0+0x2df/0x2f0 [ 3059.196235] ? replace_page_cache_page+0x1200/0x1200 [ 3059.196723] pte_alloc_one+0x16/0x1a0 [ 3059.197207] ? replace_page_cache_page+0x1200/0x1200 [ 3059.197641] handle_mm_fault+0x2ab2/0x3500 [ 3059.198006] ? __lock_acquire+0x1657/0x5b00 [ 3059.198394] ? __pmd_alloc+0x5e0/0x5e0 [ 3059.198737] ? vmacache_find+0x55/0x2a0 [ 3059.199088] do_user_addr_fault+0x56e/0xc60 [ 3059.199484] exc_page_fault+0xa2/0x1a0 [ 3059.199821] asm_exc_page_fault+0x1e/0x30 [ 3059.200192] RIP: 0010:copy_user_generic_string+0x2c/0x40 [ 3059.200669] Code: cb 83 fa 08 72 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 48 a5 89 d1 f3 a4 31 c0 0f 01 ca e9 43 e9 1d 02 0f 1f 00 0f 01 [ 3059.202220] RSP: 0018:ffff888060fbf7a8 EFLAGS: 00050246 [ 3059.202687] RAX: 0000000000000001 RBX: 0000000000000080 RCX: 0000000000000010 [ 3059.203289] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffff888060fbf878 [ 3059.204019] RBP: ffff888060fbf878 R08: 0000000000000001 R09: ffff888060fbf8f7 [ 3059.204643] R10: ffffed100c1f7f1e R11: 0000000000000001 R12: 0000000020000100 [ 3059.205245] R13: 0000000020000080 R14: 00007ffffffff000 R15: 0000000000000000 [ 3059.206090] _copy_from_user+0x172/0x1b0 [ 3059.206444] move_addr_to_kernel.part.0+0x31/0x110 [ 3059.206878] move_addr_to_kernel+0x4f/0x70 [ 3059.207242] io_connect+0x47a/0x610 [ 3059.207570] ? io_prep_rw+0x1050/0x1050 [ 3059.207913] ? __lockdep_reset_lock+0x180/0x180 [ 3059.208324] ? lock_acquire+0x197/0x470 [ 3059.208694] ? __lock_acquire+0xbb1/0x5b00 [ 3059.209063] io_issue_sqe+0x1611/0x77b0 [ 3059.209412] ? perf_trace_lock+0xac/0x490 [ 3059.209779] ? SOFTIRQ_verbose+0x10/0x10 [ 3059.210262] ? lock_chain_count+0x20/0x20 [ 3059.210623] ? io_connect+0x610/0x610 [ 3059.211125] ? lock_acquire+0x197/0x470 [ 3059.211517] ? find_held_lock+0x2c/0x110 [ 3059.211884] ? __fget_files+0x2cf/0x520 [ 3059.212224] ? lock_downgrade+0x6d0/0x6d0 [ 3059.212603] __io_queue_sqe+0x90/0x9d0 [ 3059.212956] ? io_issue_sqe+0x77b0/0x77b0 [ 3059.213309] ? __fget_files+0x2f8/0x520 [ 3059.213665] io_submit_sqes+0x44aa/0x8610 [ 3059.214062] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3059.214487] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3059.214918] ? lock_downgrade+0x6d0/0x6d0 [ 3059.215383] ? find_held_lock+0x2c/0x110 [ 3059.215830] ? io_submit_sqes+0x8610/0x8610 [ 3059.216326] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3059.216751] ? wait_for_completion_io+0x270/0x270 [ 3059.217181] ? rcu_read_lock_any_held+0x75/0xa0 [ 3059.217579] ? vfs_write+0x354/0xb10 [ 3059.217902] ? fput_many+0x2f/0x1a0 [ 3059.218232] ? ksys_write+0x1a9/0x260 [ 3059.218560] ? __ia32_sys_read+0xb0/0xb0 [ 3059.218921] do_syscall_64+0x33/0x40 [ 3059.219256] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3059.219804] RIP: 0033:0x7f938c584b19 [ 3059.220126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3059.221905] RSP: 002b:00007f9389afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3059.222565] RAX: ffffffffffffffda RBX: 00007f938c697f60 RCX: 00007f938c584b19 [ 3059.223176] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3059.223793] RBP: 00007f9389afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3059.224540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3059.225306] R13: 00007ffef13b286f R14: 00007f9389afa300 R15: 0000000000022000 13:07:54 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 84) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:07:54 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = inotify_init1(0x100800) inotify_rm_watch(r1, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'veth1_vlan\x00', {}, 0xa92}) 13:07:54 executing program 3: pipe2(&(0x7f0000000040), 0x0) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:07:54 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 13:07:54 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r2, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000b80), 0x8, 0x0) mincore(&(0x7f0000b1c000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/108) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000140)) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r7) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in, @in=@remote}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) keyctl$chown(0x4, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, r6, r6, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000380)=""/88, 0x58}, {&(0x7f0000000400)=""/118, 0x76}], 0x100000000000030a) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 13:07:54 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) 13:07:54 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:07:54 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f00000002c0)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000020301030000000000000000030000010800054000000002fa87704b1fe6ba482cbf920a223ad8a503e758d716825b3182fff50e0e66b53b5aec36804949e94c09837216e4269cd88a86d7135970caa01aa327d407fae3e9eea06607212aa56a846816a71bb084b7a274d7c70d0e79e09a13953e691aa19d7de7993cce02e7484942d2fd79110f"], 0x1c}}, 0x4000004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7f00000053e96a6de642c87aa18a2bf7a013856fb2215bd37753b2e3d196fe2cb7b511cfbe217210bff88142eef017ab33e878fb6c23d99ec5a0218bc268ee2d1c1132b0a4ec487de992969ee3f26717b6db1d88ac51eb92c748823ff564fa7f802b9d777d857ec11c706bf190dae99002ca04e421e0305e18883661faf8ef2e7d86ad02ce3c501300b40bb0a32d4fae3b6a07165ff6fc3393cb2811a7cf05f9f77dc003fe754bcde2ba19ab30a26d852b4664393725b38bc0579934e8", @ANYRES16=r3, @ANYBLOB="2f77000000000000000001000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) timer_gettime(r1, &(0x7f00000003c0)) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000300)={{r5, r6+10000000}, {0x77359400}}, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB="0d00a7103b04b56d5997a96b", @ANYRES32=r0, @ANYRES32, @ANYBLOB="7e693c51c33150762720dc9b7b0b884139f55865d38066e68f42f8df3bff231ddbedce14608b4991d1eff491"]) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3080.333713] FAULT_INJECTION: forcing a failure. [ 3080.333713] name failslab, interval 1, probability 0, space 0, times 0 [ 3080.334769] CPU: 0 PID: 39647 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 3080.335360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3080.336058] Call Trace: [ 3080.336299] dump_stack+0x107/0x167 [ 3080.336506] FAULT_INJECTION: forcing a failure. [ 3080.336506] name failslab, interval 1, probability 0, space 0, times 0 [ 3080.336632] should_fail.cold+0x5/0xa [ 3080.338005] ? ptlock_alloc+0x1d/0x70 [ 3080.338343] should_failslab+0x5/0x20 [ 3080.338676] kmem_cache_alloc+0x5b/0x310 [ 3080.339042] ptlock_alloc+0x1d/0x70 [ 3080.339368] pte_alloc_one+0x68/0x1a0 [ 3080.339703] ? replace_page_cache_page+0x1200/0x1200 [ 3080.340142] handle_mm_fault+0x2ab2/0x3500 [ 3080.340527] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 3080.341000] ? __pmd_alloc+0x5e0/0x5e0 [ 3080.341952] ? vmacache_find+0x55/0x2a0 [ 3080.342852] do_user_addr_fault+0x56e/0xc60 [ 3080.343809] exc_page_fault+0xa2/0x1a0 [ 3080.344671] asm_exc_page_fault+0x1e/0x30 [ 3080.345581] RIP: 0010:copy_user_generic_string+0x2c/0x40 [ 3080.346757] Code: cb 83 fa 08 72 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 48 a5 89 d1 f3 a4 31 c0 0f 01 ca e9 43 e9 1d 02 0f 1f 00 0f 01 [ 3080.350771] RSP: 0018:ffff8880614477a8 EFLAGS: 00050246 [ 3080.351928] RAX: 0000000000000001 RBX: 0000000000000080 RCX: 0000000000000010 [ 3080.353489] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffff888061447878 [ 3080.355044] RBP: ffff888061447878 R08: 0000000000000001 R09: ffff8880614478f7 [ 3080.356600] R10: ffffed100c288f1e R11: 0000000000000001 R12: 0000000020000100 [ 3080.358160] R13: 0000000020000080 R14: 00007ffffffff000 R15: 0000000000000000 [ 3080.359764] _copy_from_user+0x172/0x1b0 [ 3080.360670] move_addr_to_kernel.part.0+0x31/0x110 [ 3080.361737] move_addr_to_kernel+0x4f/0x70 [ 3080.362660] io_connect+0x47a/0x610 [ 3080.363462] ? io_prep_rw+0x1050/0x1050 [ 3080.364332] ? __lockdep_reset_lock+0x180/0x180 [ 3080.365366] ? lock_acquire+0x197/0x470 [ 3080.366260] io_issue_sqe+0x1611/0x77b0 [ 3080.367132] ? perf_trace_lock+0x2bd/0x490 [ 3080.368050] ? SOFTIRQ_verbose+0x10/0x10 [ 3080.368958] ? io_connect+0x610/0x610 [ 3080.369795] ? lock_acquire+0x197/0x470 [ 3080.370656] ? find_held_lock+0x2c/0x110 [ 3080.371557] ? __fget_files+0x2cf/0x520 [ 3080.372419] ? lock_downgrade+0x6d0/0x6d0 [ 3080.373346] __io_queue_sqe+0x90/0x9d0 [ 3080.374200] ? io_issue_sqe+0x77b0/0x77b0 [ 3080.375091] ? __fget_files+0x2f8/0x520 [ 3080.375980] io_submit_sqes+0x44aa/0x8610 [ 3080.376944] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3080.378034] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3080.379088] ? lock_downgrade+0x6d0/0x6d0 [ 3080.379985] ? find_held_lock+0x2c/0x110 [ 3080.380891] ? io_submit_sqes+0x8610/0x8610 [ 3080.381839] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3080.382897] ? wait_for_completion_io+0x270/0x270 [ 3080.383952] ? rcu_read_lock_any_held+0x75/0xa0 [ 3080.384972] ? vfs_write+0x354/0xb10 [ 3080.385785] ? fput_many+0x2f/0x1a0 [ 3080.386578] ? ksys_write+0x1a9/0x260 [ 3080.387404] ? __ia32_sys_read+0xb0/0xb0 [ 3080.388302] do_syscall_64+0x33/0x40 [ 3080.389120] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3080.390231] RIP: 0033:0x7f938c584b19 [ 3080.391036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3080.395036] RSP: 002b:00007f9389afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3080.396707] RAX: ffffffffffffffda RBX: 00007f938c697f60 RCX: 00007f938c584b19 [ 3080.398262] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3080.399825] RBP: 00007f9389afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3080.401380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3080.402927] R13: 00007ffef13b286f R14: 00007f9389afa300 R15: 0000000000022000 [ 3080.404528] CPU: 1 PID: 39646 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 3080.405305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3080.406100] Call Trace: [ 3080.406421] dump_stack+0x107/0x167 [ 3080.406779] should_fail.cold+0x5/0xa [ 3080.407214] ? create_object.isra.0+0x3a/0xa20 [ 3080.407662] should_failslab+0x5/0x20 [ 3080.408039] kmem_cache_alloc+0x5b/0x310 [ 3080.408493] create_object.isra.0+0x3a/0xa20 [ 3080.408938] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3080.409481] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3080.409986] ? skb_segment+0x9d8/0x3aa0 [ 3080.410423] __alloc_skb+0xb1/0x5b0 [ 3080.410792] skb_segment+0x9d8/0x3aa0 [ 3080.411269] ? lock_chain_count+0x20/0x20 [ 3080.411717] ? skb_zerocopy_iter_stream+0x800/0x800 [ 3080.412242] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3080.412784] ? SOFTIRQ_verbose+0x10/0x10 [ 3080.413230] __udp_gso_segment+0x11c6/0x1830 [ 3080.413670] ? __sk_receive_skb+0x830/0x830 [ 3080.414115] udp4_ufo_fragment+0x528/0x720 [ 3080.414564] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 3080.415039] inet_gso_segment+0x4fb/0x11a0 [ 3080.415503] skb_mac_gso_segment+0x273/0x570 [ 3080.415920] ? inet_sock_destruct+0x840/0x840 [ 3080.416423] ? skb_network_protocol+0x650/0x650 [ 3080.416884] ? skb_crc32c_csum_help+0x80/0x80 [ 3080.417360] ? lock_acquire+0x197/0x470 [ 3080.417749] ? __dev_queue_xmit+0x1c2/0x2710 [ 3080.418237] __skb_gso_segment+0x32d/0x6d0 [ 3080.418652] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 3080.419212] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 3080.419657] __dev_queue_xmit+0x87b/0x2710 [ 3080.420068] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 3080.420615] ? mark_held_locks+0x9e/0xe0 [ 3080.421024] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3080.421582] neigh_connected_output+0x382/0x4d0 [ 3080.422044] ip_finish_output2+0x6f1/0x21f0 [ 3080.422509] ? nf_hook_slow+0xfc/0x1e0 [ 3080.422886] ? ip_frag_next+0x9e0/0x9e0 [ 3080.423313] ? skb_gso_transport_seglen+0x1ca/0x360 [ 3080.423799] __ip_finish_output.part.0+0x5f3/0xb50 [ 3080.424348] ? ip_fragment.constprop.0+0x240/0x240 [ 3080.424839] ? nf_hook+0x510/0x510 [ 3080.425246] ip_output+0x2f7/0x600 [ 3080.425591] ip_send_skb+0xdd/0x260 [ 3080.425954] udp_send_skb+0x6da/0x11d0 [ 3080.426391] udp_sendmsg+0x139a/0x2160 [ 3080.426757] ? mark_lock+0xf5/0x2df0 [ 3080.427167] ? ip_frag_init+0x350/0x350 [ 3080.427575] ? lock_chain_count+0x20/0x20 [ 3080.427977] ? udp_setsockopt+0xc0/0xc0 [ 3080.428432] ? mark_lock+0xf5/0x2df0 [ 3080.428813] ? __lockdep_reset_lock+0x180/0x180 [ 3080.429319] ? lock_chain_count+0x20/0x20 [ 3080.429711] ? mark_lock+0xf5/0x2df0 [ 3080.430072] ? mark_lock+0xf5/0x2df0 [ 3080.430471] ? lock_chain_count+0x20/0x20 [ 3080.430849] ? __lock_acquire+0xbb1/0x5b00 [ 3080.431256] ? lock_chain_count+0x20/0x20 [ 3080.431624] ? perf_trace_lock+0xac/0x490 [ 3080.431974] ? SOFTIRQ_verbose+0x10/0x10 [ 3080.432385] ? __lockdep_reset_lock+0x180/0x180 [ 3080.432812] udpv6_sendmsg+0x1bcf/0x2ad0 [ 3080.433222] ? udp_v6_push_pending_frames+0x360/0x360 [ 3080.433655] ? SOFTIRQ_verbose+0x10/0x10 [ 3080.434003] ? mark_lock+0xf5/0x2df0 [ 3080.434376] ? lock_acquire+0x197/0x470 [ 3080.434713] ? find_held_lock+0x2c/0x110 [ 3080.435063] ? __might_fault+0xd3/0x180 [ 3080.435447] ? lock_downgrade+0x6d0/0x6d0 [ 3080.435803] ? lock_downgrade+0x6d0/0x6d0 [ 3080.436225] ? sock_has_perm+0x1ea/0x280 [ 3080.436584] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3080.437025] ? _copy_from_user+0xfb/0x1b0 [ 3080.437438] ? __import_iovec+0x458/0x590 [ 3080.437792] ? udp_v6_push_pending_frames+0x360/0x360 [ 3080.438280] inet6_sendmsg+0x105/0x140 [ 3080.438614] ? inet6_compat_ioctl+0x320/0x320 [ 3080.438992] __sock_sendmsg+0xf2/0x190 [ 3080.439371] ____sys_sendmsg+0x70d/0x870 [ 3080.439721] ? sock_write_iter+0x3d0/0x3d0 [ 3080.440076] ? do_recvmmsg+0x6d0/0x6d0 [ 3080.440481] ? SOFTIRQ_verbose+0x10/0x10 [ 3080.440887] ? lock_downgrade+0x6d0/0x6d0 [ 3080.441346] ? __lockdep_reset_lock+0x180/0x180 [ 3080.441796] ? SOFTIRQ_verbose+0x10/0x10 [ 3080.442235] ___sys_sendmsg+0xf3/0x170 [ 3080.442611] ? sendmsg_copy_msghdr+0x160/0x160 [ 3080.443064] ? __fget_files+0x2cf/0x520 [ 3080.443488] ? lock_downgrade+0x6d0/0x6d0 [ 3080.443888] ? find_held_lock+0x2c/0x110 [ 3080.444331] ? __fget_files+0x2f8/0x520 [ 3080.444753] ? __fget_light+0xea/0x290 [ 3080.445218] __sys_sendmsg+0xe5/0x1b0 [ 3080.445589] ? __sys_sendmsg_sock+0x40/0x40 [ 3080.446009] ? rcu_read_lock_any_held+0x75/0xa0 [ 3080.446534] do_syscall_64+0x33/0x40 [ 3080.446898] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3080.447434] RIP: 0033:0x7fa05acd5b19 [ 3080.447809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3080.449644] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3080.450443] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 3080.451160] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 3080.451857] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3080.452591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3080.453314] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:07:55 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) [ 3080.632434] FAULT_INJECTION: forcing a failure. [ 3080.632434] name failslab, interval 1, probability 0, space 0, times 0 [ 3080.633636] CPU: 1 PID: 39832 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 3080.634367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3080.635213] Call Trace: [ 3080.635513] dump_stack+0x107/0x167 [ 3080.635908] should_fail.cold+0x5/0xa [ 3080.636315] ? create_object.isra.0+0x3a/0xa20 [ 3080.636822] should_failslab+0x5/0x20 [ 3080.637195] kmem_cache_alloc+0x5b/0x310 [ 3080.637589] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3080.638177] create_object.isra.0+0x3a/0xa20 [ 3080.638623] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3080.639130] kmem_cache_alloc+0x159/0x310 [ 3080.639541] ptlock_alloc+0x1d/0x70 [ 3080.639900] pte_alloc_one+0x68/0x1a0 [ 3080.640313] ? replace_page_cache_page+0x1200/0x1200 [ 3080.640853] handle_mm_fault+0x2ab2/0x3500 [ 3080.641305] ? __lock_acquire+0x1657/0x5b00 [ 3080.641747] ? __pmd_alloc+0x5e0/0x5e0 [ 3080.642127] ? vmacache_find+0x55/0x2a0 [ 3080.642527] do_user_addr_fault+0x56e/0xc60 [ 3080.642966] exc_page_fault+0xa2/0x1a0 [ 3080.643349] asm_exc_page_fault+0x1e/0x30 [ 3080.643745] RIP: 0010:copy_user_generic_string+0x2c/0x40 [ 3080.644270] Code: cb 83 fa 08 72 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 48 a5 89 d1 f3 a4 31 c0 0f 01 ca e9 43 e9 1d 02 0f 1f 00 0f 01 [ 3080.646060] RSP: 0018:ffff888056bbf7a8 EFLAGS: 00050246 [ 3080.646592] RAX: 0000000000000001 RBX: 0000000000000080 RCX: 0000000000000010 [ 3080.647277] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffff888056bbf878 [ 3080.647967] RBP: ffff888056bbf878 R08: 0000000000000001 R09: ffff888056bbf8f7 [ 3080.648674] R10: ffffed100ad77f1e R11: 0000000000000001 R12: 0000000020000100 [ 3080.649365] R13: 0000000020000080 R14: 00007ffffffff000 R15: 0000000000000000 [ 3080.650074] _copy_from_user+0x172/0x1b0 [ 3080.650480] move_addr_to_kernel.part.0+0x31/0x110 [ 3080.650958] move_addr_to_kernel+0x4f/0x70 [ 3080.651379] io_connect+0x47a/0x610 [ 3080.651748] ? io_prep_rw+0x1050/0x1050 [ 3080.652131] ? __lockdep_reset_lock+0x180/0x180 [ 3080.652613] ? lock_acquire+0x197/0x470 [ 3080.653032] ? __lock_acquire+0xbb1/0x5b00 [ 3080.653459] io_issue_sqe+0x1611/0x77b0 [ 3080.653872] ? perf_trace_lock+0xac/0x490 [ 3080.654248] ? SOFTIRQ_verbose+0x10/0x10 [ 3080.654591] ? lock_chain_count+0x20/0x20 [ 3080.654946] ? io_connect+0x610/0x610 [ 3080.655279] ? lock_acquire+0x197/0x470 [ 3080.655618] ? find_held_lock+0x2c/0x110 [ 3080.655972] ? __fget_files+0x2cf/0x520 [ 3080.656312] ? lock_downgrade+0x6d0/0x6d0 [ 3080.656695] __io_queue_sqe+0x90/0x9d0 [ 3080.657035] ? io_issue_sqe+0x77b0/0x77b0 [ 3080.657384] ? __fget_files+0x2f8/0x520 [ 3080.657735] io_submit_sqes+0x44aa/0x8610 [ 3080.658114] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3080.658536] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3080.658952] ? lock_downgrade+0x6d0/0x6d0 [ 3080.659300] ? find_held_lock+0x2c/0x110 [ 3080.659658] ? io_submit_sqes+0x8610/0x8610 [ 3080.660033] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3080.660446] ? wait_for_completion_io+0x270/0x270 [ 3080.660871] ? rcu_read_lock_any_held+0x75/0xa0 [ 3080.661271] ? vfs_write+0x354/0xb10 [ 3080.661604] ? fput_many+0x2f/0x1a0 [ 3080.661917] ? ksys_write+0x1a9/0x260 [ 3080.662246] ? __ia32_sys_read+0xb0/0xb0 [ 3080.662602] do_syscall_64+0x33/0x40 [ 3080.662921] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3080.663353] RIP: 0033:0x7f938c584b19 [ 3080.663673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3080.665311] RSP: 002b:00007f9389afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3080.666037] RAX: ffffffffffffffda RBX: 00007f938c697f60 RCX: 00007f938c584b19 [ 3080.666716] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3080.667403] RBP: 00007f9389afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3080.668088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3080.668787] R13: 00007ffef13b286f R14: 00007f9389afa300 R15: 0000000000022000 13:08:14 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 85) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:08:14 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005080)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000000000000700000089030900ff6d0000080000000000"], 0x18}}], 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='vxcan1\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @remote, 0xfffffffe}, 0x1c) clock_gettime(0x3, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000080)={r1, r2/1000+10000}, 0x10) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000008b, 0x4048000) 13:08:14 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:08:14 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8981, &(0x7f0000000080)={0x1, 'veth1_to_bridge\x00', {}, 0x83fd}) 13:08:14 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0x7b}) 13:08:14 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 13:08:14 executing program 6: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8]}, 0x8, 0x80800) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x2191, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000340)}, 0x1b0cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404e, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x5, r0, 0x0) r2 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x1f, 0x3f, 0x0, 0x81, 0x40000, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xac8, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x10000, 0x3, 0x2, 0x1, 0x9, 0x4282, 0x6, 0x0, 0x80, 0x0, 0x2}, 0xffffffffffffffff, 0x5, r1, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) fsmount(r3, 0x1, 0x1) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) 13:08:14 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffe3) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYRES64=r0]) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r5 = fcntl$dupfd(r4, 0x0, r3) write$evdev(r5, &(0x7f0000000000)=[{{}, 0x4, 0x3ff}], 0x18) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0x1, 0xfffffeff, 0x1ec8, 0xfffffffe, 0x99e}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r7, 0x0, 0x80000001) [ 3100.352829] FAULT_INJECTION: forcing a failure. [ 3100.352829] name failslab, interval 1, probability 0, space 0, times 0 [ 3100.355908] CPU: 0 PID: 39970 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 3100.357644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3100.359723] Call Trace: [ 3100.360405] dump_stack+0x107/0x167 [ 3100.361336] should_fail.cold+0x5/0xa [ 3100.362316] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3100.363608] ? create_object.isra.0+0x3a/0xa20 [ 3100.364745] should_failslab+0x5/0x20 [ 3100.365712] kmem_cache_alloc+0x5b/0x310 [ 3100.366881] ? mark_held_locks+0x9e/0xe0 [ 3100.367929] create_object.isra.0+0x3a/0xa20 [ 3100.369029] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3100.370324] kmem_cache_alloc_node+0x169/0x330 [ 3100.371490] __alloc_skb+0x6d/0x5b0 [ 3100.372429] skb_segment+0x9d8/0x3aa0 [ 3100.373469] ? skb_zerocopy_iter_stream+0x800/0x800 [ 3100.374714] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3100.376003] ? SOFTIRQ_verbose+0x10/0x10 [ 3100.377103] __udp_gso_segment+0x11c6/0x1830 [ 3100.378225] ? __sk_receive_skb+0x830/0x830 [ 3100.379312] udp4_ufo_fragment+0x528/0x720 [ 3100.380398] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 3100.381630] inet_gso_segment+0x4fb/0x11a0 [ 3100.382700] skb_mac_gso_segment+0x273/0x570 [ 3100.383784] ? inet_sock_destruct+0x840/0x840 [ 3100.384931] ? skb_network_protocol+0x650/0x650 [ 3100.386067] ? skb_crc32c_csum_help+0x80/0x80 [ 3100.387219] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3100.388514] __skb_gso_segment+0x32d/0x6d0 [ 3100.389616] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 3100.390902] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 3100.392041] __dev_queue_xmit+0x87b/0x2710 [ 3100.393172] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 3100.394356] ? mark_held_locks+0x9e/0xe0 [ 3100.395369] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3100.396677] neigh_connected_output+0x382/0x4d0 [ 3100.397865] ip_finish_output2+0x6f1/0x21f0 [ 3100.398952] ? nf_hook_slow+0xfc/0x1e0 [ 3100.399938] ? ip_frag_next+0x9e0/0x9e0 [ 3100.400930] ? skb_gso_transport_seglen+0x1ca/0x360 [ 3100.402211] __ip_finish_output.part.0+0x5f3/0xb50 [ 3100.403449] ? ip_fragment.constprop.0+0x240/0x240 [ 3100.404667] ? nf_hook+0x510/0x510 [ 3100.405597] ip_output+0x2f7/0x600 [ 3100.406504] ip_send_skb+0xdd/0x260 [ 3100.407447] udp_send_skb+0x6da/0x11d0 [ 3100.412258] udp_sendmsg+0x139a/0x2160 [ 3100.413238] ? tracing_generic_entry_update+0x1ed/0x270 [ 3100.414557] ? ip_frag_init+0x350/0x350 [ 3100.415541] ? tracing_generic_entry_update+0x1ed/0x270 [ 3100.416885] ? udp_setsockopt+0xc0/0xc0 [ 3100.417881] ? perf_event_switch_output+0x7d0/0x7d0 [ 3100.419184] ? lock_chain_count+0x20/0x20 [ 3100.420243] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 3100.421491] ? lock_chain_count+0x20/0x20 [ 3100.422522] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 3100.423750] ? perf_trace_lock+0x2bd/0x490 [ 3100.424841] ? perf_swevent_event+0x6c/0x550 [ 3100.425922] ? __lockdep_reset_lock+0x180/0x180 [ 3100.427096] udpv6_sendmsg+0x1bcf/0x2ad0 [ 3100.428100] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 3100.429430] ? udp_v6_push_pending_frames+0x360/0x360 [ 3100.430725] ? SOFTIRQ_verbose+0x10/0x10 [ 3100.431752] ? lock_acquire+0x197/0x470 [ 3100.432769] ? find_held_lock+0x2c/0x110 [ 3100.433803] ? __might_fault+0xd3/0x180 [ 3100.434797] ? lock_downgrade+0x6d0/0x6d0 [ 3100.435836] ? lock_downgrade+0x6d0/0x6d0 [ 3100.436902] ? sock_has_perm+0x1ea/0x280 [ 3100.437915] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3100.439218] ? _copy_from_user+0xfb/0x1b0 [ 3100.440286] ? __import_iovec+0x458/0x590 [ 3100.441347] ? udp_v6_push_pending_frames+0x360/0x360 [ 3100.442664] inet6_sendmsg+0x105/0x140 [ 3100.443689] ? inet6_compat_ioctl+0x320/0x320 [ 3100.444814] __sock_sendmsg+0xf2/0x190 [ 3100.445794] ____sys_sendmsg+0x70d/0x870 [ 3100.446840] ? sock_write_iter+0x3d0/0x3d0 [ 3100.447879] ? do_recvmmsg+0x6d0/0x6d0 [ 3100.448856] ? perf_trace_lock+0x2bd/0x490 [ 3100.449904] ? SOFTIRQ_verbose+0x10/0x10 [ 3100.450958] ? __lockdep_reset_lock+0x180/0x180 [ 3100.452159] ___sys_sendmsg+0xf3/0x170 [ 3100.453111] ? sendmsg_copy_msghdr+0x160/0x160 [ 3100.454303] ? __fget_files+0x2cf/0x520 [ 3100.455319] ? lock_downgrade+0x6d0/0x6d0 [ 3100.456347] ? find_held_lock+0x2c/0x110 [ 3100.457400] ? __fget_files+0x2f8/0x520 [ 3100.458411] ? __fget_light+0xea/0x290 [ 3100.459403] __sys_sendmsg+0xe5/0x1b0 [ 3100.460371] ? __sys_sendmsg_sock+0x40/0x40 [ 3100.461445] ? rcu_read_lock_any_held+0x75/0xa0 [ 3100.462646] do_syscall_64+0x33/0x40 [ 3100.463578] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3100.464849] RIP: 0033:0x7fa05acd5b19 [ 3100.465802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3100.470378] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3100.472263] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 3100.473383] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 3100.474169] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3100.475053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3100.475692] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 [ 3100.505962] FAULT_INJECTION: forcing a failure. [ 3100.505962] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3100.509037] CPU: 1 PID: 39978 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 3100.516503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3100.518553] Call Trace: [ 3100.519240] dump_stack+0x107/0x167 [ 3100.520110] should_fail.cold+0x5/0xa [ 3100.521070] __alloc_pages_nodemask+0x182/0x600 [ 3100.522274] ? lock_acquire+0x197/0x470 [ 3100.523270] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3100.524774] ? find_held_lock+0x2c/0x110 [ 3100.525792] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3100.527070] ? lock_downgrade+0x6d0/0x6d0 [ 3100.528097] ? mark_held_locks+0x9e/0xe0 [ 3100.529165] alloc_pages_current+0x187/0x280 [ 3100.530274] ? count_memcg_event_mm.part.0+0x2df/0x2f0 [ 3100.531556] ? replace_page_cache_page+0x1200/0x1200 [ 3100.532810] pte_alloc_one+0x16/0x1a0 [ 3100.533808] ? replace_page_cache_page+0x1200/0x1200 [ 3100.535060] handle_mm_fault+0x2ab2/0x3500 [ 3100.536111] ? __lock_acquire+0x1657/0x5b00 [ 3100.537241] ? find_held_lock+0x2c/0x110 [ 3100.538246] ? pgtable_bad+0x90/0x90 [ 3100.539114] ? __pmd_alloc+0x5e0/0x5e0 [ 3100.540080] ? vmacache_find+0x55/0x2a0 [ 3100.541088] do_user_addr_fault+0x56e/0xc60 [ 3100.542222] exc_page_fault+0xa2/0x1a0 [ 3100.543177] asm_exc_page_fault+0x1e/0x30 [ 3100.544209] RIP: 0010:copy_user_enhanced_fast_string+0x27/0x40 [ 3100.545666] Code: 0f 1f 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 f3 a4 31 c0 0f 01 ca e9 26 e9 1d 02 66 0f 1f 44 00 00 89 d1 83 f8 12 74 0c a4 89 c8 0f 01 ca e9 0d e9 1d 02 31 c0 0f 01 ca e9 03 e9 1d 02 [ 3100.551346] RSP: 0018:ffff8880614677a8 EFLAGS: 00050287 [ 3100.552658] RAX: 000000000000000e RBX: 0000000000000080 RCX: 0000000000000080 [ 3100.554455] RDX: 0000000000000080 RSI: 0000000020000080 RDI: ffff888061467878 [ 3100.556223] RBP: ffff888061467878 R08: 0000000000000001 R09: ffff8880614678f7 [ 3100.557969] R10: ffffed100c28cf1e R11: 0000000000000001 R12: 0000000020000100 [ 3100.559777] R13: 0000000020000080 R14: 00007ffffffff000 R15: 0000000000000000 [ 3100.561519] _copy_from_user+0x172/0x1b0 [ 3100.562446] move_addr_to_kernel.part.0+0x31/0x110 [ 3100.563572] move_addr_to_kernel+0x4f/0x70 [ 3100.564531] io_connect+0x47a/0x610 [ 3100.565394] ? io_prep_rw+0x1050/0x1050 [ 3100.566305] ? __lockdep_reset_lock+0x180/0x180 [ 3100.567364] ? lock_acquire+0x197/0x470 [ 3100.568307] ? __lock_acquire+0xbb1/0x5b00 [ 3100.569299] io_issue_sqe+0x1611/0x77b0 [ 3100.570207] ? perf_trace_lock+0xac/0x490 [ 3100.571112] ? SOFTIRQ_verbose+0x10/0x10 [ 3100.572035] ? lock_chain_count+0x20/0x20 [ 3100.573007] ? io_connect+0x610/0x610 [ 3100.573904] ? lock_acquire+0x197/0x470 [ 3100.574814] ? find_held_lock+0x2c/0x110 [ 3100.575750] ? __fget_files+0x2cf/0x520 [ 3100.576662] ? lock_downgrade+0x6d0/0x6d0 [ 3100.577640] __io_queue_sqe+0x90/0x9d0 [ 3100.578556] ? io_issue_sqe+0x77b0/0x77b0 [ 3100.579503] ? __fget_files+0x2f8/0x520 [ 3100.580422] io_submit_sqes+0x44aa/0x8610 [ 3100.581427] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3100.582548] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3100.583666] ? lock_downgrade+0x6d0/0x6d0 [ 3100.584605] ? find_held_lock+0x2c/0x110 [ 3100.585567] ? io_submit_sqes+0x8610/0x8610 [ 3100.586555] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3100.587669] ? wait_for_completion_io+0x270/0x270 [ 3100.588791] ? rcu_read_lock_any_held+0x75/0xa0 [ 3100.589863] ? vfs_write+0x354/0xb10 [ 3100.590723] ? fput_many+0x2f/0x1a0 [ 3100.591569] ? ksys_write+0x1a9/0x260 [ 3100.592464] ? __ia32_sys_read+0xb0/0xb0 [ 3100.593436] do_syscall_64+0x33/0x40 [ 3100.594294] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3100.595460] RIP: 0033:0x7f938c584b19 [ 3100.596332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3100.600504] RSP: 002b:00007f9389afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3100.602288] RAX: ffffffffffffffda RBX: 00007f938c697f60 RCX: 00007f938c584b19 [ 3100.603869] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3100.605538] RBP: 00007f9389afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3100.607185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3100.608812] R13: 00007ffef13b286f R14: 00007f9389afa300 R15: 0000000000022000 13:08:15 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:08:15 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 13:08:15 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c808) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 86) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/131, 0x83}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x8d0c, 0x0, 0x0, 0x100800, &(0x7f0000001fc0)=ANY=[]) 13:08:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000015c0)=ANY=[@ANYBLOB="cc000800040000008537bf404134bea3596802aeca0f25"]) 13:08:15 executing program 1: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r3, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe9}, {0x6, 0x11, 0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004001}, 0x20004090) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:08:15 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000005c0)={&(0x7f0000000040), 0x6e, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/238, 0xee}, {&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f00000003c0)=""/204, 0xcc}, {&(0x7f00000001c0)=""/3, 0x3}, {&(0x7f0000000200)=""/70, 0x46}], 0x5, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x2000) openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0x4000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, r2) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:08:15 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="3439e946a4dfa6ccef91100000000000000000"], 0x28}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001600)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001300)=""/119, 0x77}, {&(0x7f0000001380)=""/178, 0xb2}, {&(0x7f0000001440)=""/201, 0xc9}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x4, 0xfc, 0x10001) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x8001, 0x4) add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000015c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x30, 0xa, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x40) syz_open_procfs(0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x1c7a02, 0x0) unshare(0x48020200) [ 3100.911798] FAULT_INJECTION: forcing a failure. [ 3100.911798] name failslab, interval 1, probability 0, space 0, times 0 [ 3100.914868] CPU: 1 PID: 40292 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 3100.916612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3100.918799] Call Trace: [ 3100.919413] dump_stack+0x107/0x167 [ 3100.923348] should_fail.cold+0x5/0xa [ 3100.924061] ? ptlock_alloc+0x1d/0x70 [ 3100.925620] should_failslab+0x5/0x20 [ 3100.926506] kmem_cache_alloc+0x5b/0x310 [ 3100.927452] ptlock_alloc+0x1d/0x70 [ 3100.928193] pte_alloc_one+0x68/0x1a0 [ 3100.928984] ? replace_page_cache_page+0x1200/0x1200 [ 3100.929977] handle_mm_fault+0x2ab2/0x3500 [ 3100.930818] ? __lock_acquire+0x1657/0x5b00 [ 3100.931692] ? find_held_lock+0x2c/0x110 [ 3100.932487] ? pgtable_bad+0x90/0x90 [ 3100.933376] ? __pmd_alloc+0x5e0/0x5e0 [ 3100.934286] ? vmacache_find+0x55/0x2a0 [ 3100.935186] do_user_addr_fault+0x56e/0xc60 [ 3100.935987] exc_page_fault+0xa2/0x1a0 [ 3100.936777] asm_exc_page_fault+0x1e/0x30 [ 3100.937798] RIP: 0010:copy_user_enhanced_fast_string+0x27/0x40 [ 3100.938951] Code: 0f 1f 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 f3 a4 31 c0 0f 01 ca e9 26 e9 1d 02 66 0f 1f 44 00 00 89 d1 83 f8 12 74 0c a4 89 c8 0f 01 ca e9 0d e9 1d 02 31 c0 0f 01 ca e9 03 e9 1d 02 [ 3100.943102] RSP: 0018:ffff88806148f7a8 EFLAGS: 00050287 [ 3100.944213] RAX: 000000000000000e RBX: 0000000000000080 RCX: 0000000000000080 [ 3100.945110] RDX: 0000000000000080 RSI: 0000000020000080 RDI: ffff88806148f878 [ 3100.946071] RBP: ffff88806148f878 R08: 0000000000000001 R09: ffff88806148f8f7 [ 3100.946718] R10: ffffed100c291f1e R11: 0000000000000001 R12: 0000000020000100 [ 3100.947358] R13: 0000000020000080 R14: 00007ffffffff000 R15: 0000000000000000 [ 3100.947980] _copy_from_user+0x172/0x1b0 [ 3100.948400] move_addr_to_kernel.part.0+0x31/0x110 [ 3100.948962] move_addr_to_kernel+0x4f/0x70 [ 3100.949791] io_connect+0x47a/0x610 [ 3100.950475] ? io_prep_rw+0x1050/0x1050 [ 3100.951194] ? __lockdep_reset_lock+0x180/0x180 [ 3100.952012] ? lock_acquire+0x197/0x470 [ 3100.952801] ? __lock_acquire+0xbb1/0x5b00 [ 3100.953585] io_issue_sqe+0x1611/0x77b0 [ 3100.954337] ? perf_trace_lock+0xac/0x490 [ 3100.955050] ? SOFTIRQ_verbose+0x10/0x10 [ 3100.955797] ? lock_chain_count+0x20/0x20 [ 3100.956586] ? io_connect+0x610/0x610 [ 3100.957499] ? lock_acquire+0x197/0x470 [ 3100.958231] ? find_held_lock+0x2c/0x110 [ 3100.958937] ? __fget_files+0x2cf/0x520 [ 3100.959707] ? lock_downgrade+0x6d0/0x6d0 [ 3100.960499] __io_queue_sqe+0x90/0x9d0 [ 3100.961359] ? io_issue_sqe+0x77b0/0x77b0 [ 3100.962079] ? __fget_files+0x2f8/0x520 [ 3100.962829] io_submit_sqes+0x44aa/0x8610 [ 3100.963633] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3100.964563] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3100.965070] ? lock_downgrade+0x6d0/0x6d0 [ 3100.965463] ? find_held_lock+0x2c/0x110 [ 3100.965820] ? io_submit_sqes+0x8610/0x8610 [ 3100.966241] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3100.966653] ? wait_for_completion_io+0x270/0x270 [ 3100.967064] ? rcu_read_lock_any_held+0x75/0xa0 [ 3100.967512] ? vfs_write+0x354/0xb10 [ 3100.967830] ? fput_many+0x2f/0x1a0 [ 3100.968202] ? ksys_write+0x1a9/0x260 [ 3100.968535] ? __ia32_sys_read+0xb0/0xb0 [ 3100.968948] do_syscall_64+0x33/0x40 [ 3100.969310] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3100.969740] RIP: 0033:0x7f938c584b19 [ 3100.970057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3100.971674] RSP: 002b:00007f9389afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3100.972397] RAX: ffffffffffffffda RBX: 00007f938c697f60 RCX: 00007f938c584b19 [ 3100.973046] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3100.973684] RBP: 00007f9389afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3100.974328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3100.974923] R13: 00007ffef13b286f R14: 00007f9389afa300 R15: 0000000000022000 [ 3100.990569] FAULT_INJECTION: forcing a failure. [ 3100.990569] name failslab, interval 1, probability 0, space 0, times 0 [ 3100.991681] CPU: 1 PID: 40297 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 3100.992375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3100.993268] Call Trace: [ 3100.993500] dump_stack+0x107/0x167 [ 3100.993813] should_fail.cold+0x5/0xa [ 3100.994180] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3100.994635] ? create_object.isra.0+0x3a/0xa20 [ 3100.995026] should_failslab+0x5/0x20 [ 3100.995409] kmem_cache_alloc+0x5b/0x310 [ 3100.995848] create_object.isra.0+0x3a/0xa20 [ 3100.996292] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3100.996762] kmem_cache_alloc_node+0x169/0x330 [ 3100.997829] __alloc_skb+0x6d/0x5b0 [ 3100.998525] skb_segment+0x9d8/0x3aa0 [ 3100.999242] ? lock_chain_count+0x20/0x20 [ 3101.000096] ? skb_zerocopy_iter_stream+0x800/0x800 [ 3101.001161] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3101.002079] ? SOFTIRQ_verbose+0x10/0x10 [ 3101.002836] __udp_gso_segment+0x11c6/0x1830 [ 3101.003651] ? __sk_receive_skb+0x830/0x830 [ 3101.004478] udp4_ufo_fragment+0x528/0x720 [ 3101.004980] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 3101.005450] inet_gso_segment+0x4fb/0x11a0 [ 3101.005826] skb_mac_gso_segment+0x273/0x570 [ 3101.006249] ? inet_sock_destruct+0x840/0x840 [ 3101.006629] ? skb_network_protocol+0x650/0x650 [ 3101.007021] ? skb_crc32c_csum_help+0x80/0x80 [ 3101.007457] ? lock_acquire+0x197/0x470 [ 3101.007794] ? __dev_queue_xmit+0x1c2/0x2710 [ 3101.008242] __skb_gso_segment+0x32d/0x6d0 [ 3101.008610] validate_xmit_skb.constprop.0+0x4fe/0xda0 [ 3101.009108] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 3101.009541] __dev_queue_xmit+0x87b/0x2710 [ 3101.009914] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 3101.010360] ? mark_held_locks+0x9e/0xe0 [ 3101.010711] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3101.011216] neigh_connected_output+0x382/0x4d0 [ 3101.011634] ip_finish_output2+0x6f1/0x21f0 [ 3101.012004] ? nf_hook_slow+0xfc/0x1e0 [ 3101.012406] ? ip_frag_next+0x9e0/0x9e0 [ 3101.012824] ? skb_gso_transport_seglen+0x1ca/0x360 [ 3101.013305] __ip_finish_output.part.0+0x5f3/0xb50 [ 3101.013725] ? ip_fragment.constprop.0+0x240/0x240 [ 3101.014176] ? nf_hook+0x510/0x510 [ 3101.014500] ip_output+0x2f7/0x600 [ 3101.014809] ip_send_skb+0xdd/0x260 [ 3101.015166] udp_send_skb+0x6da/0x11d0 [ 3101.015523] udp_sendmsg+0x139a/0x2160 [ 3101.015853] ? mark_lock+0xf5/0x2df0 [ 3101.016245] ? ip_frag_init+0x350/0x350 [ 3101.016585] ? lock_chain_count+0x20/0x20 [ 3101.016958] ? udp_setsockopt+0xc0/0xc0 [ 3101.017344] ? mark_lock+0xf5/0x2df0 [ 3101.017665] ? __lockdep_reset_lock+0x180/0x180 [ 3101.018060] ? lock_chain_count+0x20/0x20 [ 3101.018461] ? mark_lock+0xf5/0x2df0 [ 3101.018783] ? mark_lock+0xf5/0x2df0 [ 3101.019102] ? lock_chain_count+0x20/0x20 [ 3101.019504] ? __lock_acquire+0xbb1/0x5b00 [ 3101.019865] ? lock_chain_count+0x20/0x20 [ 3101.020301] ? perf_trace_lock+0xac/0x490 [ 3101.020653] ? SOFTIRQ_verbose+0x10/0x10 [ 3101.021012] ? __lockdep_reset_lock+0x180/0x180 [ 3101.021466] udpv6_sendmsg+0x1bcf/0x2ad0 [ 3101.021830] ? udp_v6_push_pending_frames+0x360/0x360 [ 3101.029750] ? SOFTIRQ_verbose+0x10/0x10 [ 3101.030114] ? mark_lock+0xf5/0x2df0 [ 3101.030576] ? lock_acquire+0x197/0x470 [ 3101.030971] ? find_held_lock+0x2c/0x110 [ 3101.031440] ? __might_fault+0xd3/0x180 [ 3101.031779] ? lock_downgrade+0x6d0/0x6d0 [ 3101.032226] ? lock_downgrade+0x6d0/0x6d0 [ 3101.032584] ? sock_has_perm+0x1ea/0x280 [ 3101.032960] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3101.033452] ? _copy_from_user+0xfb/0x1b0 [ 3101.033820] ? __import_iovec+0x458/0x590 [ 3101.034248] ? udp_v6_push_pending_frames+0x360/0x360 [ 3101.034693] inet6_sendmsg+0x105/0x140 [ 3101.035025] ? inet6_compat_ioctl+0x320/0x320 [ 3101.035453] __sock_sendmsg+0xf2/0x190 [ 3101.035788] ____sys_sendmsg+0x70d/0x870 [ 3101.036178] ? sock_write_iter+0x3d0/0x3d0 [ 3101.036543] ? do_recvmmsg+0x6d0/0x6d0 [ 3101.036894] ? SOFTIRQ_verbose+0x10/0x10 [ 3101.037282] ? lock_downgrade+0x6d0/0x6d0 [ 3101.037639] ? __lockdep_reset_lock+0x180/0x180 [ 3101.038031] ? SOFTIRQ_verbose+0x10/0x10 [ 3101.038456] ___sys_sendmsg+0xf3/0x170 [ 3101.038791] ? sendmsg_copy_msghdr+0x160/0x160 [ 3101.039232] ? __fget_files+0x2cf/0x520 [ 3101.039573] ? lock_downgrade+0x6d0/0x6d0 [ 3101.039928] ? find_held_lock+0x2c/0x110 [ 3101.040334] ? __fget_files+0x2f8/0x520 [ 3101.040684] ? __fget_light+0xea/0x290 [ 3101.041035] __sys_sendmsg+0xe5/0x1b0 [ 3101.041407] ? __sys_sendmsg_sock+0x40/0x40 [ 3101.041776] ? rcu_read_lock_any_held+0x75/0xa0 [ 3101.042273] do_syscall_64+0x33/0x40 [ 3101.042593] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3101.043025] RIP: 0033:0x7fa05acd5b19 [ 3101.043390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3101.044983] RSP: 002b:00007fa05824b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3101.045673] RAX: ffffffffffffffda RBX: 00007fa05ade8f60 RCX: 00007fa05acd5b19 [ 3101.046342] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 3101.047484] RBP: 00007fa05824b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3101.048601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3101.049321] R13: 00007fffcfee792f R14: 00007fa05824b300 R15: 0000000000022000 13:08:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x49c0, 0x4) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f00000001c0)="3181def402029928", 0x8}], 0x1}}], 0x1, 0x0) read(r0, &(0x7f0000000000)=""/2, 0x2) 13:08:15 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, @qipcrtr={0x2a, 0x3, 0x2}, @generic={0x28, "e8872b15caad322813379315aedd"}, @xdp={0x2c, 0x4, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x4, 0x4, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:08:15 executing program 3: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x131800, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x32) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee00}}], [{@subj_user={'subj_user', 0x3d, 'veth1_vlan\x00'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fsname={'fsname', 0x3d, '#+/{\xb9[}\\]'}}, {@appraise_type}, {@obj_role={'obj_role', 0x3d, 'veth1_vlan\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'veth1_vlan\x00'}}, {@seclabel}]}}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r3 = socket$inet(0x2, 0x2, 0x0) recvfrom$inet(r0, &(0x7f0000000940)=""/4096, 0x1000, 0x20000003, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8981, &(0x7f0000000280)={0x1, 'veth1_vlan\x00', {}, 0xa90}) 13:08:15 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) [ 3101.351142] FAULT_INJECTION: forcing a failure. [ 3101.351142] name failslab, interval 1, probability 0, space 0, times 0 [ 3101.352170] CPU: 1 PID: 40613 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 3101.352768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3101.353464] Call Trace: [ 3101.353700] dump_stack+0x107/0x167 [ 3101.354016] should_fail.cold+0x5/0xa [ 3101.354348] ? create_object.isra.0+0x3a/0xa20 [ 3101.354740] should_failslab+0x5/0x20 [ 3101.355068] kmem_cache_alloc+0x5b/0x310 [ 3101.355417] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3101.355934] create_object.isra.0+0x3a/0xa20 [ 3101.356314] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3101.356772] kmem_cache_alloc+0x159/0x310 [ 3101.357142] ptlock_alloc+0x1d/0x70 [ 3101.357462] pte_alloc_one+0x68/0x1a0 [ 3101.357792] ? replace_page_cache_page+0x1200/0x1200 [ 3101.358228] handle_mm_fault+0x2ab2/0x3500 [ 3101.358598] ? __lock_acquire+0x1657/0x5b00 [ 3101.358969] ? find_held_lock+0x2c/0x110 [ 3101.359319] ? pgtable_bad+0x90/0x90 [ 3101.359648] ? __pmd_alloc+0x5e0/0x5e0 [ 3101.359994] ? vmacache_find+0x55/0x2a0 [ 3101.360348] do_user_addr_fault+0x56e/0xc60 [ 3101.360737] exc_page_fault+0xa2/0x1a0 [ 3101.361081] asm_exc_page_fault+0x1e/0x30 [ 3101.361441] RIP: 0010:copy_user_enhanced_fast_string+0x27/0x40 [ 3101.361946] Code: 0f 1f 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 f3 a4 31 c0 0f 01 ca e9 26 e9 1d 02 66 0f 1f 44 00 00 89 d1 83 f8 12 74 0c a4 89 c8 0f 01 ca e9 0d e9 1d 02 31 c0 0f 01 ca e9 03 e9 1d 02 [ 3101.363500] RSP: 0018:ffff8880567777a8 EFLAGS: 00050287 [ 3101.363957] RAX: 000000000000000e RBX: 0000000000000080 RCX: 0000000000000080 [ 3101.364561] RDX: 0000000000000080 RSI: 0000000020000080 RDI: ffff888056777878 [ 3101.365182] RBP: ffff888056777878 R08: 0000000000000001 R09: ffff8880567778f7 [ 3101.365785] R10: ffffed100aceef1e R11: 0000000000000001 R12: 0000000020000100 [ 3101.366389] R13: 0000000020000080 R14: 00007ffffffff000 R15: 0000000000000000 [ 3101.367022] _copy_from_user+0x172/0x1b0 [ 3101.367377] move_addr_to_kernel.part.0+0x31/0x110 [ 3101.367799] move_addr_to_kernel+0x4f/0x70 [ 3101.368168] io_connect+0x47a/0x610 [ 3101.368492] ? io_prep_rw+0x1050/0x1050 [ 3101.368847] ? __lockdep_reset_lock+0x180/0x180 [ 3101.369255] ? lock_acquire+0x197/0x470 [ 3101.369606] ? __lock_acquire+0xbb1/0x5b00 [ 3101.369976] io_issue_sqe+0x1611/0x77b0 [ 3101.370327] ? perf_trace_lock+0xac/0x490 [ 3101.370685] ? SOFTIRQ_verbose+0x10/0x10 [ 3101.371034] ? lock_chain_count+0x20/0x20 [ 3101.371395] ? io_connect+0x610/0x610 [ 3101.371732] ? lock_acquire+0x197/0x470 [ 3101.372073] ? find_held_lock+0x2c/0x110 [ 3101.372434] ? __fget_files+0x2cf/0x520 [ 3101.372790] ? lock_downgrade+0x6d0/0x6d0 [ 3101.373152] __io_queue_sqe+0x90/0x9d0 [ 3101.373493] ? io_issue_sqe+0x77b0/0x77b0 [ 3101.373847] ? __fget_files+0x2f8/0x520 [ 3101.374204] io_submit_sqes+0x44aa/0x8610 [ 3101.374588] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3101.375016] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 3101.375431] ? lock_downgrade+0x6d0/0x6d0 [ 3101.375784] ? find_held_lock+0x2c/0x110 [ 3101.376138] ? io_submit_sqes+0x8610/0x8610 [ 3101.376516] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3101.376949] ? wait_for_completion_io+0x270/0x270 [ 3101.377366] ? rcu_read_lock_any_held+0x75/0xa0 [ 3101.377765] ? vfs_write+0x354/0xb10 [ 3101.378086] ? fput_many+0x2f/0x1a0 [ 3101.378400] ? ksys_write+0x1a9/0x260 [ 3101.378729] ? __ia32_sys_read+0xb0/0xb0 [ 3101.379089] do_syscall_64+0x33/0x40 [ 3101.379413] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3101.379852] RIP: 0033:0x7f938c584b19 [ 3101.380173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3101.381730] RSP: 002b:00007f9389afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3101.382378] RAX: ffffffffffffffda RBX: 00007f938c697f60 RCX: 00007f938c584b19 [ 3101.382981] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3101.383581] RBP: 00007f9389afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3101.384184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3101.384799] R13: 00007ffef13b286f R14: 00007f9389afa300 R15: 0000000000022000 VM DIAGNOSIS: 13:13:22 Registers: info registers vcpu 0 RAX=ffffffff83e75230 RBX=0000000000000000 RCX=ffffffff83e5d02c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e75838 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85675808 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e7523e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe72aa5c010 CR3=000000000e51e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004185fb7ec0000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e75230 RBX=0000000000000001 RCX=ffffffff83e5d02c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e75838 RBP=ffffed1001130000 RSP=ffff88800898fe70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85675808 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e7523e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7ead0bc318 CR3=000000000e51e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000006000000030000000200000000 XMM02=006e65672063657865080a0100010101 XMM03=78650d0065676169727420636578650b XMM04=6578650a00657a696d696e696d206365 XMM05=6f7420636578650a0073646565732063 XMM06=657220726f74756365786511006c6174 XMM07=616d7320636578650a00737472617473 XMM08=676169727420636578650b006e656720 XMM09=657a696d696e696d20636578650d0065 XMM10=78650a00736465657320636578650a00 XMM11=74756365786511006c61746f74206365 XMM12=6578650a00737472617473657220726f XMM13=696820636578650a006873616d732063 XMM14=0e007a7a75662063657865090073746e XMM15=00006574616469646e61632063657865